The data controller (operator) responsible for processing your data is SKYMP LLC, based in New Jersey, USA, doing business as "Vakti.net" (12 Daniel Road, Fairfield, NJ 07004, USA). For privacy-related requests: [email protected]
We use the information we collect for the following purposes:
Vakti.net lets you connect your Gmail account so that emails are sent from your own address. This connection is entirely optional; if you do not use it, we access no Google data at all.
Vakti.net's use and transfer of information received from Google APIs — raw, aggregated or derived — adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Vakti.net includes AI features (an assistant and message-sentiment analysis) powered by a third-party AI model provider (OpenAI, USA). No data received from Google APIs is ever sent to that provider. The AI only processes data you entered into Vakti.net yourself — contacts, appointments, templates and tags. We never use Google user data, raw or derived, to develop, train or improve any generalized AI/ML model, and we never transfer it to a third party for that purpose. Because our Gmail access is send-only, we do not receive your email content at all.
We do not sell or rent your personal data and do not share it for advertising. Data is transferred to third parties only in the following cases:
We take industry-standard security measures to protect your data:
We use cookies to improve our service:
You can manage cookies through your browser settings.
Under the GDPR, KVKK and other data-protection laws that apply where you live (e.g. US state privacy laws) you have the following rights:
You can contact us to exercise these rights.
For users who open a Vakti.net account (business owners and team members) the operator is the data controller. For the people a business records in its workspace (patients, clients, customers) that business is the data controller; Vakti.net processes their data only on the business's instructions and on its behalf. In that case please send access, correction and deletion requests directly to the business; if you cannot reach the business, [email protected] will forward your request to it.
We use providers in the following categories to deliver the service; each is bound by a data processing agreement and data is shared only to the extent the service requires:
If we detect a security breach affecting personal data, we notify the users for whom we are the controller and the businesses we serve as a processor without undue delay and no later than 72 hours after becoming aware of it, with information on the nature of the breach, its likely consequences and the measures taken.
Features such as sentiment analysis of incoming messages and the AI assistant run on a third-party model provider (OpenAI, USA) and process only the data you enter into Vakti.net. No decisions with legal effects are made about you based solely on automated processing; AI suggestions are applied with human approval. Your data is not used to train general AI models.
We do not sell personal data, share it for targeted advertising or engage in profiling. You may submit access, correction, deletion and portability requests under applicable US state laws (e.g. the New Jersey Data Privacy Act, CCPA/CPRA) to [email protected] and appeal a refusal at the same address.
We keep personal data only for as long as necessary. When you delete your account or workspace the data is deleted immediately; stored files and backups are purged within 30 days at the latest. Exceptions: security and abuse logs (up to 12 months), records subject to a legal retention duty (for the required period) and e-signature evidence attached to documents a business keeps (until the document is deleted).
The service is intended for businesses and is not offered to anyone under 18. We do not knowingly collect personal data from children. If a business processes data about children in its customer records (e.g. a student's name in parent communication), the business is responsible for the legal basis. If we learn that a child has opened an account directly, we delete the account and its data.
The operator is established in the USA; data may be stored and processed on the servers of sub-processors in the USA and/or the EU. Transfers from the EU/EEA, the United Kingdom and Switzerland rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision; transfers from Türkiye follow the KVKK rules on international transfers. For the current list of sub-processors and server locations, write to [email protected].
We may update this privacy policy from time to time. We will notify you by email of significant changes. We recommend checking the policy regularly.
If you have questions about our privacy policy or your data, please contact us:
Email: [email protected]
This privacy policy has been prepared in compliance with KVKK (Turkish Personal Data Protection Law No. 6698) and GDPR (EU General Data Protection Regulation) requirements. Last updated: October 3, 2026