Privacy Policy for Benosso Celebration Sender

Last updated: October 22, 2026

This Privacy Policy describes how Benosso Celebration Sender (“we”, “our”, or “the App”) collects, uses, and protects information when a store owner (“the Merchant”) installs and uses the App on their site. Provider: Benosso İnternet Yazılım İthalat İhracat Ticaret ve Bilgi Teknolojileri A.Ş. (“Benosso”), a company registered in Türkiye (tax no. 1640774681), benosso.com, support@benosso.com.

By installing and using the App, the Merchant agrees to the collection and use of information in accordance with this policy.

1. Information We Access

To function, the App accesses the following from the Merchant’s own site:

• Contact details — first name, email address, birthday/important dates, and subscription (opt-in) status. Used to decide who to email and to personalize the message.
• Order data — the first order date per contact (only for the Pro “order anniversary” feature). Order contents and payment data are not read.
• Store profile — store name, site URL, and the logo URL the Merchant provides, used to brand the emails.
• App settings — the Merchant’s configuration (events, templates, coupons), stored in the site’s own data collections.

The App does not access payment information, passwords, or any data unrelated to sending celebration emails.

Data about the Merchant (site owner). Separately, Benosso, as data controller, processes the following about the Merchant who installs the App: the site owner’s email address; the site name and address; install, uninstall and subscription events (plan, period, cancellation); non-personal usage counters (aggregate numbers only); and the optional answer to an uninstall/cancellation survey (a reason code and optional free text). This is not contact or customer data.

2. How We Use Information

• To send celebration/coupon emails to contacts who are subscribed.
• To create discount coupons in the Merchant’s own store account (when enabled).
• To record which emails were sent (to prevent duplicates and power the monthly counter).

Emails are sent only to contacts whose subscription status is “Subscribed”. Every email includes a one-click unsubscribe link, honored immediately and permanently.

Merchant data (site owner). The Merchant data described in section 1 is used to monitor installation, usage and operational health of the App; to help Merchants whose setup is stuck and to send them service notices; and, through the optional survey, to improve the product. These emails are service notices, not marketing, and every email contains a one-click option to stop receiving them. Legal basis: performance of the contract and Benosso’s legitimate interests (KVKK Art. 5/2-c and 5/2-f; for GDPR purposes, Art. 6(1)(b) and 6(1)(f)).

3. Third Parties (Sub-processors)

We use Resend (resend.com) to deliver email. The recipient’s email address, name, and message content are transmitted to Resend solely to deliver the message. Resend acts as a data processor. We do not sell, rent, or share data with any other third party. The App has no external dashboard or separate account.

The Merchant data described in section 1 is shared only with the service providers needed to run it: Resend (email delivery) and Vercel and Neon (hosting and database). Vercel and Neon may process data outside Türkiye; such transfers are made in line with KVKK Art. 9 and applicable safeguards.

4. Data Storage & Retention

• Settings and send-logs are stored in the Merchant’s own site data collections on the hosting platform’s encrypted infrastructure.
• Send-logs (contact id, event type, date, status) are kept to prevent duplicate sends and are removed when the App is uninstalled or upon request.
• Email delivery records are retained by Resend per Resend’s own policy.
• Merchant data (site owner): the Merchant’s email address is stored encrypted and is deleted no later than 30 days after uninstall, or as soon as the survey is submitted. The site name and address are deleted 12 months after uninstall. Free-text survey answers are deleted 13 months after they are submitted.

5. Security

• Email API credentials are stored as encrypted secrets and are never exposed to the browser or end users.
• All data transfer occurs over HTTPS/TLS.
• The sending domain is authenticated with SPF, DKIM, and DMARC.

6. Your Rights

Customers may unsubscribe at any time from any email. Merchants and their customers may request access to, or deletion of, their data by contacting support@benosso.com. Requests are actioned within 30 days. Uninstalling the App removes its settings and logs from the site.

7. Children

The App is a business tool for store owners and is not directed at children.

8. Changes

We may update this policy; the “Last updated” date reflects any change.

9. Contact

Questions: support@benosso.com — Benosso İnternet Yazılım A.Ş., benosso.com

Changes to this policy

Benosso reserves the right to update this Privacy Policy at any time. The current and binding version is always the one published at https://privacy.benosso.com; the “Last updated” date above shows the latest change. Continued use of the App after an update means the updated policy applies.