Privacy Policy / Gizlilik Politikası
HireNUp & Zirve CRM · Last updated: May 2026
This policy describes how HireNUp (“we”, “us”) processes personal data when you use HireNUp and the Zirve CRM platform (multi-channel inbox, CRM, automations, and AI-assisted replies).
1. Data controller
HireNUp
Contact: aliakin@hirenup.com
Website: https://hirenup.com
2. What data we process
- Account data: email address, name, organization profile (business name, phone, industry, city).
- Connected channel data: messages and metadata from WhatsApp, Instagram, Facebook Messenger, Gmail, Google Calendar, and (when enabled) Zoom — only after you connect those accounts.
- Zoom data: account ID, email, OAuth tokens, and meeting links created through the integration.
- OAuth tokens: access tokens from Meta and Google. Tokens are stored encrypted (AES-256-GCM) and used only to provide the service.
- CRM data: contacts, conversations, leads, pipeline stages, and activity logs.
- Technical logs: IP address, browser type, and error logs for security (limited retention).
3. Why we process data
- Provide and operate Zirve CRM (unified inbox, replies, CRM, workflows).
- Authenticate users (magic-link email login).
- Sync and deliver messages across connected channels.
- Security, abuse prevention, and legal compliance.
- Service emails (login links) via Resend.
We do not sell your personal data.
4. Legal basis (GDPR / KVKK)
- Contract: processing necessary to deliver the service.
- Consent: connecting Meta/Google/Zoom and accepting this policy during onboarding.
- Legitimate interest: security and product improvement.
5. Third-party services
When you connect integrations, data may be processed by Meta, Google, Zoom, Resend, and our hosting/database providers. We only request permissions needed for features you enable.
6. Retention
- Account data: while active, then up to 12 months unless you request earlier deletion.
- After account deletion: removed or anonymized within 30 days, unless law requires longer retention.
- Integration tokens: deleted when you disconnect or delete your account.
7. Security
We use HTTPS, encrypted token storage, and role-based access. No transmission method is 100% secure.
KVKK — Veri sahibi hakları
6698 sayılı KVKK kapsamında; kişisel verilerinizin işlenip işlenmediğini öğrenme, bilgi talep etme, düzeltilmesini veya silinmesini isteme, aktarıldığı üçüncü kişileri bilme ve işleme itiraz etme haklarına sahipsiniz. Taleplerinizi aliakin@hirenup.com adresine "KVKK başvurusu" konulu e-posta ile iletebilirsiniz.
8. Your rights (GDPR)
You may access, correct, delete, restrict, or port your data where applicable. Email aliakin@hirenup.com with subject Privacy request.
9. User data deletion (Meta / platform)
To delete your Zirve / HireNUp account and associated data (including Facebook, Instagram, WhatsApp, Gmail, or Zoom data we store):
- Email aliakin@hirenup.com with subject Data deletion request.
- Include your login email and business name if possible.
- We confirm and complete deletion within 30 days unless law requires otherwise.
Disconnect integrations anytime under Integrations in the dashboard before a full deletion request.
10. International transfers
Data may be processed in the EU and on subprocessors’ infrastructure with appropriate safeguards where required.
11. Children
B2B product; we do not knowingly collect data from children under 16.
12. Changes
We may update this policy; the date above will change.