Privacy Policy and Data Protection Notice

The otososyal service (otososyal.otelreklami.com) is provided, and payments are collected, by HotelADSGlobal LLC (New Mexico, ABD); the service is run and supported in Türkiye by Otel Reklamı Ajansı (Tuncay Erdağ). Under Turkish Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is Otel Reklamı Ajansı (Tuncay Erdağ); for payment and invoice records, HotelADSGlobal LLC is also responsible for its own processing. Contact details are at the end of this page.

• Contact details: your name, email address, phone/WhatsApp number and our correspondence with you (WhatsApp, email).
• Business details: the hotel's name, city, phone, website, booking link, description and campaign details (prices, dates, conditions), logo and brand colour; and, if you give us your website address, text read from the public pages of your website.
• Photos you give us and the videos, images, posters, texts, hashtags and voice-overs produced from them.
• Approval and correction records: approvals and change requests you give through the approval link; and your chats with the assistant, if any.
• Payment details: package, subscription status and invoice records. Your card details never reach us; they are processed directly by our payment provider, Stripe.
• Meta (Facebook / Instagram) access (only if you give access for autopilot): the name and ID of the Facebook Pages and Instagram business accounts you give access to, and the access credential Meta issues for publishing. We do not ask for or see your password. We do not collect personal data of your followers or guests.
• Technical data: (if you use the panel) one strictly necessary cookie that keeps you signed in, and server logs for security (IP address, date and time).

How we collect it: electronically, through WhatsApp and email correspondence, sending photos and documents, the approval link, reading the public pages of the website you provide, the payment page (Stripe) and, if you give access, Meta's connection screen.

• Providing the service: producing content, presenting it for your approval, scheduling it and (with autopilot) publishing the content you approved: performance of the contract (KVKK Art. 5/2-c).
• Payment, subscription, invoicing and accounting obligations: performance of the contract and legal obligation (Art. 5/2-ç).
• Security of the service and prevention of abuse: legitimate interests (Art. 5/2-f).
• Service information, for example that your content is ready for approval: performance of the contract.

We do not sell or rent your data, and we do not open it to third-party marketing.

To provide the service, your data is shared only with the following providers, and only as far as needed:

• Google (Gemini API): your business details and small copies of your photos are processed for text generation, photo tagging and voice-overs.
• Kie AI (kie.ai): copies of your photos are processed to design post images and check the text on them; files uploaded for this purpose are deleted within 24 hours.
• DeepL SE (Germany): only when foreign-language content is prepared; posters and texts are sent for translation. Your photos are not sent.
• Stripe: monthly package payments.
• Meta Platforms (Facebook, Instagram, WhatsApp): if you give access for autopilot, to publish content you have approved on your behalf; WhatsApp correspondence runs on Meta's service.
• Hosting: your data is stored on servers we rent.

HotelADSGlobal LLC is established in the USA, and the servers of Google, DeepL, Stripe and Meta may also be located abroad. These transfers are made in line with KVKK Art. 9, with appropriate safeguards such as the standard contracts announced by the Turkish Personal Data Protection Authority. Where legally required, data may be shared with competent public authorities.

When you give partner access through Meta Business for autopilot, the information we receive from Meta is used only to publish the content you approved on your Page and account and to see the status of the access. We do not use, sell or share this data for any other purpose. You can remove the access at any time from your Meta Business or Facebook settings; when you do, we delete the credential we hold. If you chose package delivery, we never access your accounts. See the data deletion instructions for details.

• Business details, photos and produced content: for as long as you use the service.
• After you cancel and request deletion, your data is deleted within 30 days at the latest; only records we are legally required to keep, such as invoices, are kept for the legal period.
• You can ask us in writing to delete a specific photo; a photo we delete is also deleted from the server.
• Server access logs are kept for the period required by Law No. 5651 and related legislation.

We use a single cookie, strictly necessary for the service, that keeps you signed in to the panel. We do not use advertising or tracking cookies.

Connections are encrypted (HTTPS). Your photos and videos are not at a public address; they can only be reached by you and through time-limited, signed links that you share. We do not ask for or store the passwords of your accounts.

You have the right to learn whether your data is processed, to request information, to ask for correction or deletion, to learn to whom it was transferred, to object, and to claim compensation for damage.

You can submit your request in writing to the address below, by secure electronic signature or registered electronic mail (KEP), or from the email address you gave us to sm@otelreklami.com, as set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. Your request should include your full name, (if you are a Turkish citizen) your national ID number, an address or email, and the subject of your request. We conclude your request free of charge within 30 days at the latest.

We may update this text; we announce important changes by email or through our correspondence channel. The current version is always on this page.