In short: We process your data only to help with your job applications; we do not sell it and do not use it for advertising. Your password on job platforms never reaches us; job searching and applications happen on your own computer, in your own browser. Only the information needed to score listings and fill out forms is sent to the artificial intelligence; your name, e-mail address, phone number, and profile link are not sent to the artificial intelligence — placeholders are sent in their place, and the real values are inserted into the form on our server. You can delete your account and your data yourself at any time.
Under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, to the extent applicable, the European Union General Data Protection Regulation ("GDPR"), the data controller is Besim Teknoloji Bilişim Sanayi ve Ticaret Limited Şirketi (MERSIS: 0166038224000001; address: Dodurga Mah. 103. Cadde Özdebirlik Sitesi 4/B Çayyolu 2, Türkkonut, Çankaya / Ankara; e-mail: info@besimtech.com). This notice covers the apply.besimtech.com web application and the Apply Job desktop application.
| Category | Examples |
|---|---|
| Account | Name, e-mail address, sign-in method (Google, Microsoft, Apple, or e-mail), an irreversible hash of your password, and the date and IP address on which you accepted the terms of use |
| Profile and CV | Contact details, work experience, education, skills, languages you know, work authorization, salary expectation, availability to start, the CV file and text you upload, and your saved question-answer pairs |
| Search and preferences | Search groups, locations, automatic approval thresholds, your scoring instructions, the reasons for listings you skip, and your artificial intelligence choice |
| Listing and application records | Listings found, scores and their reasons, your approve/skip decisions, application results, completed form answers, and application e-mails sent |
| E-mail tracking (optional) | If you connect it, your inbox access credentials (encrypted) and the sender, subject, body, and classification of incoming e-mails related to job applications |
| Your own artificial intelligence keys (optional) | Provider keys and account identifiers (encrypted) |
| Desktop application and technical records | Device name, application version, operating system, run statuses, error logs, and the application log at the moment of an error; if diagnostic sharing is enabled, a copy of the page from a failed application (which may contain information written in the form) |
| Payment | The plan purchased, payment status, and the information needed for invoicing. Card details are processed and stored by the payment institution; we do not store your card number. Only the card reference provided by the payment institution is kept, for automatic renewal of the subscription. |
| Job platform account summary | An irreversible hash of the job platform profile that the desktop application signs in to; the profile address itself is not stored for this purpose. It is used to ensure that a job platform account is used with only one account and that discounts are applied only once. |
| Referral program | Your referral code and link, the identity of the account that invited you, the number of people you invite, and reward records. The identity or payment status of the people you invite is not shown to you; only counts are shown. |
| Support | What you write in the support window and the correspondence |
Your password on job platforms is not transmitted to us and is not stored; your session exists only in the browser on your own computer.
Special categories of data: We do not request special categories of personal data such as health, religion, ethnic origin, union membership, or criminal convictions, and they are not required for applications. We recommend that you do not include such information in your CV or answers. If you do include it, it is processed only on your instruction and as part of your application; you can remove it at any time.
Data is collected electronically and partly by automated means.
We send e-mails about product news, tips and offers only if you ticked the separate, optional box at sign-up (explicit consent, KVKK art. 5/1; Turkish Law No. 6563; GDPR art. 6/1-a). You can stop them with one click through the link at the bottom of every such e-mail; account and security e-mails are not affected. We do not process your personal data for advertising through profiling or for sale to third parties.
Only the information needed to perform the relevant task is sent to the artificial intelligence. In all operations, your name, e-mail address, phone number, and profile link saved in your profile are replaced with a placeholder (e.g. {{EMAIL}}) before being sent; when the artificial intelligence's response comes back, the real values are put in place on our server. This way, the artificial intelligence provider does not see this information.
| Operation | Information sent |
|---|---|
| Listing scoring | The listing text and the relevant part of your profile (experience, skills, languages, work authorization, location, preferences) |
| Form filling | The questions in the form and the profile information needed to answer them, along with your saved answers (your contact details as placeholders) |
| Writing the application e-mail | Your profile summary and the listing text (your contact details as placeholders) |
| CV reading and CV suggestions | Your CV text and the texts of the listings selected for suggestions. Your contact details saved in your profile are replaced with placeholders; when filling from the CV for the first time while your profile is still empty, this information is not yet known and is therefore sent together with the CV text. |
| E-mail tracking | The content of incoming e-mails deemed related to a job application (your own contact details within them as placeholders; the sender's information may be sent) |
| Support assistant | The question you write in the support window |
Automated evaluation: Listing scores, together with the automatic approval threshold you set, can determine which listings are applied to. This evaluation is carried out on your instruction and on your behalf; no decision is made about you on behalf of third parties. You can turn off automatic approval at any time and approve listings one by one yourself. If you believe an evaluation carried out solely by automated systems has produced a result against you, you may object.
Some of our service providers' servers are located outside Türkiye; therefore your data is transferred abroad: Cloudflare, Inc. (USA-based, with infrastructure worldwide; hosting, database, file storage, and managed artificial intelligence), Microsoft Azure (USA; our payment and invoicing system), , Groq, Ollama, Cerebras and OpenRouter (USA-based; managed artificial intelligence, Section 5), Google LLC (USA; website analytics and ad measurement, only if you allow it), and Mailjet (Sinch) (European Union; verification and notification e-mails). The data processing agreements between us and these providers require that the data be processed only for the purpose of providing the service and in accordance with our instructions, that the providers not use the data for their own purposes, and that they keep it confidential and protect it with appropriate security measures. For users in the European Economic Area, these agreements apply the European Commission's standard contractual clauses or adequacy decisions. A transfer to an artificial intelligence provider you select with your own key takes place under your instruction and the contract between you and that provider.
| Data | Period |
|---|---|
| Account, profile, CV, preferences, application records, matched e-mails, error summaries, job platform account summary, referral records | As long as your account is open; when you delete your account, it is deleted from live systems immediately |
| Listing evaluations that were never acted upon | 120 days |
| Diagnostic page copies, the application log at the moment of an error, cached CV text, artificial intelligence call records | 30 days |
| Database backups | Up to 30 days; deleted data is also removed from backups at the end of this period |
| Payment and invoice records | Even if the account is deleted, for the period required by tax and commercial legislation (up to 10 years) |
| The desktop application's data on your computer | On your computer, until you uninstall the application |
Data whose period has expired is deleted, destroyed, or anonymized.
Data is transmitted over an encrypted connection (TLS). Passwords are hashed irreversibly; access credentials such as e-mail and artificial intelligence keys are stored encrypted. Access to data is limited to the people needed to operate the service. If a security breach affecting your personal data occurs, in accordance with the legislation we notify the Personal Data Protection Authority and, where necessary, the relevant supervisory authorities within 72 hours at the latest, and affected users within a reasonable and shortest possible time.
The website and the application use a mandatory session cookie to keep your session open; our infrastructure provider may add mandatory cookies for security purposes. Your browser's local storage is used to remember your screen preferences (e.g. list view) and your cookie choice. These do not require consent.
The two categories below work only with your explicit consent; in the banner shown on your first visit you can choose "Reject all" or "Choose". Without consent, no request is sent to Google:
You can change or withdraw your choice at any time through the Cookie settings link at the bottom of the website or in the user menu of the application.
To manage your applications, the service may also process limited information belonging to other people, such as the names and business contact details of recruiters appearing in listing texts and in e-mails from employers. This information is used only to track your application process. Employer contact addresses are determined only from publicly available job sources. These people can also exercise the rights below by contacting us.
Under KVKK art. 11, you have the right to: learn whether your data is being processed, request information, learn the purpose of processing and whether it is used in accordance with that purpose, know the third parties to whom it is transferred domestically or abroad, request correction if processed incompletely or incorrectly, request deletion or destruction, request that these operations be notified to the parties to whom the data was transferred, object to a result against you arising from analysis solely by automated systems, and request compensation for damages if you suffer harm due to unlawful processing.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you additionally have the rights under the GDPR to access, correct, and delete your data, request restriction of processing, data portability, object to processing based on legitimate interest, and lodge a complaint with the data protection supervisory authority in your country.
How to exercise them: You can edit your profile and CV information from within the application, and delete your account and all your data yourself from the user menu. For other requests, including a copy of your data, you can write to info@besimtech.com from the e-mail address registered to your account. Your requests are concluded free of charge within 30 days at the latest. Your right to lodge a complaint with the Personal Data Protection Authority under KVKK is reserved.
The service is for people who are 18 years of age or older. We do not knowingly process data belonging to those under 18; if we become aware of such a situation, we delete the relevant account.
We may update this notice from time to time. For significant changes, we will inform you within the application or by e-mail. The current version is always published on this page.
This document was prepared in Turkish; versions in other languages are for informational purposes. In case of any difference between the texts, the Turkish text prevails to the extent permitted by the applicable legislation.