1. Scope and roles
Sesla AI is the data controller for website visitors, prospects and representatives of subscribing businesses.
For conversations between a subscribing business and its own customers, that business is the controller; Sesla acts as a processor and processes data only on its instructions to deliver the service.
2. Data we process
- Identity and contact: name, company, title, email, phone.
- Customer transactions: plan, invoices, payment, contract and support records.
- Conversation data: caller number, date/time, duration, audio, transcript, summary and messages (as configured by the business).
- Voice samples: only for voice cloning, with explicit consent.
- Security: IP address, logs, device/browser data.
- Marketing: communication preferences, if you consent.
3. Purposes
- Setting up and delivering the AI assistant service.
- Answering calls, recording bookings and requests, handing over to the team and sending summaries.
- Contracting, billing and usage measurement.
- Support, quality and security.
- Legal obligations under Turkish tax, commercial and telecom law.
- Product news and commercial messages, with consent.
4. AI and call recordings
Customer conversations are processed only to serve the respective business and are not used to train general AI models or shared with other customers without the business’s written approval.
Whether calls are recorded, the disclosure announcement and retention are agreed with the business during setup. Informing callers is the business’s responsibility; Sesla provides the announcement technically.
Assistant answers are generated automatically and are not medical, legal or financial advice.
5. Transfers
Data may be shared, limited to purpose, with telecom operators, cloud, speech and language-model providers, payment providers, advisers and authorised public bodies. Some providers may be located abroad; transfers follow Article 9 of Law No. 6698. We never sell personal data.
6. Retention
- Recordings and transcripts: as set by the business; otherwise during the service and deleted within 90 days after it ends.
- Contracts, invoices, accounting: 10 years as required by law.
- Security logs: as required by law.
- Marketing consent: until withdrawn.
7. Security
Access is limited to authorised staff; encryption in transit, access control and logging are applied. Breaches are notified to data subjects and the Turkish Data Protection Authority within legal deadlines.
8. Your rights
You may exercise your rights under Article 11 of the KVKK as described in our KVKK Notice. If you are a customer of a subscribing business, please contact that business first; we forward requests we receive.
9. Changes and contact
We update this policy when needed and publish the current version here.
info@sesla.ai · +90 212 909 98 52 · Cumhuriyet Mahallesi Özlem Caddesi No:33/2, Büyükçekmece 34500, İstanbul / Türkiye