Privacy Policy

Last updated: October 2026

We process and protect the personal data of MosToDo users in accordance with applicable data protection law.

1. Data Controller

TEYOBI BILISIM YAZILIM SANAYI TICARET LIMITED SIRKETI

Head office: 1246th St. No:3/9, Cevizlidere Neighborhood, Cankaya, Ankara, Turkey · Contact office: 1397th Ave. No:11/1, Oguzlar Neighborhood, Cankaya, Ankara, Turkey

Phone: +90 530 505 15 07

Tax No: 8410792091 | Mersis: 0841079209100001

Email: [email protected]

2. Personal Data Collected

Data Category	Data Collected	Collection Method
Identity	Name, surname, username	Registration form
Contact	Email address, phone number	Registration form, billing address
Payment / Billing	Billing address, tax number, company name	Payment form
Usage	Tasks, projects, notes, action logs	App usage
Technical	IP address, browser type, OS, cookies	Automatic (server logs)
Subscription	Plan info, payment history, transaction references	Payment provider (Paddle / Apple)

Note: Card details are never stored on our servers; they are processed by Paddle (web) or Apple (iOS in-app purchases).

3. Processing Purposes & Legal Basis

check_circle

Service Provision

Account creation, workspace management, subscription activation and technical support.

check_circle

Legal Obligation

Issuing invoices and maintaining commercial records under tax legislation.

check_circle

Legitimate Interest

Service security, fraud prevention, server performance monitoring and product improvement.

check_circle

Explicit Consent

Marketing emails and product updates, only when consent has been obtained.

4. Data Sharing with Third Parties

We do not sell, rent, or commercially share your personal data. It is only shared in the following cases:

Paddle / Apple	Name, email, billing country/address and order details for payment processing. Paddle.com acts as Merchant of Record for web purchases; Apple processes in-app purchases on iOS. Card data is handled only by these providers.
Infrastructure	Hosting and database services (data centres in the EU or Turkey compliant with data protection law).
Email	Email service provider for transactional emails (address and content only).
Legal Requirement	In case of a court order, legal request or official authority obligation.

5. Data Retention Periods

Account data	Anonymised within 30 days of account deletion.
Invoices & payment records	Retained for 10 years as required by tax legislation.
Server logs	Retained for up to 90 days, then deleted.
Marketing preferences	Retained until unsubscribed.

6. Cookies

Our service uses essential cookies to maintain your session and remember your preferences. No analytics or advertising cookies are used.

Session cookie	Maintains authentication state. Deleted when the browser is closed.
Theme preference	Stores light/dark mode preference in LocalStorage.

7. Your Rights

You have the following rights under applicable data protection law:

info

Right to information

Learn what data is being processed about you.

edit

Rectification

Request correction of incomplete or inaccurate data.

delete

Erasure

Request deletion of data not subject to a legal retention obligation.

block

Objection

Object to processing carried out on the basis of legitimate interest.

download

Data portability

Request your data in a portable format.

gavel

Right to complain

Lodge a complaint with the Personal Data Protection Authority.

To exercise your rights, email [email protected]. Requests are answered within 30 days.

8. Data Security

We apply the following technical and administrative measures to protect your personal data:

All data transmission is protected by HTTPS / TLS 1.2+ encryption.
Passwords are stored using a one-way (bcrypt) hash; never stored in plain text.
Payment data is processed exclusively by PCI DSS-compliant payment providers (Paddle and Apple).
Database access is restricted using the principle of least privilege.
Security vulnerabilities are monitored through regular internal audits.

9. Policy Changes

We may update this policy from time to time. Material changes will be notified by email or in-app notification. The current policy is always published on this page.

contact_support

Questions?

For any privacy-related queries, email [email protected].

Developed by TEYOBI