kuik → are8kuik is becoming are8 — going global.Read the transformation story
are
Legal documents

Transparency starts with the contract.

As are8 Finansal Teknolojiler A.Ş., all the texts that govern our services are here. You can switch between documents from the menu on the left.

This is an informational translation; the Turkish text prevails. These texts are drafts pending legal review and are published for information purposes only until the final version takes effect.

KVKK Disclosure Statement

Effective date · 1 July 2026 · v1.1
05 / 05

are8 Finansal Teknolojiler A.Ş. acts as data controller within the scope of Law No. 6698 on the Protection of Personal Data ("KVKK"). This text has been prepared to fulfill our disclosure obligation pursuant to Article 10 of the KVKK.

1. Categories of personal data processed

The following categories of data are processed through the website, application forms and product use:

Identity and contact data: full name, title, e-mail, phone.Customer transaction data: application records, request and support history.Commercial data relating to the business: brand, branch structure, turnover range, collection and procurement information.Transaction security data: IP address, session and log records.

2. Purposes of processing

Your data is processed for the purposes of establishing and performing the service contract, opening and managing the account, carrying out support processes, preparing offers, ensuring product security, fulfilling legal obligations, and — where you have given explicit consent — commercial communication.

3. Legal grounds

The processing activity is based on the legal grounds of KVKK Art. 5/2-(a) express provision in laws, Art. 5/2-(c) direct relation to the establishment or performance of the contract, Art. 5/2-(ç) fulfillment of a legal obligation, Art. 5/2-(f) the legitimate interest of the data controller, and — in cases other than these — Art. 5/1 explicit consent.

4. Transfer and recipient groups

Your data may be transferred to the following recipient groups within the scope of Articles 8 and 9 of the KVKK:

Information technology, cloud infrastructure, hosting and call center suppliers (in the capacity of data processor).Financing companies licensed by the BDDK under Law No. 6361 and embedded finance business partners — only within the scope of your explicit consent; this transfer covers your commercial and financial data (turnover, collections, expenses, bank account, tax and registry information, and are8 AI score outputs).Authorized institutions such as the Credit Registration Bureau (KKB), Findeks and the Risk Center — for the purpose of querying risk information within the scope of your explicit consent.Payment institutions, electronic money institutions and banks — for the purpose of collection, reconciliation and disbursement operations.Authorized public institutions and organizations, courts and enforcement offices — within the framework of our legal obligations.Independent audit, legal and financial advisory firms — under a contractual confidentiality obligation.

5. Retention and destruction

Your personal data is retained for the period required by the processing purpose and for the statute-of-limitation periods stipulated in the relevant legislation; at the end of the period it is deleted, destroyed or anonymized in accordance with our periodic destruction policy.

6. Your rights under Article 11 of the KVKK

As a data subject you have the following rights:

To learn whether your personal data is processed and, if so, to request information about it.To learn the purpose of processing and whether the data is used in accordance with that purpose.To know the third parties to whom the data is transferred at home or abroad.To request the correction of incomplete or incorrectly processed data.To request the deletion or destruction of the data.To request that correction, deletion or destruction operations be notified to the third parties to whom the data has been transferred.To object where a result to your detriment arises as a result of analysis through automated systems.To demand compensation for damages you suffer due to unlawful processing.

7. Explicit consent and withdrawal

The sharing of financial data with financing institutions and the querying of risk information rely solely on the explicit consent you give during the application. You may withdraw your explicit consent at any time via info@are8.net; your withdrawal request is applied prospectively and does not affect transactions lawfully carried out up to that moment. If you do not give explicit consent, you may continue to use our free products but will not be able to benefit from embedded finance services.

8. Method of application

You may submit your requests by e-mail to info@are8.net or in writing to Küçükbakkalköy, Kayışdağı Cd. No:23, 34750 Ataşehir/İstanbul. Your application will be answered free of charge within 30 days at the latest.

Data controller / service provider

are8 Finansal Teknolojiler A.Ş. · Küçükbakkalköy, Kayışdağı Cd. No:23, 34750 Ataşehir/İstanbul · info@are8.net · 0850 309 58 45

are8 is not a financing company. Embedded finance services are provided within the framework of a business partnership established with financing companies licensed by the BDDK under Law No. 6361.