This is a translation provided for convenience. In case of any discrepancy, the Turkish version prevails.
At ibansource we care about the privacy of everyone who uses the Service at https://test.ibansource.com. This policy summarises how we handle your information. The legal details of personal data processing (purposes, legal grounds, transfers, retention periods and your rights) are set out in the Privacy Notice (KVKK).
1. Our Principles
- Data minimisation: we only ask for what is needed to provide, bill and secure the Service.
- IBAN lookups are not stored: the IBANs you check are never written to our database; only the daily number of lookups is kept for quotas.
- We never hold your card: payments are taken in the secure form of the licensed payment institution iyzico; your card number, expiry date and security code never reach our systems.
- No selling: we do not sell or rent your personal data.
- No promotional e-mail: we only send mandatory messages about your account and purchases.
2. Security Measures
- Site and API traffic is served over encrypted connections (HTTPS/TLS).
- Passwords are stored as one-way hashes (Argon2id); nobody, including our staff, can see your password.
- Only a hash of each API key is stored; the full key is shown to you once, when it is created.
- Failed login attempts are rate-limited and accounts are temporarily locked against brute-force attacks.
- Access to the admin panel is role-based and actions are recorded in an audit log.
- Forms are protected against CSRF and pages by a Content Security Policy (CSP).
No system is 100% secure. If you suspect unauthorised access, change your password, rotate your API key under Account › API if needed, and let us know at info@ibansource.com. In the event of a data breach, the data subjects and the Personal Data Protection Board are notified in accordance with KVKK Art. 12.
3. Third-Party Services
- iyzico — payments and refunds, processed under iyzico's own privacy policy and PCI-DSS standards.
- Google Analytics and Google AdSense — loaded only if you allow them in your cookie preferences. See the Cookie Policy.
- Hosting and e-mail infrastructure — to run the Service and deliver transactional e-mails.
We are not responsible for the privacy practices of institution websites or other external sites linked from our site.
4. Children
The Service is not directed at persons under 18, and you must be at least 18 to register. If we learn that we have unknowingly collected a child's data, we delete it.
5. Controlling Your Account
- Update your name, e-mail and billing details on the Account page.
- Find copies of the agreements you accepted under Account › Agreements.
- Change your cookie preferences with the Cookie Preferences link at the bottom of every page.
- Request deletion of your account at info@ibansource.com.
6. Changes
This policy may be updated. The current version is always published on this page; you will be informed on your Account page of significant changes.
7. Contact
ibansource · Çamtepe Mahallesi Camii Sokak No: 1 Daire: 12, 35330 Narlıdere, İZMİR, Türkiye · info@ibansource.com · +90 555 555 55 55