Privacy Policy

1. Data controller

T4F Spor Teknolojileri ve Yazılım A.Ş. ("TechForSport", "we") is the controller of the personal data described in this policy.

Address: Orhangazi Mah. Teknopark Cad. Teknopark No: 1 İç Kapı No: 106, Merkez / Düzce, Türkiye
Trade registry (MERSİS): 0815120376200001
Email: info@t4fsport.com
Phone: +90 544 225 40 69

2. Data we process

We process data in two contexts: when you visit our website and when you use the platform.

• Demo request: full name, email, profile type (athlete / coach / club / academy / federation), organization name, role, sport and your message.
• Account: full name, email, phone (optional — you may leave it blank), an irreversible hash of your password (scrypt), organization name and your role.
• Session: a hash of your session token, browser information and session duration.
• Audit records: security events such as account creation, sign-in and password change, with timestamp and IP address.
• Team invitations: the email addresses you invite and the role you assign.

3. Athlete footage and performance data

The platform detects athletes, extracts skeletal (pose) data and produces performance metrics from uploaded training and match footage. Because this data relates to a person's physical characteristics, it is treated as sensitive.

The controller of this data is the club, academy, federation or individual who uploads the footage. TechForSport acts as a processor and processes it solely on the customer's instructions.

Obtaining consent and providing notice to the athletes appearing in the footage is the responsibility of the uploading party. Parental or guardian consent is required for minors.

4. Purposes and legal bases

We do not send marketing email. You receive transactional email only in response to your request or regarding your account security.

• Responding to demo requests and contacting you — legitimate interest (GDPR Art. 6(1)(f)).
• Creating your account and providing the service — performance of a contract (GDPR Art. 6(1)(b)).
• Securing accounts and preventing abuse — legitimate interest and legal obligation.
• Meeting statutory retention and reporting duties — legal obligation (GDPR Art. 6(1)(c)).

5. Where it is stored and who we share it with

We do not sell your data. We use the following service providers to deliver the service:

Our database is hosted within the European Union (Frankfurt). Email is delivered via Ireland.

All assets, including fonts, are served from our own domain, and we run no advertising services. The one exception is measurement: Google Analytics loads in consent mode and writes no cookie, and creates no identifier for you, until you accept.

We may disclose data to public authorities where legally required, limited to what the law demands.

6. Retention

• Demo requests: 24 months after the request is concluded.
• Account data: for as long as the account is open; deleted within 30 days of a closure request.
• Session records: automatically deleted after 30 days.
• Password reset requests: automatically deleted after 24 hours.
• Security audit records: 12 months.

7. Your rights

Under GDPR Art. 15–22 and Turkish Law No. 6698 (KVKK) Art. 11 you have the right to:

• Learn whether your data is processed and access it
• Have inaccurate or incomplete data corrected
• Request erasure
• Request restriction of processing and object to processing
• Receive your data in a structured format (portability)
• Object to decisions produced solely by automated analysis that adversely affect you

Send requests to info@t4fsport.com. We respond within 30 days at the latest.

If you are not satisfied, you may lodge a complaint with the Turkish Data Protection Authority (kvkk.gov.tr) or your local EU supervisory authority.

8. Cookies

We use one strictly necessary cookie: `t4f_session`, which keeps you signed in. It is HttpOnly and SameSite=Lax, cannot be read by JavaScript, and expires after 30 days.

We use no advertising cookies. We run Google Analytics 4 for measurement; its consent default is DENIED, so no analytics cookie is written unless you accept. You make that choice in the cookie banner and it is stored in your browser; clearing site data resets it.

9. Security

No system can guarantee absolute security. If you discover a vulnerability, please let us know.

• Passwords are stored irreversibly (scrypt); plaintext passwords are never retained.
• Only a cryptographic hash of session tokens is stored.
• All traffic is encrypted over HTTPS.
• Changing your password terminates all other sessions.

10. Changes

When we update this policy we change the "last updated" date on this page. For material changes we notify registered users by email.