Privacy Policy

1. Who we are (Data Controller)

SuspendWizard is operated by Quadrapi Global Lojistik ve Taşımacılık Danışmanlık Hizmetleri Ltd. Şti. (hereafter "Quadrapi Global Ltd. Şti."), which acts as the data controller for the personal data described in this notice.

• Registered office: Yenikale Mah. Filiz Sok. No: 14, Narlıdere, İzmir, Türkiye
• Tax office / number: Balçova Vergi Dairesi — 632 156 8985
• Privacy contact: via the contact page

2. Categories of personal data we collect

• Account / case data: email address, shop name, product category, and the suspension notice you paste.
• Evidence: invoices, brand authorization letters, receipts, photos and any other files you upload.
• Support communications: messages you send us through the contact page or in-app messages.
• Technical data: server logs (IP address, user agent, timestamps), device identifiers and basic usage telemetry for security and product improvement.
• Payment data: processed by our Merchant of Record (Paddle). We do not see or store full card numbers; we only receive transaction confirmations.

3. Purposes and legal bases

• Provide the service (analyze your suspension, draft and deliver the POA, send secure access links and follow-up notifications) — performance of the contract with you.
• Security and fraud prevention (logging, abuse detection) — legitimate interests and legal obligation.
• Product improvement (aggregated, non-identifying analysis of policy patterns) — legitimate interests.
• Customer support — performance of the contract and legitimate interests.
• Legal, tax and accounting compliance — legal obligation.
• Marketing (only if you opt in to a newsletter) — consent, which you can withdraw at any time.

4. Sharing and recipients

We do not sell your data. We share it only with the following categories of recipients:

• Service providers / subprocessors: cloud hosting, email delivery, error monitoring and analytics tooling, under contract.
• Merchant of Record (Paddle.com Market Limited): for sale of our products, subscription management, payments, tax compliance and invoicing. See Paddle's privacy notice.
• Professional advisers: legal, tax and accounting advisers, where necessary.
• Authorities: where we are legally required to disclose information.

5. International transfers

Some of our service providers are based outside Türkiye, including in the EEA, the UK and the US. Where data is transferred outside Türkiye or the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

6. Retention

Case content (POA, uploads, suspension notice) is retained for 12 months from delivery so that you can submit follow-up information requested by the marketplace. After that, content is deleted unless you ask us to keep it. Transaction and accounting records are retained for the period required by applicable tax law.

7. Your rights

Subject to applicable law (including Türkiye's KVKK and, where relevant, the EU/UK GDPR), you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. You may also lodge a complaint with the competent supervisory authority (in Türkiye, the KVKK Authority — KVKK Kurumu). We respond to verified requests within the timeframe required by law (typically within 30 days).

8. Security

Data in transit is encrypted with TLS. Stored evidence is access-controlled and tied to your case token. We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

9. Cookies

We use strictly necessary cookies to keep you signed in and to remember your preferences. We do not use advertising cookies. If we add analytics cookies in the future, we will ask for your consent first.

10. Contact

Privacy requests and questions: Contact us.