Privacy Policy

Last updated: 2026-09-20 · MadeToOrder OS is operated by Erkan Bircan (Selvola). Contact: erkannbircan@gmail.com.

Local-first, stated first

The MadeToOrder OS mobile app runs on your device and keeps your data on your device: orders, proofs, personalization, inventory and ledgers live in the app's own database, and no account is needed to use it. The developer collects nothing from the app — no analytics, no advertising, no device identifiers, and no server of the developer's receives your content. The Settings app contains an optional Sync feature for connecting to infrastructure YOU run; the sections below describe that optional connected mode. If you never connect a server, your production data never leaves your device (device backups excepted). Purchases are processed by Apple as merchant of record; we never see payment details.

Two relationships, stated plainly

MadeToOrder OS is business software used by manufacturing shops. If you are a shop's customer (you approved a proof or placed an order with a shop), your data in this system was entered by that shop and the shop decides what happens to it; in connected mode we process it only on the shop's instructions as their processor.

What is processed

• Shop accounts: email address, display name, role, hashed credentials. Purpose: providing the service. Basis: contract.
• End-customer data entered by shops: contact details, personalization text, uploaded design/proof images, order records, and production evidence photos. Purpose: order fulfilment and proof approval, on the shop's instructions. The shop's basis (normally contract) applies.
• Operational records: audit log entries and sync state (identifiers, timestamps, actions — no message content).
• We do not run advertising or analytics trackers on the app or the website, and we do not sell or share personal data.

Cookies

The web admin uses one strictly necessary first-party session cookie. The public pages use none. There is no consent banner because there is nothing to consent to.

Where data lives and who else touches it

If you never connect a server, nothing leaves your device. Two connected shapes exist. Your own server: the Settings sync feature sends data to the server YOU configure (its default is your own machine) — your data then lives wherever you run that server. The developer's optional hosted backend (separate from the app purchase, not required by it): primary storage in the European Union (France), 90-day encrypted backups including a copy held by the operator in Türkiye under Standard Contractual Clauses, transactional email via Amazon Web Services SES (EU-US Data Privacy Framework certified). The sub-processor list for that hosted backend is published at /subprocessors.

How long data is kept

• Order, proof, specification and bill-of-materials records: 10 years after order completion (commercial-records retention).
• Customer-uploaded files (designs, photos): 2 years after order completion; checksums and metadata are kept with the order.
• Sessions and proof links: 8 hours / 7 days respectively.
• Backups: 90-day rolling window.
• Audit and deletion ledgers: 10 years; they contain identifiers and actions only, not content.

Your rights

Shop customers: contact the shop, which can export or delete your data from within the product; where the shop must keep commercial records, your request restricts them instead of deleting them, as EU and US law allow. Shop account holders: you can export your workspace data and delete your account from the app; deletion completes after a 30-day grace period unless a legal hold applies. You can also write to erkannbircan@gmail.com at any time. Turkish residents additionally enjoy KVKK rights (aydınlatma metni below).

Security

TLS everywhere; per-tenant database isolation enforced by row-level security; least-privilege database roles; append-only audit ledgers; checksummed, restore-tested backups; rate limiting and CSRF protection on every state-changing route. Vulnerability reports: see security.txt.

Children

The service is not directed to children under 13 and we do not knowingly process their data.

Türkçe aydınlatma metni (KVKK)

Bu platform, siparişe özel üretim yapan atölyelere iş yazılımı sağlar. Veri sorumlusu, atölyenin müşterisine ait veriler için atölyenin kendisidir; biz bu verileri yalnızca atölyenin talimatıyla işleriz. Atölye hesap sahiplerine ilişkin verilerde veri sorumlusu Erkan Bircan (Selvola)'dır. İşlenen kategoriler: hesap bilgileri (e-posta, ad, rol, hash'lenmiş kimlik bilgileri); atölyelerin girdiği müşteri iletişim, kişiselleştirme, tasarım/ prova görselleri ve sipariş kayıtları; işlem ve eşitleme günlükleri. Amaç: hizmetin sağlanması ve sözleşmenin ifası. Saklama: sipariş/prova/kayıt belgeleri sipariş tamamlanmasından sonra 10 yıl; müşteri dosyaları 2 yıl; oturum 8 saat, prova bağlantıları 7 gün; yedekler 90 gün. Yer: birincil depolama AB'de (Fransa); şifreli yedeklerden bir kopya işletici tarafından Türkiye'de tutulur. Barındırılan arka uç kullanıldığında işlem e-postaları AWS SES (AB bölgesi) ile gönderilir ve yanıtlar Apple iCloud posta kutusuna düşer. Haklarınız (bilgi, erişim, düzeltme, silme, işlemeye itiraz): erkannbircan@gmail.com. KVKK kapsamındaki başvurularınız en geç 30 gün içinde yanıtlanır.