Privacy Policy
Version 3 · Sep 8, 2026, 12:29 AM
1. Scope
This policy explains how your data is collected, what it is used for, who it is shared with and how long it is kept when you use the services at rmy-software.com. The data controller is RMY YAZILIM REKLAM HİZMETLERİ SANAYİ VE TİCARET LİMİTED ŞİRKETİ.
The statutory disclosure on the processing of personal data is in the Data Protection Notice; cookies are covered separately in the Cookie Policy.
2. Data we collect
| Group | Data |
|---|---|
| Account | Name, e-mail address, phone number, hashed password, language and theme preference |
| Orders | Order number, products, amount, order status, delivery time, billing details (individual or corporate) |
| Payments | The amount, date, description and sender name of the bank transaction — used to match the payment with your order. No card data is collected; card payment is not accepted. |
| Technical | IP address, browser and device information, session records, transaction timestamps, error logs |
| Steam | If you use the Skin Market: Steam ID, trade URL, trade records and publicly visible inventory information |
| Communication | Support requests, attachments you send and message history |
3. How we collect it
- Directly from you — during registration, checkout, support requests and account settings.
- Automatically — through server logs and strictly necessary cookies as you use the site.
- From third parties — the basic account information shared by Google or Steam when you sign in with them, and account movements received from the bank.
4. What we use it for
- Creating your order, matching your payment and delivering the product.
- Issuing invoices and meeting obligations under tax legislation.
- Sending order status, payment reminder and delivery notifications.
- Answering your support requests.
- Preventing fraud and abuse: detecting stock-locking behaviour, reviewing risky transactions and requesting phone verification where necessary.
- Improving the service, including search results and catalogue layout.
- Sending campaign and announcement messages, only if you have consented.
5. Who we share it with
Your data is never sold and is not transferred to third parties for marketing. It is shared only to the extent required to run the service:
- Hosting and infrastructure: [BARINDIRMA SAĞLAYICISI], [VERİTABANI SAĞLAYICISI]
- E-mail delivery: [E-POSTA SAĞLAYICISI]
- SMS delivery: [SMS SAĞLAYICISI]
- Banks: in the context of payment matching
- Valve Corporation (Steam): only when the Skin Market is used, to carry out the trade
- Accountants and auditors: in the context of invoices and accounting records
- Competent public authorities: where required by law
6. International transfers
Part of the hosting, e-mail and Steam infrastructure we use is located abroad. Such transfers are carried out in accordance with Article 9 of Law no. 6698, relying on an adequacy decision, appropriate safeguards (including standard contractual clauses) or the exceptions set out in the Law.
7. Retention periods
| Data | Period |
|---|---|
| Account information | For as long as the membership continues |
| Order, invoice and payment records | 10 years, as required by tax legislation |
| Contract acknowledgements | Throughout the limitation period |
| Traffic and access logs | The period prescribed under Law no. 5651 |
| Support conversations | 3 years after the request is closed |
| Trade records | 3 years |
Once the period ends, data is deleted, destroyed or anonymised.
8. Security
- All traffic is encrypted over HTTPS.
- Passwords are stored as irreversible hashes.
- Undelivered digital codes are stored encrypted in the database.
- Permission to reveal codes is limited to a small number of users, and every reveal is written to the audit log.
- Sessions are time-limited; you can end active sessions and enable two-factor authentication from your account.
- Rate limiting and bot protection are applied to sign-in and order endpoints.
9. Your rights
You have the right to access, rectify and erase your data, to object to processing and to learn the parties your data has been transferred to. The full list of rights and the application procedure are set out in the Data Protection Notice. Requests can be sent to [email protected].
10. Children's privacy
Our services are not intended for anyone under 18 and we do not knowingly collect data from that age group. If we learn of such an account we close it and delete the data.
11. Changes
This policy may be updated. An updated text takes effect when published on the Site and receives a new version number; previously published versions are never modified.
12. Contact
RMY YAZILIM REKLAM HİZMETLERİ SANAYİ VE TİCARET LİMİTED ŞİRKETİ · Gazipaşa Mah. 865 Sk. Akalan Evleri C Blok No: 4 C İç Kapı No: 1, Menderes / İzmir
E-mail: [email protected] · Support: [email protected] · Phone: [TELEFON NUMARASI]