Privacy notice
Last updated: 3 November 2026
This notice explains what personal data SupplyForge collects, why, and what rights you have. It is written to meet the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
Data controller
The data controller is Alican Cömert, İzmir, Türkiye. Contact: hello@supplychainforge.com.
What we collect
- Your email address, when you join the waitlist or request your diagnostic report.
- Your diagnostic answers and scores by exam area.
- Optional answers you choose to give: the month of your exam and whether your employer is paying.
- Anonymous usage statistics (pages visited, buttons used) through Vercel Web Analytics, which does not use cookies and does not identify you.
- If you buy a product: the merchant of record collects your payment and billing details; we receive your name, email and order details from it.
Why we use it
- To send you your diagnostic report and the emails you asked for (legal basis: your explicit consent).
- To tell you when early access opens and send occasional study emails (consent; you can withdraw at any time).
- To provide products you buy and handle support and refunds (performance of a contract).
- To understand how the site is used and improve it (legitimate interest, using anonymous statistics only).
Who processes it for us
- Vercel Inc. (website hosting and anonymous analytics)
- MailerLite (email list and email delivery)
- Lemon Squeezy or Paddle (payments, as merchant of record), once sales open
- Supabase (user accounts and progress), once paid accounts open
Some of these providers store data outside Türkiye and the EU, including in the United States. Transfers rely on your explicit consent and on the providers' contractual safeguards.
How long we keep it
We keep your email and diagnostic results until you unsubscribe or ask us to delete them. Purchase records are kept for as long as tax law requires.
Your rights
You can ask whether we process your data, get a copy, have it corrected or deleted, object to processing, withdraw consent and complain to the supervisory authority (in Türkiye, the Personal Data Protection Authority, KVKK; in the EU, your local data protection authority). Every email has an unsubscribe link. For anything else, write to hello@supplychainforge.com and we will reply within 30 days.