Privacy Policy

Last updated: 25 October 2026 · Version: 2026-10-25-v2

This English version is provided for convenience. If there is any inconsistency, the Turkish version prevails.

This policy briefly explains how information is collected, used and protected in the service of Otelka Yazılım (“Otelka”). Details are in the Personal Data Notice.

In short

We do not sell your data or share it with third parties for advertising.
Card numbers never enter Otelka: subscription payments are handled by iyzico, and cards from channels stay in Channex’s secure environment.
We connect to channels only on your instruction and through the Channex platform; we never ask for your channel passwords.
Your KBS passwords and two-step verification details stay only on your own computer.
Visit statistics on our marketing website are collected only with your consent; there is no tracking in the application or on guest pages.
Open and click tracking is turned off in our emails.

What we collect

Account details: name, email, phone, user roles, property name, address and room structure.
Billing details: billing name, tax office, tax or Turkish ID number and billing address.
Data processed on behalf of properties: reservations, guest details, identity details required for identity reporting, guest messages and invoices.
Technical records: login attempts, a hash of the IP address, recognised devices, activity logs and error logs.

How we use it

To provide the service: channel connection, calendar and reservations, front-office operations, booking page and identity reporting tools
To keep your account secure: blocking unauthorised sign-ins, asking for verification on new devices and for sensitive actions
Invoicing and collection
Answering your support requests and sending mandatory notices about the service

Guest data

For data about a property’s guests, the property is the data controller; Otelka processes this data only on the property’s behalf and instructions. The booking page shows guests a privacy notice prepared on the property’s behalf. Guest identity details are deleted automatically when the period chosen by the property ends.

Cookies

Strictly necessary cookies: keep you signed in, remember your recognised device (up to 180 days), complete sign-in verification, and store your language and selected-property preference (1 year) and your cookie preference (6 months). Google sign-in, bot protection (Cloudflare) and the payment form (iyzico) use their own necessary cookies only on the pages concerned.
Statistics cookies: Google Analytics runs only with your consent and only on our marketing pages (_ga cookies, 2 years). The page address and title are measured; no personal information is sent.
Marketing cookies: we currently use no advertising or remarketing cookies. If you accept this category, Google Analytics’ advertising measurement features may also be enabled.

You can see the full list of cookies and their durations via “Cookie settings” at the bottom of the page and change your preference at any time. Properties’ booking and website pages use only necessary cookies and bot protection; map images on these pages are loaded from OpenStreetMap servers.

Who we share it with

To provide the service, limited data is shared with our infrastructure providers (database, hosting, channel connectivity, email, payment and security services). The full list of providers, their locations and the explanation of transfers abroad are in the Personal Data Notice. Otherwise we only respond to lawful requests from competent authorities.

Security

All connections are encrypted. In the database each property can only see its own data; access is limited by the user’s role and department. Passwords are stored irreversibly and IP addresses as hashes. Extra verification is required when signing in from a new device and for sensitive actions; backups are encrypted.

Deleting your data

Cancelling the subscription does not delete your data; you can resume where you left off at any time. If you want your data deleted completely, as the property owner you can use “Close account permanently” on the subscription screen: data is deleted 30 days after the request, and you can change your mind within this period. If you cannot sign in, write to destek@otelka.com. All data is deleted except financial records that must be kept by law and the record that allows the trial to be used only once (email address only).

Changes

This policy may be updated. We announce material changes by email or in the application before they take effect. Questions: iletisim@otelka.com.