Privacy Policy

Scope and service provider

MorfUno is provided by Grafikit Bilişim ve Lojistik San. Tic. Ltd. Şti. It helps print businesses collect customer artwork securely and keep it connected to an order. This policy covers the public website, business accounts, customer flows opened with an order code, and related support communications.

MorfUno is not the store that sells or takes payment for a print product. Each print business is responsible for the legality of its customer relationship and the order information it enters into MorfUno.

Information we process

• Business and account information: name, email address, provider identifier when Google, X, or Facebook sign-in is chosen, user role, associated business, language preference, and operational access status.
• Order and activity information: business, selected product, order reference and status, creation and confirmation events, and verification data associated with the secure sharing code.
• Customer order content: uploaded artwork and its filename, type and size, or the text and date values entered for a personalized product; preview, customer confirmation, and the customer-safe result of private production preparation.
• Customer approval evidence: the versioned design-accuracy approval and, where artwork is uploaded, the versioned usage-rights declaration; language, approval time, order and design snapshot hashes, normalized personalization values where applicable, the name, type, size, and hash of the uploaded file matched to the declaration, request identifier, server-observed network address, and browser user-agent string. This bounded record is kept with the order to establish, exercise, or defend rights and is not a qualified electronic signature.
• Security and technical information: session, CSRF, and language-preference records; IP address, timestamps, requests, and error information that web-server or application security logs may record.
• Communications: your name, contact details, and message when you submit a support or rights request.

Why we use information

• Verify and authorize accounts and keep each business’s data isolated.
• Operate order codes, file upload, preview, customer confirmation, and private preparation status.
• Create a tamper-evident record of the exact order and design version approved by the customer so complaints and disputes can be investigated.
• Check file integrity and accepted file type and provide secure file access.
• Prevent or investigate fraud, unauthorized access, abuse, and technical errors.
• Answer support requests, meet legal duties, and establish, exercise, or defend rights.
• Improve service reliability and usability with aggregated or de-identified information.

Legal bases and sharing

Personal data is processed where necessary to enter into or perform a contract, meet a legal obligation, establish, exercise, or protect a right, or pursue a legitimate interest that does not override fundamental rights. If a separate activity relies on consent, consent will be requested in advance for a specific purpose and may be withdrawn.

Data may be shared only as required with the relevant print business, hosting and technical infrastructure providers, the identity provider chosen by the user, an authorized private production integration, professional advisers, and public authorities empowered by law. If an international transfer is required, the safeguards and conditions currently applicable under Article 9 of Türkiye’s KVKK will be followed.

Retention and security

Uploaded print files remain accessible for the file-retention period stated in the business’s active plan. Order, account, confirmation, support, and security records are retained only for as long as needed to provide the service, resolve disputes, and meet legal duties. Category-specific periods for integration orders will be published in this policy when the operating model is finalized.

Files are kept outside the public web directory and delivered through order-scoped or authorized-account routes. We use risk-appropriate measures such as access controls, encrypted transport, session security, logging, and backups. No internet transmission or storage method can guarantee absolute security.

Your choices and rights

You can change your language preference, protect the confidentiality of your account and order codes, and ask for information or correction through the support channel. The KVKK Privacy Notice explains the statutory request rights and procedures that apply in Türkiye.

Changes

We may update this policy when the service or law changes. The current text and effective date will be published here, and material changes may also be announced through an appropriate channel.