Last updated: May 6, 2026
This Personal Data Processing Disclosure Notice explains how GXLocal processes personal data in accordance with applicable personal data protection laws, including the Turkish Personal Data Protection Law No. 6698, where applicable.
- Data Controller
Your personal data is processed by GXLocal as the data controller.
- Personal Data We Process
GXLocal may process the following personal data when you create an account, sign in, or use the GXLocal client panel:
First name
Last name
Email address
Login and session information
IP address
Browser and device information
Basic system, security, and transaction logs
If you choose to sign in with Google, GXLocal may receive your first name, last name, and email address from your Google account for authentication and account access purposes.
- Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
Creating and managing your GXLocal user account
Authenticating users and providing access to the GXLocal client panel
Managing user access, roles, and permissions
Ensuring application security
Preventing unauthorized access
Maintaining service reliability
Troubleshooting technical issues
Keeping basic system, security, and transaction records
Communicating with users regarding account, access, security, or service-related matters
Complying with applicable legal, regulatory, or contractual obligations
Protecting the rights, security, and legitimate interests of GXLocal, its users, and authorized organizations
GXLocal does not use your personal data for advertising purposes.
- Legal Basis for Processing Personal Data
Your personal data may be processed based on one or more of the following legal grounds, where applicable:
Processing is necessary for the establishment or performance of a contract
Processing is necessary for GXLocal to fulfill its legal obligations
Processing is necessary for the establishment, exercise, or protection of a right
Processing is necessary for the legitimate interests of GXLocal, provided that such processing does not harm your fundamental rights and freedoms
Processing is necessary for providing secure access to the GXLocal application and maintaining account security
Where consent is legally required, GXLocal may process personal data based on your explicit consent.
- Method of Collection
Your personal data may be collected through the following methods:
Account registration forms
Login and authentication processes
Google Sign-In, if you choose to use it
Contact or support forms
Application usage and security logs
Cookies and similar technologies
Technical systems used to operate and secure the GXLocal service
Personal data may be collected electronically and automatically or directly from you when you provide the information.
- Transfer of Personal Data
GXLocal does not sell, rent, or trade your personal data.
Your personal data may be transferred only in limited cases:
To authorized public institutions or authorities, where required by law
To service providers that support hosting, infrastructure, security, authentication, communication, or technical operations
To your organization’s authorized administrators, if your account is managed by an organization
To legal advisors or relevant parties where necessary for the establishment, exercise, or protection of legal rights
To third-party services such as Google Sign-In, only where necessary for authentication and account access
Any service providers that process data on behalf of GXLocal are expected to process such data only as necessary to provide services to GXLocal and to protect the confidentiality and security of the data.
- Google Sign-In
If you use Google Sign-In, GXLocal may receive basic profile information from your Google account, limited to your first name, last name, and email address.
This information is used only to authenticate you, create or match your GXLocal user account, and provide access to the GXLocal client panel.
GXLocal does not sell Google user data.
GXLocal does not use Google user data for advertising.
GXLocal does not transfer Google user data to third parties except where required by law, necessary to protect application security, or necessary to provide and operate the service.
GXLocal’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
- Retention of Personal Data
GXLocal retains personal data only for as long as necessary for the purposes described in this notice.
Personal data may be retained for the duration of the user account, for the period required to provide the service, to maintain security records, to comply with legal obligations, to resolve disputes, or to protect legal rights.
When personal data is no longer required, it may be deleted, anonymized, or securely archived according to applicable requirements and internal procedures.
- Data Security
GXLocal takes reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
These measures may include access controls, authentication mechanisms, encrypted communications, logging, monitoring, restricted access to production systems, and operational security controls.
- Your Rights
Where applicable under personal data protection laws, you may have the right to:
Learn whether your personal data is being processed
Request information if your personal data has been processed
Learn the purpose of processing and whether your data is used in accordance with that purpose
Know the third parties to whom your personal data is transferred
Request correction of incomplete or inaccurate personal data
Request deletion or destruction of personal data where legally applicable
Request notification of correction, deletion, or destruction to third parties to whom personal data has been transferred
Object to a result against you arising from analysis of your personal data exclusively through automated systems
Request compensation if you suffer damage due to unlawful processing of your personal data
- Contact
For questions or requests regarding this Personal Data Processing Disclosure Notice or your personal data, you can contact GXLocal through the contact page: