Last updated: October 1, 2026
This Privacy Policy explains how Worklab Yazılım Limited Şirketi ("Worklab", "we", "us") collects, uses, shares and protects personal data when you visit our website www.worklab.com.tr and when businesses use our Worklab Connect customer communication platform (together, the "Services").
We process personal data in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the EU General Data Protection Regulation ("GDPR") where applicable, and the policies of the platforms we integrate with, including the Meta Platform Terms and WhatsApp Business policies.
1. Who We Are
Worklab is a software company based in Istanbul, Türkiye, providing custom software development, SaaS platforms, business automation and integration solutions. Worklab Connect is developed and operated by Worklab.
Worklab Yazılım Limited Şirketi
Atatürk Mah. Ertuğrul Gazi Sok. Metropol İstanbul A Blok Apt No:2E Kat:21 Daire:331 Ataşehir / İstanbul, Türkiye
Trade Registry: Istanbul Trade Registry Office, No. 338271-5
MERSIS No: 0814096998900001
Tax Office / Tax ID: Kozyatağı / 8140969989
Registered e-mail (KEP): worklab@hs06.kep.tr
E-mail: info@worklab.com.tr
Phone: (+90) 216 606 74 69
2. Our Role: Controller and Processor
- Website and business relationships. For data collected through our website, contact forms and our business relationship with clients (for example, client account and billing contact details), Worklab acts as the data controller.
- Worklab Connect client data. When a business ("Client") uses Worklab Connect to communicate with its own customers through its own WhatsApp Business account, the Client is the data controller of its customers' data and Worklab acts as a data processor, processing that data only on the Client's behalf and according to the Client's instructions.
If you are a customer of a business that uses Worklab Connect, that business's own privacy policy also applies to you, and you may contact that business directly about your personal data.
3. Data We Collect
3.1 Website visitors
- Contact form data: name and surname, e-mail address, subject and message content you submit.
- Technical and usage data: IP address, browser type, device information, pages visited and similar analytics data collected through cookies (see Cookies).
3.2 Worklab Connect clients
- Account data: business name, authorized user names, business e-mail addresses, phone numbers and other information provided when setting up and managing the account.
- Meta and WhatsApp Business asset data: identifiers and settings of the Meta Business account, WhatsApp Business Account, phone numbers and message templates that the Client authorizes Worklab Connect to access through Meta's authorization process.
- Configuration data: workflows, AI assistant settings, knowledge content and other settings defined by the Client.
3.3 Customers of our Clients (end users)
When an end user communicates with a Client through WhatsApp, Worklab Connect processes on the Client's behalf:
- WhatsApp phone number and profile name;
- message content exchanged with the Client, including text and media files the end user chooses to send;
- message metadata such as timestamps and delivery and read status;
- inquiry, lead or appointment request details recorded by the Client or collected in the conversation.
Worklab Connect is not designed to request special categories of personal data (such as health data). However, end users may share such data on their own initiative, for example when contacting a healthcare or medical tourism provider. Clients in regulated sectors are responsible for configuring their communication processes and obtaining any consent required by applicable law, and such data is processed only on the Client's behalf.
4. How We Use Data
- to provide, operate and maintain the Services, including receiving, organizing and sending WhatsApp messages on behalf of Clients;
- to provide AI-assisted conversation features configured by the Client;
- to transfer conversations to the Client's authorized human representatives;
- to respond to inquiries submitted through our website;
- to provide customer support, manage client accounts and communicate service-related information;
- to secure the Services, prevent misuse and troubleshoot technical issues;
- to comply with legal obligations and enforce our agreements.
We do not sell personal data. We do not use data obtained through Meta or WhatsApp APIs for advertising, profiling or any purpose other than providing the Services requested by the Client.
5. AI-Assisted Processing
Worklab Connect may use artificial intelligence to assist Clients' customer service teams, for example by suggesting or sending answers to common questions, collecting inquiry details and supporting structured conversation workflows. AI features operate according to the configuration defined by each Client.
- AI is used to assist customer communication, not to replace the Client's responsibility or professional decision-making.
- Conversations can be monitored by the Client and transferred to a human representative at any time.
- To generate responses, message content may be processed by AI models, including models provided by third-party AI service providers acting as our sub-processors under contractual confidentiality and data protection obligations.
- We do not use Client conversation data to train general-purpose AI models.
6. Legal Basis for Processing
Where Worklab acts as data controller, we process personal data based on one or more of the following legal grounds under KVKK Article 5 and, where applicable, GDPR Article 6:
- processing is necessary for the establishment or performance of a contract;
- processing is necessary for compliance with a legal obligation;
- processing is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms (for example, securing and improving our Services);
- your explicit consent, where required (for example, for non-essential analytics cookies).
Where Worklab acts as data processor, the Client as data controller is responsible for determining the legal basis for processing its customers' data.
8. International Data Transfers
Some of our service providers, including Meta and AI service providers, may process data on servers located outside Türkiye. Where personal data is transferred abroad, we take the measures required by KVKK Article 9 and, where applicable, GDPR Chapter V, such as standard contractual clauses or other lawful transfer mechanisms.
9. Data Retention
- Contact form data is kept for as long as necessary to respond to your inquiry and maintain our business correspondence, unless a longer period is required by law.
- Client account data is kept for the duration of the business relationship and afterwards for the periods required by applicable law (for example, commercial and tax record-keeping obligations).
- Conversation data processed through Worklab Connect is kept for as long as the Client's account is active or as configured by the Client. After the Client's account is terminated, conversation data is deleted or anonymized within a reasonable period, unless retention is required by law.
10. Security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration. These include encrypted connections (HTTPS), access controls based on Client authorization and platform permissions, and limiting access to personal data to authorized personnel who need it to provide the Services. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any security incident, including notifying the relevant authorities and affected parties where required by law.
12. Your Rights
Subject to applicable law, including KVKK Article 11 and, where applicable, the GDPR, you have the right to:
- learn whether your personal data is processed and request information about it;
- learn the purpose of processing and whether data is used in line with that purpose;
- know the third parties to whom your data is transferred, in Türkiye or abroad;
- request correction of incomplete or inaccurate data;
- request deletion or destruction of your data;
- request that third parties to whom your data was transferred be notified of such correction or deletion;
- object to a result against you arising from analysis exclusively through automated systems;
- claim compensation for damages arising from unlawful processing;
- where the GDPR applies, request restriction of processing, data portability, object to processing and withdraw consent at any time, and lodge a complaint with a supervisory authority.
To exercise these rights, contact us using the details in Contact Us. We respond to requests within 30 days at the latest. If your request concerns data processed on behalf of a Client, we will forward it to the relevant Client and assist them in responding.
A Turkish-language information notice under KVKK Article 10 is available on our KVKK Aydınlatma Metni page.
13. Data Deletion Requests
You can request deletion of your personal data at any time:
- Clients can disconnect their WhatsApp Business account from Worklab Connect, remove Worklab Connect's access from their Meta Business settings, and request deletion of their account and associated data by e-mailing info@worklab.com.tr.
- End users who communicated with a business through Worklab Connect can contact that business directly, or e-mail us at info@worklab.com.tr with the subject "Data Deletion Request" and the phone number used. We will forward the request to the relevant business and process the deletion on its instructions.
- Website visitors can request deletion of contact form data by e-mailing info@worklab.com.tr.
We will confirm deletion once the request has been completed, except for data we are legally required to retain.
14. Children
Our Services are intended for businesses and are not directed at children under 18. We do not knowingly collect personal data from children through our website. If you believe a child has provided us with personal data, please contact us so that we can delete it.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with its "Last updated" date. Where changes are significant, we will take reasonable steps to inform Clients.
16. Contact Us
For questions about this Privacy Policy or to exercise your rights, please contact us:
Worklab Yazılım Limited Şirketi
Atatürk Mah. Ertuğrul Gazi Sok. Metropol İstanbul A Blok Apt No:2E Kat:21 Daire:331 Ataşehir / İstanbul, Türkiye
Registered e-mail (KEP): worklab@hs06.kep.tr
E-mail: info@worklab.com.tr
Phone: (+90) 216 606 74 69
