Durgan Bilisim

Durgan Mobile Privacy Policy

Last updated: July 1, 2026

1. Introduction

This Privacy Policy explains how Durgan Bilisim collects, uses, stores, and protects personal data when you use the Durgan Mobile application. Durgan Mobile is a business application that lets authorized users access their organization's Durgan tenant, business objects, workflows, reports, notifications, files, and support features.

2. Data We Collect

Depending on your organization's configuration and the features you use, we may process the following categories of data:

  • Account and identity data such as name, surname, username, email address, profile photo, language, timezone, tenant, roles, and permissions.
  • Authentication and security data such as session identifiers, device identifiers, push notification tokens, access logs, audit logs, and failed login information.
  • Business record data entered or uploaded by users, including customer, invoice, task, support, finance, CRM, project, and workflow records.
  • User content such as notes, comments, chat messages, attachments, images, files, and documents selected by the user.
  • Technical and diagnostic data such as app version, device model, operating system version, IP address, request logs, crash data, and performance information.

3. How We Use Data

We use the data described above to:

  • Authenticate users and provide access to the correct tenant and authorized records.
  • Display, create, update, and process business records and workflows.
  • Send in-app notifications, push notifications, email notifications, and workflow alerts when configured.
  • Support file upload, document preview, OCR, reporting, dashboard, chat, and help functions.
  • Maintain security, auditability, fraud prevention, troubleshooting, and service reliability.
  • Comply with legal, regulatory, tax, accounting, and contractual obligations.

4. Third-Party Services

Durgan Mobile may use third-party infrastructure and service providers to deliver the service. These may include hosting providers, database services, Firebase Cloud Messaging for push notifications, Google Play services, email or SMS providers, and integrations configured by your organization. These providers process data only as needed to provide their services.

5. Data Sharing

We do not sell personal data. Data may be shared with your organization, authorized tenant administrators, service providers, integration providers configured by your organization, and public authorities when required by law. Cross-tenant access is only provided when explicitly configured and authorized.

6. Files, Images, and Attachments

The app may allow users to select, upload, download, or view files, photos, and documents. These files are processed to attach them to business records, extract document information, or support workflow operations. The app accesses only the files or images selected by the user or permitted by the device operating system.

7. Notifications

We may use device push notification tokens to send workflow, message, support, approval, and system notifications. You can control notification permissions from your device settings. Some operational notifications may also be sent by email, SMS, or other channels if your organization configures them.

8. Security

We use technical and organizational measures designed to protect data, including HTTPS transport, authentication, role-based authorization, tenant isolation, audit logs, and record-level controls where configured. No system can be guaranteed to be completely secure, but we work to protect data against unauthorized access, alteration, disclosure, or destruction.

9. Data Retention and Deletion

Business records are retained according to your organization's operational, legal, accounting, and compliance requirements. Tenant administrators may manage records according to their permissions. You may request access, correction, or deletion of your personal data through the Durgan Bilisim data deletion request page or by contacting your organization. Some records may need to be retained where required by law or legitimate business obligations.

10. International Processing

Your data may be processed in countries where Durgan Bilisim, your organization, or service providers operate. We take reasonable steps to protect data in accordance with applicable privacy laws and contractual requirements.

11. Children's Privacy

Durgan Mobile is intended for business use and is not directed to children. We do not knowingly collect personal data from children through the app.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date shown above and make the updated policy available on this page.

13. Contact

If you have questions about this Privacy Policy or Durgan Mobile data processing, contact us at support@durganbilisim.com or visit https://durganbilisim.com/contact.