PRIVACY

Privacy Policy

This policy explains what data Mindfile (mindfile.tr), operated by Matka Teknoloji, processes when you use the service, why we process it, how we protect it, and how we handle the data you connect from Google Drive.

Last updated: 21 September 2026

Who we are

Mindfile is a corporate document and knowledge platform operated by Matka Teknoloji ("we"), Barbaros Mah. Şebboy Sk. No:4/1 İç Kapı No:2, Ataşehir / İstanbul, Türkiye. This policy covers the web application at mindfile.tr and its integrations. Where your organisation is our customer, it decides why and how documents are processed and we act on its behalf; this policy describes what we do with the data in either case.

Data we process

We process three kinds of data. First, account and contact details: name, e-mail address, phone number, organisation and the messages you send us. Second, the documents you upload or import, their metadata, and the indexes, summaries and extracted fields derived from them. Third, technical records kept to secure and operate the service: session data, IP address, device and browser information and activity logs.

Why we process it

To deliver the service, answer your questions from your own documents, enforce permissions and the audit trail, invoice paid plans, and support you when you ask. Marketing communication happens only with your explicit consent. We do not use your data for advertising.

Your documents stay yours

The documents you upload remain your property. Each organisation's data is isolated in its own tenant and is never used to train general AI models, ours or anyone else's. Documents are processed only to answer your queries and run the product features you use.

Google User Data Policy & Drive Access

Mindfile offers an optional Google Drive integration in the Data Transfer Center. If you connect a Google account, Mindfile requests a single read-only permission (https://www.googleapis.com/auth/drive.readonly) so that it can list and download documents from the folder or path you choose and import them into your Mindfile archive. Connecting is voluntary; the service works fully without it.

  • What we access: only the folder or file path you select when you set up the import. Mindfile does not browse, index or download any other part of your Drive, and it never modifies, moves or deletes files there. The permission is read-only.
  • How we use it: the selected files are copied into your organisation's Mindfile archive, where they are processed like any other uploaded document: scanned for malware, text-extracted, indexed and classified so that you can search and query them. Nothing else.
  • How we store it: the imported copies are stored in your organisation's isolated tenant. Your Google access and refresh tokens are stored encrypted (AES-256-GCM), are used only by the import connector, and are never displayed or exported.
  • No advertising, no AI training: Google user data is never used for advertising or marketing, never used to build profiles, and never used to train or improve machine-learning or artificial-intelligence models, whether generalised or our own.
  • No selling, no sharing: Google user data is never sold, rented or shared with third parties. It is not transferred to anyone except our hosting sub-processor, as strictly necessary to store your archive, and as required by law.
  • Humans do not read it: no Matka Teknoloji employee reads the content of your Google Drive files unless you ask us to for support, it is necessary for security or legal reasons, or the data has been aggregated and anonymised.
  • Revoking access: you can disconnect the Google account from the Data Transfer Center at any time, or revoke Mindfile's access directly from your Google Account's security settings. Once revoked, Mindfile deletes the stored tokens and can no longer reach your Drive. Documents already imported stay in your archive as your organisation's own copies until you delete them.

Mindfile's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

Data is kept while your account is active and for as long as legal retention obligations require. When a contract ends, your data is exported on request and deleted within a reasonable period. Separate retention periods may apply to audit records. You can delete individual documents, disconnect integrations, or request deletion of your account at any time by writing to admin@matka.tr.

Sharing and sub-processors

We do not sell your data and we do not share it with third parties for their own purposes. To run the service we rely on a limited set of sub-processors, such as hosting, e-mail delivery and AI infrastructure, who process only what is needed to provide the service under contractual confidentiality obligations. Where a sub-processor is located outside Türkiye or the EU, we rely on the safeguards KVKK and GDPR require. With an on-premise deployment, data stays entirely on your own infrastructure. We disclose data to authorities only where the law requires it.

Security

Access is scoped by role and unit, classified documents require additional approval, and every access and change is written to the audit trail. Data is encrypted in transit. Every uploaded file is scanned for malware before it enters the archive, and tokens for connected accounts are stored encrypted and never shown to anyone.

Your rights

Under KVKK and GDPR you have the right to access, correct, delete, restrict the processing of and port your data, and to object to processing. Send requests to admin@matka.tr and we will respond within the statutory periods. You can also complain to the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority.

Cookies

We use the cookies required for session management and remembering your preferences. Where non-essential cookies are used, we ask for your consent separately.

Changes to this policy

We may update this policy as the service evolves. The date at the top shows the current version; material changes are announced in the application or by e-mail before they take effect.

Questions and data requests: admin@matka.tr — Matka Teknoloji, Barbaros Mah. Şebboy Sk. No:4/1 İç Kapı No:2, Ataşehir / İstanbul, Türkiye.

Privacy Policy - mindfile