Privacy Policy

Last updated: May 31, 2026

At MarginLift we value your privacy. This policy explains, when you use the MarginLift service (marginlift.com.tr and its subdomains), which personal data we process, for what purpose and on what legal basis; how we protect your data; and your rights.

1. Data Controller

The data controller responsible for processing your data is Gamevato OÜ, which provides the MarginLift service (Estonia; registry no 16656270; address: Tartu mnt 67/1-13b, Tallinn 10115, Estonia). The company is registered in Estonia and is subject to the EU General Data Protection Regulation (GDPR, (EU) 2016/679). The lead supervisory authority is the Estonian Data Protection Inspectorate.

2. Data We Collect

• Account information: your name, work email, company name and login credentials (passwords are stored one-way encrypted — hashed).
• Business data you upload: the sales, campaign, product, returns and stock data you provide for analysis. This data belongs to you; it is processed only to provide analysis to you.
• Request and communication content: demo requests and support messages.
• Automatically collected technical data: IP address, browser type and service usage logs (for security and operating the service).
• Payment data: when you start a subscription, payment is processed by our payment provider Stripe; we do not store your card details, only tokenised references.

3. How We Use Data

• To provide the service and produce analysis results;
• To manage your account, run billing and the subscription;
• To ensure security, prevent abuse and improve the service;
• To contact you about your requests and service-related notices.

4. Legal Basis for Processing

We process your data on the basis of performance of a contract with you (providing the service), legitimate interest (security and improvement), legal obligation (e.g. accounting) and, where required, your explicit consent.

5. Sharing and Sub-processors

We do not sell your data and do not share it with third parties for marketing. To provide the service we use a limited number of sub-processors:

• Stripe — payment processing;
• Resend — transactional email delivery;
• Hosting and infrastructure providers — secure hosting of data.

Each sub-processor accesses only the data needed to perform its task and is subject to data-protection obligations. Sharing with competent authorities may also occur under a legal obligation.

6. Data Security

Data is encrypted in transit (HTTPS), each tenant's data is kept logically isolated, and access is limited by the least-privilege principle. The analysis engine accesses your data read-only; results are not a “black box” — every number is verifiable.

7. Retention Period

We keep your personal data only as long as necessary for the purposes stated in this policy and for the duration of legal retention obligations. When you close your account or delete your data, your business data is removed from our systems within a reasonable period.

8. Your Rights

Under the GDPR and KVKK you have the rights to access, rectify, erase, restrict processing, portability, object, and withdraw consent you have given. You can send your requests to hello@marginlift.com.tr; we respond within 30 days at the latest. You also retain the right to complain to a supervisory authority.

9. International Data Transfer

Your data may be processed within the European Union. Where a transfer between Türkiye and the EU is required, it is carried out under appropriate legal safeguards (e.g. standard contractual clauses).

10. Cookies

For details of our cookie use, see the Cookie Policy.

11. Children's Privacy

MarginLift is a business-to-business (B2B) service and is not directed to anyone under 18; we do not knowingly collect data from children.

12. Changes

We may update this policy from time to time. For significant changes we will inform you and refresh the “Last updated” date on this page.

13. Contact

For any privacy questions or requests: hello@marginlift.com.tr — Gamevato OÜ, Tartu mnt 67/1-13b, Tallinn 10115, Estonia.