PRIVACY POLICY

1. INTRODUCTION

Welcome to Farm by Kokteyl (https://farm.kokteyl.com/), a specialized knowledge community platform dedicated to agriculture, agronomy, livestock breeding, and agritech.

At Kokteyl Bilgi Teknolojisi Hizmetleri A.Ş., we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, process, disclose, and safeguard your personal information when you visit our website, register an account, or use our mobile applications and services (collectively, the "Platform").

Please read this Privacy Policy carefully. By accessing or using Farm by Kokteyl, you acknowledge that you have read and understood the terms of this policy.

2. DATA CONTROLLER & CONTACT INFORMATION

For the purposes of applicable data protection laws (including the EU General Data Protection Regulation / GDPR and the Turkish Law on the Protection of Personal Data No. 6698 / KVKK), Kokteyl Bilgi Teknolojisi Hizmetleri A.Ş. acts as the Data Controller.

3. INFORMATION WE COLLECT

We collect information directly from you, automatically through your use of the Platform, and via third-party integrations:

A. Information You Provide Directly

• Account & Profile Data: Full name, email address, phone number, profile picture, location/region (e.g., province/district for local agricultural context), professional role/title (e.g., Agricultural Engineer, Farmer, Researcher), and biography.
• Professional & Verification Credentials: Professional license numbers (e.g., TMMOB Ziraat Mühendisleri Odası sicil numarası), academic diplomas, or institutional credentials submitted voluntarily for verified profile status (Blue/Red Tick verification).
• User-Generated Content (UGC): Posts, articles, questions, comments, photos, videos, tags, and votes/ratings submitted to the platform.
• Communication Data: Inquiries, feedback, and support communications sent to us.

B. Information Collected Automatically

• Device & Usage Data: IP address, browser type, operating system, device identifiers, app version, language preferences, referring URLs, pages viewed, time spent, and clickstream data.
• Location Data: Coarse location data (e.g., city, province, or region) derived from your IP address or voluntarily set in your account to deliver regional weather, crop warnings, and agricultural alerts.

C. Information from Third-Party Integrations

• Social Login & Authentication: If you log in via third-party identity providers (e.g., Google, Apple), we receive your basic profile information (name, email, profile picture) as permitted by your privacy settings with those providers.

4. PURPOSES & LEGAL BASES FOR PROCESSING

We process your personal data for the following specific purposes and legal bases:

Purpose of Processing	Legal Basis (GDPR / KVKK)
Account Creation & Service Delivery: Operating the platform, managing accounts, displaying regional agricultural feeds, and processing post submissions.	Performance of a Contract
Verification & Quality Signals: Verifying professional credentials for expert/institutional badges (Blue/Red Ticks) to maintain content accuracy and reduce spam.	Legitimate Interests / Consent
AI-Assisted Processing & Tagging: Automated moderation, semantic tag generation, and GraphRAG knowledge graph indexing via isolated background worker pipelines.	Legitimate Interests
Personalization & Regional Alerts: Displaying location-relevant weather, crop disease alerts, and regional forum threads.	Legitimate Interests / Consent
Platform Security & Fraud Prevention: Detecting spam, abuse, unauthorized logins, and enforcement of community guidelines.	Legal Obligation / Legitimate Interests
Compliance & Legal Obligations: Fulfilling statutory requirements, cooperating with law enforcement, and maintaining official audit logs.	Legal Obligation

5. AI PROCESSING & AUTOMATED MODERATION

To ensure high-quality, expert-driven agricultural knowledge and to filter out noise, Farm by Kokteyl utilizes automated AI systems and microservices:

• Content Moderation & Safety: Posts and comments pass through automated filters to detect spam, hate speech, and toxicity before or after publication.
• Semantic Tagging & Graph Building: Natural language processing models analyze post text to suggest relevant agricultural tags (e.g., crop types, diseases, irrigation methods) and link them to our internal Knowledge Graph.
• Human Oversight & Appeal: Automated moderation decisions (such as content rejection or comment restrictions) are subject to review and appeal by human moderators or community editorial boards. Automated tools do not produce legally binding effects on users.

6. DATA SHARING & DISCLOSURE

We do not sell, rent, or trade your personal data to third parties. We may disclose your personal information only under the following conditions:

• Publicly Displayed Content: Your public profile name, avatar, professional title, location (if configured public), verified badges, and published posts/comments are visible to other registered users or site visitors based on your selected post visibility settings (Everyone, Professionals Only, etc.).
• Service Providers & Sub-processors: Trusted third-party vendors who provide infrastructure, hosting (e.g., cloud platforms), email delivery, error logging, and analytics services, bound by strict data processing agreements (DPAs).
• Legal Requirements: When required by law, court orders, subpoenas, or official administrative demands by regulatory authorities.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or asset sale involving Kokteyl Bilgi Teknolojisi Hizmetleri A.Ş., user data may be transferred as a business asset under confidentiality protections.

7. DATA STORAGE & INTERNATIONAL TRANSFERS

Your personal data is stored securely in enterprise-grade database infrastructures (including PostgreSQL, Qdrant Vector DB, and Neo4j Graph DB).

Depending on your jurisdiction, your data may be transferred to and processed in countries outside your residence (e.g., cloud data centers within the European Union or Türkiye). We ensure that all such transfers comply with applicable legal frameworks (such as Standard Contractual Clauses or statutory adequacy decisions) to protect your information.

8. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory retention periods:

• Account Data: Retained while your account is active. Upon account deletion requests, your profile is anonymized or purged within 30 days, unless longer retention is required by law.
• Public Content: User-generated posts and articles may remain in an anonymized format after account deletion to maintain the structural integrity of the agricultural knowledge base and community Q&A repositories.
• Log & Analytics Data: System logs are retained for security audit purposes for up to 12 months.

9. YOUR DATA PROTECTION RIGHTS

Subject to applicable laws (such as GDPR or KVKK), you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal account and associated data.
• Right to Restrict or Object to Processing: Object to processing based on legitimate interests or request restrictions on certain processing activities.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on your explicit consent.

To exercise any of these rights, please contact us at [email protected].

10. CHILDREN’S PRIVACY

Our Platform is directed at agricultural professionals, researchers, farmers, and enthusiasts aged 16 and older (or 13 depending on local jurisdiction limits). We do not knowingly collect or solicit personal data from children under the age of 16. If we learn that we have collected personal data from a child under the required age without parental consent, we will delete that information promptly.

11. COOKIES AND TRACKING TECHNOLOGIES

We use essential, functional, and analytical cookies and similar tracking technologies to keep you logged in, remember your preferences, measure platform usage, and enhance security. You can manage cookie settings directly in your browser or through our on-site Cookie Banner.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our technical architecture, legal obligations, or service features. We will notify you of material changes by posting the updated policy on this page with a revised "Effective Date" and, where appropriate, via email or in-app notification.

13. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: