Privacy

Collected Data and How It Is Used

IQ ERP may process the following types of data:

• User account information
• Company information
• System usage logs and access records
• IP address, browser and device data
• Commercial data entered into ERP modules by the customer
• Integration and API access information

Note: Customers are the data controllers for the data they upload into the ERP. SUB IQ acts solely as a data processor.

The collected data is used only for the following purposes:

• Providing the service and operating the system
• Performance analysis, security and logging
• Detecting and resolving possible errors
• Fulfilling legal obligations
• Improving user experience
• Product enhancement and support processes

Data is never shared with third parties under any circumstances, and is only disclosed to official authorities where there is a legal obligation.

Data Security and Data Retention

IQ ERP applies the following security standards:

• SSL/TLS encryption
• Role-based authorization management
• Network and database security
• Regular penetration testing
• Backup and disaster recovery plans
• An ISO 27001-aligned security framework

IQ ERP’s data retention policy is as follows:

• User data is retained for the duration of the contract.
• When the contract ends, data is exported upon customer request and then permanently deleted from the system.
• Log records are retained for a maximum of 2 years.

User Rights

Users have the following rights:

• Erasure of data
• Rectification of data
• Data portability
• Right of access
• Restriction of processing
• Account closure

All requests are handled via privacy@subiq.com.tr.