AI Connection Privacy Notice
Privacy notice under KVKK (Turkish data protection law)
This notice explains how personal data is processed when you use the Sipnik AI connection, the feature that connects the Sipnik business panel to an AI assistant such as Claude or ChatGPT through the open MCP standard.
Data controller
Bink Teknoloji Sanayi Ticaret Limited Şirketi ("Bink", "Sipnik"). Contact: [email protected] · +90 850 242 25 43. For data about a business's own customers, the Sipnik service agreement between the business and Bink, and the business's own notice obligations, apply.
Data processed when you connect
- Panel user: user number, name, the phone number used to sign in and business permissions. Your password is only checked at sign-in, using the panel's rules, and is not stored by the connection.
- Connection details: the connecting application's name and redirect address, connection time, last use, IP address and whether the connection may make changes. Access tokens and keys are stored only as one-way hashes.
- Usage log: for each tool the assistant calls: tool name, parameters sent (such as a date range or product number), number of records returned, duration, result, IP address and time. The content of answers is not stored.
- Changes: every approved change (for example a price update) is written to the panel's activity log, and to the price history where relevant, together with who made it and through which connection.
Data sent to the assistant
To answer a question, the assistant can only read data the connected user can see in the panel, such as sales totals, order lists, product and menu details, campaigns, custom cake requests and customer feedback. Customer names are shortened (first name and surname initial) and phone numbers masked; customers' email addresses, home addresses and card details are never sent.
This data is sent to the AI service you choose (for example Anthropic or OpenAI) and is subject to that service's own privacy terms; its servers may be located outside Türkiye. The transfer is started by the authorised user on the business's behalf, who can disconnect at any time.
Purposes and legal basis
- Providing the AI connection and answering the user's questions with business data (performance of a contract, KVKK art. 5/2-c)
- Preventing unauthorised access, detecting misuse and keeping changes auditable (legitimate interest and legal obligation, KVKK art. 5/2-f and 5/2-ç)
Retention
- Tool call logs: 1 year
- Change approval codes: 30 days
- Records of disconnected or expired connections: 90 days
- Panel activity log and price history: for the Sipnik panel's general retention period
Expired records are deleted automatically every night.
Your rights
Under KVKK art. 11 you can ask whether your data is processed, request information, ask for correction or deletion, object and seek compensation. Send requests to [email protected]; we reply within 30 days. You can see and disconnect your connections on the "AI connections" screen in the Sipnik panel.