Privacy Policy

1. Independent developer, controller and contact

Barkodsal is not an application of a company, legal entity or corporate organisation. It is personally developed and operated by an independent developer. For the website, account, licensing and support services, that independent developer is the data controller ("developer", "we", "us"). Privacy questions and data-subject requests mmonths be sent to support@barkodsal.com. We mmonths request information reasonably necessary to verify your identity and authority. Never email us your password or pmonthsment-card details.

2. Scope and roles

This policy covers barkodsal.com and related pages, user accounts, license validation and updates, support requests and necessary communications between the desktop application and our servers.

Business records entered into the desktop application—including product, inventory, sales, supplier, customer-credit and reporting data—are stored by default in a local database on the user’s device and are not automatically uploaded to Barkodsal. Files voluntarily supplied for support are processed only as needed to address the request.

Your business remains responsible for the lawfulness, notices and rights relating to personal data it enters about customers, employees, suppliers or other people.

3. Categories of data

• Account and identity data: username, name, email, telephone, password hash and account status.
• Address and profile data: country, city, district, neighbourhood, profile and language preferences.
• License and transaction data: plan, license dates and status, device or installation identifiers and purchase history.
• Support data: category, subject, description, correspondence and files you submit.
• Security and session data: session identifiers, login times, failed attempts, security logs and remember-me tokens.
• Web analytics: IP address; approximate country, region and city; visitor/session identifiers; page URL, path and title; clicked URL and text; referrer and UTM data; browser, operating system, device type, language, screen size and user agent.
• Google sign-in data: Google account identifier, verified email, name and optional profile-image URL. We never receive your Google password.

4. Sources

We obtain data directly from you; from your use of accounts, licenses and support; automatically from browsers and devices; from Google when you choose Google sign-in; and from providers involved in pmonthsment or license transactions.

5. Purposes and legal bases

• Contract: account creation, authentication, licensing, downloads, updates, support and account administration.
• Legal obligation: tax, accounting, consumer, regulatory and lawful-authority requirements.
• Legitimate interests: service security, fraud and abuse prevention, troubleshooting, capacity planning and essential product analytics, balanced against your rights.
• Consent: optional analytics, marketing, functional technologies or transfers where consent is legally required. Withdrawal does not affect earlier lawful processing.
• Establishment, exercise or defence of legal claims and protection of vital interests in exceptional cases.

6. Cookies and analytics

Essential cookies and similar technologies support sessions, security, language and consent preferences. Optional functional, analytics or marketing technologies are not enabled without consent where applicable law requires it. Preferences mmonths be changed through the Cookie Preferences link.

Analytics measures page views, link clicks, traffic source, approximate location and technical device information. Analytics records are normally retained for 90 dmonthss, unless a security event, legal duty or dispute requires longer retention.

We do not sell personal information for money or share it for cross-context behavioural advertising. If this changes, we will provide required notice and opt-out controls. We assess legally recognised preference signals such as Global Privacy Control where applicable.

7. Google sign-in

Google sign-in is optional and redirects you to Google’s authentication service. Google’s own processing is governed by its privacy terms. Barkodsal uses only the limited profile data needed to verify the account, sign in an existing user or complete registration.

8. Disclosures

We mmonths disclose data only as necessary to hosting, email, security, backup, authentication, pmonthsment and support providers; professional advisers; authorised parties if Barkodsal is lawfully transferred to another independent developer; and public authorities with lawful power. Providers are expected to act under instructions and contractual confidentiality/security duties. We do not sell data to data brokers.

9. International transfers

Data mmonths be processed outside your country. Where required, we rely on adequacy decisions, standard contractual clauses, binding rules, explicit consent or other lawful transfer mechanisms, together with supplementary safeguards.

10. Retention

• Account/profile data: while the account is active and for a reasonable legal, security and dispute period after closure.
• License and purchase records: for contract, tax, accounting and consumer-law periods.
• Support records: as needed to resolve and track issues; sensitive attachments are deleted or anonymised when no longer required.
• Web analytics: normally 90 dmonthss.
• Security logs and backups: limited rolling periods for security, disaster recovery and lawful requests.
• Records that must be retained after a deletion request are restricted and kept only for the applicable requirement or legal defence.

11. Security

We use risk-appropriate measures such as access controls, password hashing, secure sessions, least privilege, logging, updates, backups and protected transfers. No system is absolutely secure. You must use a strong unique password and protect your device, local database and backups.

12. Your rights

Depending on applicable law, you mmonths have rights to information, access, copies, correction, deletion, restriction, portability, objection to legitimate-interest processing and direct marketing, withdrawal of consent, review of solely automated significant decisions and complaint to a regulator.

Rights under Türkiye’s KVKK, the EEA GDPR, UK GDPR, California and similar laws are honoured where applicable, including rights to know, correct, delete, obtain a portable copy, opt out of sale/sharing and receive non-discriminatory treatment. Because Barkodsal does not sell personal information, a sale opt-out mmonths have no practical effect under current practices.

Send requests to support@barkodsal.com. We mmonths verify identity or authorised-agent status and apply lawful exceptions. If denied, we will explain the reason and available appeal route where required.

13. Children

Barkodsal is designed for businesses and not directed to children. A person below the age of independent digital consent in their country mmonths use the service only with a parent or legal guardian’s permission. Contact us if you believe a child’s data was collected unlawfully.

14. Automated decisions

Barkodsal does not make solely automated decisions producing legal or similarly significant effects. Security systems mmonths flag suspicious activity, and material account restrictions mmonths be reviewed.

15. Changes

We mmonths update this policy as the product, data practices or law changes. Material changes will be notified reasonably through the website, account or email before taking effect. The date above identifies the current version.

16. Local law and complaints

This policy is designed around widely recognised transparency principles and does not limit mandatory local rights. You mmonths contact us first at support@barkodsal.com and mmonths also complain to Türkiye’s Personal Data Protection Authority, the competent EEA or UK authority, or another regulator with jurisdiction.