Privacy Notice

Last updated: 2026-06-02

This English text is a summary provided for convenience. TreScout operates under Turkish law and the binding document is the Turkish original, prepared under Law No. 6698 on the Protection of Personal Data (KVKK): Aydınlatma Metni. If the two texts differ, the Turkish text applies.

1. What we collect

When you join the early access list we collect your email address only. We do not collect any other personal data (name, phone number and so on). Our server may record technical request metadata (submission time, and which form the request came from); this is not used to identify you.

2. Why we collect it

We process your email address only in order to:

• send you the TreScout launch announcement,
• send you a priority invitation when early access opens,
• ask you for feedback when needed (for example an interview invitation).

We do not share it with third parties for marketing, we do not sell it, and we do not pass it to ad networks.

3. Legal basis

Your data is processed on the basis of your explicit consent (KVKK Article 5/1). You give that consent when you fill in the form and press the submit button.

4. How long we keep it

We keep your email address until the launch happens or until you ask us to delete it, whichever comes first. If you join the TreScout product after launch, retention continues under the product terms; if you do not join, your email is deleted from our systems.

5. Where your data is stored

• Form infrastructure: Vercel (serverless function · receives and validates the request, forwards it to Resend; stores no persistent data)
• Early access list: Resend Audiences (US/EU infrastructure)
• Notification and launch emails: Resend (US/EU infrastructure)
• Product database: Supabase (Frankfurt, Germany · after the product launch it stores user preferences, delivery history and request deduplication in PostgreSQL)

These providers comply with international data protection standards (GDPR, SOC 2). Supabase keeps data inside the EU (Germany); Resend uses a US/EU hybrid infrastructure. Data is therefore transferred abroad, but the personal data we process is limited to your email address and your preferences (delivery hour, source filters and similar).

6. Your rights

Under Article 11 of the KVKK you have the right to:

• learn whether your data is being processed,
• request information about that processing,
• request deletion or destruction of your data,
• request that your data be corrected,
• object to the processing of your data.

For any of these requests write to hello@trescout.com. We respond within 30 days.

7. Cookies and analytics

The TreScout landing pages place no tracking cookies in your browser. The form works through a direct API call; no third-party advertising or behaviour tracking widget is loaded.

We use Vercel Web Analytics and Vercel Speed Insights to count page visits. These services use no cookies, collect no fingerprint and store no personal data. Only anonymous page views and performance metrics are collected. This is GDPR and KVKK compliant.

The pages use the Inter typeface. Font files are served from our own domain (trescout.com) rather than a third-party font service such as Google Fonts, so your IP address is not shared with a font provider.

8. Security measures

• Traffic is served over HTTPS only.
• API keys are held as server-side environment variables and are never exposed to the browser.
• A Content Security Policy blocks foreign scripts at browser level (XSS protection).
• The form is protected against automated submissions (origin check, honeypot, rate limiting).

9. Contact

Data controller: TreScout · hello@trescout.com. Write to us for any question or request about your personal data.

10. Changes

If this notice changes we update the date at the top of the page. The authoritative version is always the Turkish text: Aydınlatma Metni.