Attrely

Privacy notice

This text is published while legal review is pending. The company registration number and sub-processor list will be completed.

Last updated: October 5, 2026

1. Data controller

This notice is issued by PNC Reklam Danışmanlık ve Yapay Zeka Hizmetleri Ticaret Anonim Şirketi (“Attrely”), which operates the Attrely service. Address: Emniyet Evleri Mah. Eski Büyükdere Cad. Sapphire No: 1/1 İç Kapı No: 1B04, Kağıthane, Istanbul. Trade registry number: to be added.

2. Two groups of data

Attrely processes two groups of data: (a) account and usage data of customers who use the Attrely dashboard; (b) pseudonymous measurement data of end users who visit our customers' websites and apps, collected with consent. For end-user data, the customer who runs the measurement is the controller and Attrely acts as processor.

3. Data processed

Dashboard users: email, role, sign-in and audit records. End users: random visitor and install identifiers, click identifier, event type and time, page path without query strings, revenue and currency, consent state. Raw IP addresses are not stored; only a salted hash is kept. Personal fields such as email, phone and name are not sent by the SDK.

4. Purposes and legal basis

End-user measurement data is processed on the basis of the user's explicit consent, collected through the SDK. Dashboard user data is processed for the performance of the contract and for security and fraud prevention. The detailed legal basis will be finalised after legal review.

5. Residency and transfers

A property is stored in the region selected for it (currently Turkey). Data is not transferred between regions automatically. Ad platforms from which spend is retrieved only provide campaign-level aggregates; user-level data is not sent to them. Hosting provider: İHS (Turkey); other sub-processors will be listed before publication.

6. Retention

Event data is deleted automatically after the period set for each property (395 days by default). Backups have a separate 30-day retention period.

7. Consent

End-user consent is collected through the customer's consent prompt. When consent is withdrawn, the related identifiers and pending data on the device are deleted and no new events are sent.

8. Your rights

Under Article 11 of Turkey's KVKK and under the GDPR, you may request information, correction, deletion and object to processing. Dashboard users should contact Attrely directly. End users should contact the website or app owner. Requests: info@pnc.com.tr.

9. Cookies

The Attrely SDK does not set cookies. It uses local storage only after consent and clears it when consent is withdrawn. The dashboard session cookie (HttpOnly, Secure, SameSite=Strict) is used only for sign-in.

10. Changes

This notice may change. Material changes are announced in the dashboard. Last updated: October 5, 2026.

For questions, contact: info@pnc.com.tr