Privacy policy

Who operates Packlistly?

Neta Ofis Kırtasiye Sanayi Ticaret Limited Şirketi, Türkiye.

Registered business address: Yenibosna Merkez Mah. Kavak Sok. No:3A, Bahçelievler / İstanbul, Türkiye.

Account, product, privacy and refund questions: info@netatedarik.com.

1. Information and purposes

We process account and company contact details, team membership and permissions, authentication records, shipping information you enter or upload, generated documents, revision and approval history, integration settings, subscription references and support correspondence. We use these to provide account and document workflows, protect the service, manage subscriptions and respond to requests. Hosting systems may process connection information, such as IP addresses and request logs, for delivery and security.

Where applicable, account administration is necessary to perform our service contract; security and abuse prevention serve legitimate interests, balanced against individual rights; statutory record keeping fulfils legal obligations. If a separate optional purpose relies on consent, that consent can be withdrawn without affecting earlier lawful processing.

Your business determines the purposes of personal data in its shipping records. Where we process those records on your behalf, we act as a service provider/processor under the applicable arrangements. Do not upload unrelated sensitive personal information.

2. Providers and international processing

The online service stores company records on its configured hosting server rather than only on your device. Render provides our current hosting infrastructure in the United States; company administration and support are operated from Türkiye. Hosting providers may use their authorised subprocessors. See Render's Data Processing Addendum y privacy information.

Paddle separately processes checkout and payment information under its privacy notice. Packlistly receives the transaction/subscription references and status needed to administer access; it does not receive full payment-card details.

A configured integration or callback transfers the relevant order or report data to the destination selected by your business. Structured order imports do not use the optional AI document reader. If enabled, the AI reader uses Anthropic's API to process the document text or images submitted for extraction; it is a separate data transfer. Check its availability and processing arrangements before submitting confidential documents. An AI reader is not required for structured imports.

International processing may require specific contractual safeguards or other transfer arrangements, depending on the data and applicable law. Contact us about the data-processing and transfer terms required for your workflow before uploading data subject to those requirements. This notice does not claim that a provider's certification certifies Packlistly.

3. Cookies and security

The application uses cookies for sign-in, second-factor verification, request security and language preferences. The sign-in cookie expires after 14 days; the language preference can persist for a year. Request-security and pending-verification cookies support secure browser operations. These are functional cookies, not an advertising consent mechanism.

Security controls include HTTPS, hashed passwords, two-step verification and company/team access controls. No SOC 2 certification or independent security audit of Packlistly is claimed.

4. Retention and deletion

Account and shipment records are retained to provide your workspace, history and document workflows until deleted or a deletion request is processed, subject to lawful retention needs. The current application does not automatically delete records after a fixed period of inactivity. Cancelling a subscription does not automatically delete your records.

You can delete individual shipments through the application. For account-wide deletion, contact us: we verify authority, review associated records and explain any legal retention exception. Security, transaction and support records may need to be retained for the relevant purpose or legal obligation; deletion requests are assessed against those needs. Provider backups or snapshots may retain earlier copies until their retention cycle expires, so deleting an active record is not a promise of immediate erasure from every backup.

5. Your choices and rights

Contact info@netatedarik.com to request access, correction, export or deletion, or to object to or restrict relevant processing. Where applicable, you may withdraw consent and complain to the competent data-protection authority. We may verify your authority and explain any lawful exception, and respond within the applicable legal time limits. If your employer or another business supplied the data, its authorised account owner may need to handle the request with our assistance.

We will update this notice when processing changes materially and identify the new effective date. Contact us for details of the processing arrangements relevant to your business.