Privacy Policy (GDPR / UK GDPR)
Last updated: 30 October 2026
This policy explains how Warnitor processes personal data of users in the European Economic Area (EEA) and the United Kingdom under Regulation (EU) 2016/679 (GDPR), the UK GDPR and the UK Data Protection Act 2018.
1. Controller
COREALL TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ, GÖZTEPE MAH. TEPEGÖZ SK. IKAR IŞ MERKEZI NO: 1 İÇ KAPI NO: 8 KADIKÖY / İSTANBUL, Türkiye ("Warnitor", "we"). Contact: [email protected]
2. Data we process
| Category | Examples |
|---|---|
| Account data | Name, email, company, hashed password |
| Billing data | Plan, invoices, country, VAT ID (card data is handled only by our payment provider) |
| Notification data | Alert email addresses, Telegram chat ID |
| Monitoring data | URLs, domains, IP addresses, ports you add, and their check results |
| Uploaded logs | Log files you send for AI incident reports (may contain IP addresses or other data) |
| Technical data | IP address, browser, device, login times, security logs |
| Communications | Messages sent via contact or support forms |
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Providing the service, alerts and AI reports | (b) contract |
| Billing, tax and accounting | (b) contract, (c) legal obligation |
| Security, fraud and abuse prevention | (f) legitimate interest |
| Improving the product (aggregated usage) | (f) legitimate interest |
| Support and replying to inquiries | (b) contract or (f) legitimate interest |
| Marketing emails | (a) consent, withdrawable at any time |
| Non-essential cookies | (a) consent (see Cookie Policy) |
4. Data you upload about others
For monitoring targets and uploaded logs, you decide what is processed. For that data we act as your processor under Art. 28 GDPR. Do not upload logs containing more personal data than needed; mask it where possible.
5. Recipients
We share data only with service providers acting on our instructions, and only as needed:
- Hosting and infrastructure: Superonline, Türkiye
- Email delivery: Microsoft, Europe
- AI processing of incident reports: Microsoft, Sweden (no training on your data under our contract)
- Telegram (only if you enable Telegram alerts)
- Payment provider Paddle, United Kingdom, which acts as merchant of record and processes payment data as an independent controller under its own privacy policy
We may disclose data to authorities where required by law.
6. International transfers
Our company is in Türkiye, which has no EU or UK adequacy decision. Transfers to Türkiye and to other third countries are protected by the European Commission's Standard Contractual Clauses (and the UK Addendum / IDTA for UK data). You can request a copy at the contact address above.
7. Retention
- Check results and incident history: per plan (Free 1 day, Basic 30 days, Pro and Advanced 365 days)
- Uploaded logs: 365 days, then deleted
- Account data: for the duration of the contract, then deleted within 30 days
- Invoices and accounting records: as required by law (Turkish Commercial Code: 10 years)
8. Your rights
You have the right to access, rectification, erasure, restriction, data portability and withdrawal of consent (Art. 15–20 GDPR).
Right to object (Art. 21): You may object at any time to processing based on legitimate interest, and to direct marketing without giving reasons.
Send requests to [email protected]. We reply within one month.
You may lodge a complaint with the supervisory authority of your country of residence or work. In the UK: Information Commissioner's Office (ico.org.uk).
9. Security
We use encryption in transit, access controls, hashed passwords and logging. No system is fully secure; we will notify you and the authorities of breaches as required by law.
10. Children
Warnitor is a business service and is not intended for persons under 18.
11. Changes
We will post changes on this page and notify you by email of material changes.
Contact forms use Cloudflare Turnstile to prevent spam. Cloudflare processes browser and network signals for this security check. It is independent of optional analytics and marketing consent; this application does not enable Turnstile pre-clearance cookies.