Last updated: 1 September 2026
1. Scope
This policy explains how personal data is processed on the mindvisor.ai website. The data controller is Mindvisor Education Group Teknoloji Anonim Şirketi, the company that operates the site, at Dadaşlar Sokak Aydoğan Plaza No: 23, Altunizade, Üsküdar, Istanbul.
The policy covers this site only. Third-party services you reach through links on the site are governed by their own privacy policies.
There is no sign-up, account or payment step on this site. You share personal data with us only if you fill in the contact or support form; you are free to browse the site without doing so.
2. Categories of Personal Data
We process only what you type into the form yourself, plus the technical record created by cookies. The data collected is limited to these categories:
- Identity data: the name you enter in the form.
- Contact data: your e-mail address and phone number.
- Content of your request: what you write in the subject and message fields.
- Cookie data: the mv_consent cookie that stores your cookie choice and, if you grant performance consent, Google Analytics cookies.
We do not ask for special categories of personal data (such as health, belief or biometric data) in the form. Please do not enter anything the handling of your request does not require.
3. How We Collect Data
When you submit the form, what you wrote travels from your browser to the site's server and is sent from there by e-mail to the company's contact address. The site keeps no database of these messages; your message stays in the company's e-mail accounts.
Cookies, in turn, are written to your browser when you visit the site. Apart from the essential cookie, no cookie is written at all unless you consent in the cookie panel.
4. Purposes of Processing
We process your data for the following purposes only:
- To assess the question, request or complaint you sent through the form and to get back to you.
- To provide information about our services: academic support, AI-powered university matching, live teacher support, advisory services, application process management, data analytics and insights, and our corporate consulting work.
- To remember your cookie choice and keep a record of the consent you gave.
- If you granted performance consent, to see in aggregate statistics which pages of the site are used and how, and to improve the site accordingly.
- To meet obligations arising from legislation and to respond to lawful requests from competent public authorities.
We do not use your data for anything beyond these purposes. We do not sell it to anyone, and we do not add you to marketing lists without your permission.
5. Legal Grounds for Processing
Our processing rests on the following grounds in Article 5 of the Turkish Personal Data Protection Law No. 6698 (KVKK):
- Directly related to the conclusion or performance of a contract (Art. 5/2-c): answering requests for information and quotes about our services.
- Legitimate interests of the data controller (Art. 5/2-f): being able to reply to the request you sent us and keeping the site secure.
- Compliance with a legal obligation (Art. 5/2-ç): the retention and disclosure duties imposed by legislation.
- Explicit consent (Art. 5/1): non-essential cookies and the measurement carried out through them rest on your explicit consent alone.
You may withdraw consent-based processing at any time; changing your choice in the panel on the Cookie Policy page is enough to do so.
6. Transfer of Data
As a rule we do not transfer your personal data to third parties in Türkiye or abroad. The message you send through the form arrives in the company's e-mail accounts and is not shared with anyone beyond the people handling your request.
The only transfer abroad we know of today is Google Analytics. If you consent to performance cookies, measurement data about your visit is processed by Google outside Türkiye. If you do not consent, that transfer does not happen and the Google Analytics code is not loaded into your browser.
The contact page contains an embedded Google Maps frame showing the location of our office. The content inside that frame is loaded directly from Google and is subject to Google's own policies.
Beyond this, we share your data only upon lawful requests from public authorities empowered by law, in line with the conditions in Articles 8 and 9 of the KVKK.
7. Retention Period
We keep your personal data for the periods prescribed by the applicable legislation and for as long as the purpose of processing requires. Once that period ends, we delete, destroy or anonymise the data.
Your form messages remain in our e-mail accounts until your request is closed and, after that, for as long as we need to meet the burden of proof in a possible dispute. The technical lifetimes of the cookies are shown in the table on the Cookie Policy page; you can also end those lifetimes yourself by deleting the cookies in your browser.
8. Data Security
Site traffic is encrypted with HTTPS, so what you write in the form does not travel across the network in plain text. Because the form content is not held in a database on the site, no exposed store of records builds up either.
Access to the e-mail accounts is limited to the people who need to handle the request. If a security breach affects your personal data, notification will be made to you and to the Turkish Personal Data Protection Board under Article 12 of the KVKK.
No technical measure provides absolute security. For that reason, please do not enter sensitive details the handling of your request does not require (such as an identity number, card details or health data) into the form fields.
9. Your Rights as a Data Subject
Under Article 11 of the KVKK you may apply to the data controller and exercise the following rights:
- To learn whether your personal data is being processed and, if so, to request information about it.
- To learn the purpose of processing and whether the data is used in line with that purpose.
- To know the third parties in Türkiye or abroad to whom the data is transferred.
- To request correction where the data has been processed incompletely or inaccurately.
- To request deletion or destruction of the data within the conditions set out in the Law.
- To request that correction, deletion and destruction be notified to the third parties to whom the data was transferred.
- To object where a result to your detriment arises from analysis carried out solely by automated systems.
- To claim compensation if you suffer damage because of unlawful processing.
These rights follow from the fact that your personal data is processed, not from the particular legal ground relied on; they are available whenever you have written to us through the form.
10. Requests and Contact
To exercise your rights, write to info@mindvisor.ai or send a written request to Mindvisor Education Group Teknoloji Anonim Şirketi, Dadaşlar Sokak Aydoğan Plaza No: 23, Altunizade, Üsküdar, Istanbul. For questions you can also reach us by phone at +90 538 891 84 25.
Stating clearly the details that confirm your identity, your contact information and the subject of your request helps us resolve the matter faster. We answer requests within the period prescribed by the Communiqué on the Procedures and Principles of Application to the Data Controller and Article 13 of the KVKK, free of charge as a rule; where a request additionally involves a cost, the fee in the tariff set by the Board may be charged.
If your request is refused, if you find our answer insufficient or if you receive no answer in time, you have the right to lodge a complaint with the Turkish Personal Data Protection Board.