Privacy Policy

Last updated: May 2026

1. Data Controller

This privacy policy applies to the ShopToStory platform (www.shoptostory.com) operated by ShopToStory. The party responsible for processing your personal data is ShopToStory.

2. Data We Collect

When you use our platform, the following data may be collected:

3. Purpose of Data Use

The collected data is used only for the following purposes:

4. Data Sharing

Your personal data is shared with Instagram/Meta (for content publishing), iyzico (for payment processing), and Supabase (for data storage). These third parties are subject to their own privacy policies. Your data is not shared with third parties for advertising purposes.

5. Access to Instagram Data

Our platform requests permission to your Instagram account only to publish content and access basic account information. We do not access your direct messages, follower lists, or other personal data.

6. Data Security

Your data is protected through encrypted connections (HTTPS/SSL) and secure servers. Your Instagram access tokens are stored in encrypted form.

7. Data Retention

When you delete your account, all your personal data is permanently deleted from the system within 30 days. Data that must be retained due to legal obligations is kept for the period required by the applicable regulations.

8. Your Rights

Under applicable data protection laws (GDPR / Turkish KVKK No. 6698) you have the following rights:

To exercise these rights, you can email info@shoptostory.online.

9. Cookies

Our platform uses essential cookies for session management. No third-party advertising or tracking cookies are used.

10. Contact

For questions about our privacy policy: info@shoptostory.online