Privacy Policy

This Privacy Policy describes how Reaktör Teknoloji Tic. Ltd. Şti., a limited company registered in Istanbul, Türkiye, trading as Reactll collects, uses, and protects your personal information when you visit our website or use our services.

1. Information We Collect

Information You Provide

• Contact Forms: When you submit a contact form or request a free audit, we collect your name, email address, company name, industry, and message content.
• Newsletter Subscriptions: When you subscribe to our newsletter, we collect your email address.
• Client Portal: If you become a client, we collect additional business information necessary to provide our services.

Information Collected Automatically

• Cookies: We use cookies to improve your browsing experience and analyze site traffic.
• Analytics Data: We collect information about how you interact with our website, including pages visited, time spent, referral sources, browser type, device type and country. Our own analytics does not store your IP address: it is used once to make a value that changes every day, and then discarded.
• Tool Usage: When you use our free tools (such as the Security Check), we collect the URLs and inputs you provide to deliver results.

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Send newsletters and marketing communications (only with your consent)
• Improve our website, tools, and services
• Analyze website traffic and usage patterns
• Prevent fraud and ensure security
• Comply with legal obligations

3. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We work with trusted third-party services (e.g., email delivery, analytics, hosting) that process data on our behalf under strict confidentiality agreements.
• Legal Requirements: We may disclose information when required by law, court order, or governmental regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4. The Reactll App

The Reactll app (iOS and Android) is for our clients and for people who check a website with it. This section covers what the app adds to the rest of this policy.

What the app collects

• Account: your email address (you sign in with a one-time code sent to it), your name and, if you add it, your phone number.
• Profile (optional): job title, city, LinkedIn link, birthday, how you prefer to be contacted, whether you want our emails, and a profile photo.
• Support requests: the text, photos, PDF files and voice notes you send to our team.
• What you add: competitors you ask us to track (names and links), “I’m interested” notes you send us, and the website addresses you check.
• Device: a push notification token and your device name, so we can send notifications to the right phone.
• Messages from us: whether a message from Reactll was delivered, seen, opened, tapped or dismissed.

The app does not show ads, does not track you across other companies’ apps or websites, and does not sell any of this data.

AI services

• Voice notes: when you record a voice note in a support request, the recording is sent to OpenAI (model gpt-4o-transcribe) to turn it into text. The app asks for your consent before the first recording.
• Website check summaries and review reply drafts: the plain-language summary of a website check, and the draft replies to Google reviews that our team may suggest, are written with OpenAI from the check results and the public review text.

We use OpenAI’s API under its business terms, which do not use API data to train its models.

Data we process for your company

For clients, the app shows enquiries sent through your website’s forms, visits to your website, and public reviews and figures from your online accounts (such as your Google Business Profile). We process this data on your company’s behalf, to run and report on the website and accounts we look after for you.

Service providers used by the app

Our servers (DigitalOcean, Frankfurt), Cloudflare, Expo and Apple / Google push services (to deliver notifications), Resend (sign-in codes and report emails), OpenAI (as above) and Google PageSpeed Insights (website checks).

Deleting your account

You can delete your account from inside the app. Deleting it removes your app sign-in, devices, notifications and message history, your profile photo, and the phone, job title, city, LinkedIn, birthday, contact preferences and email opt-in on your profile. We keep your name, email and company on our client record, with your support requests and invoices, because we need them to serve and bill your company. Website checks you ran are kept without your account; their screenshots are deleted after 30 days, except the latest check of each site. To have the rest removed as well, write to [email protected].

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Remember your preferences and settings
• Understand how you use our website
• Deliver relevant content and improve user experience
• Measure the effectiveness of our marketing efforts

You can control cookies through your browser settings. Disabling cookies may affect some features of our website.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Contact form submissions are retained for up to 24 months. Newsletter subscriptions remain active until you unsubscribe. Our own website analytics is deleted after 24 months.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Under GDPR (European Economic Area)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Under CCPA (California, USA)

• Right to know what personal information is collected
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security assessments.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: [email protected]
• Company: Reaktör Teknoloji Tic. Ltd. Şti.
• Address: Sahkulu Mah. Serdar-i Ekrem Cad. No:15/A, Galata, Beyoglu/Istanbul 34430, Turkey