At CoreSpeak, we care about the security of the personal data processed as part of our Turkish-language AI voice receptionist service. This notice has been prepared under Law No. 6698 on the Protection of Personal Data ("KVKK") to explain how we, as data controller, process your personal data.
Data controller
- Service
- CoreSpeak — Voice AI Receptionist
- Contact
- info@corespeak.co
- Web
- corespeak.co
01Personal data processed
The following personal data may be processed while providing our service:
- Identity data: First name and surname (to create appointments).
- Contact data: Phone number (captured automatically during the call or provided by the caller).
- Call recordings: Audio recording of the phone call, for service quality and verification.
- Appointment data: Requested service, date, time and related notes.
- Technical data: Log records such as call date/time and call ID.
02Purposes of processing
- Answering and managing phone calls with the AI assistant,
- Creating, updating and tracking appointments,
- Measuring and improving service quality,
- Fulfilling legal obligations and providing evidence in case of a dispute.
03Legal basis
Under Article 5 of the KVKK, your personal data is processed on the legal bases of the establishment or performance of a contract (the appointment service), legitimate interest (service quality) and explicit consent (for call recording, with notice given at the start of the call). A spoken notice that the call is being recorded is given at the start of the call.
04Retention period
Your personal data is kept for as long as the purpose of processing requires and for the periods set out in the applicable legislation:
Retention policy
- Call recordings
- 30 days, then deleted automatically
- Appointment data
- For the duration of the service relationship
- Deletion method
- Automatic, irreversible
When the period expires, records are deleted automatically and permanently, without any manual action.
05Data security and transfer
Your personal data is protected on CoreSpeak's own server infrastructure with access control and encryption measures. Apart from the technical infrastructure providers required to deliver the service, your data is not shared with third parties and not transferred for marketing purposes. This is without prejudice to requests from legally authorised public authorities.
06Your rights (KVKK Article 11)
Under Article 11 of the KVKK, you have the following rights by applying to the data controller:
- To learn whether your personal data is processed,
- If it has been processed, to request information about it,
- To learn the purpose of processing and whether it is used in line with that purpose,
- To request correction of incomplete or inaccurately processed data,
- To request deletion or destruction of your data,
- To claim compensation for damage arising from unlawful processing.
To exercise your rights, you can apply to info@corespeak.co. Your request will be resolved within 30 days at the latest.
Note: This text is a general information template provided for information purposes. For full compliance with your business's specific situation and current legislation, you are advised to seek the opinion of a legal adviser.