Privacy Policy

Cargo Loader 3D, Software Fabrica Bilişim Anonim Şirketi

Date of Publication: 13/10/26

Last Updated: 13/10/26

1. WHO WE ARE AND WHAT THIS POLICY COVERS

We are Software Fabrica Bilişim Anonim Şirketi, a company registered in Türkiye (“Company”, “we”, “us”, or “our”). We operate the web-based 3D cargo loading optimization application available at
https://cargoloader3d.com
(the “Application” and, together with the associated services, the “Services” as defined in our Terms of Service).

This Privacy Policy describes how we collect, use, share, retain, and protect information when you visit our website and use the Application. It is prepared to fulfil our clarification obligation under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and to inform you in accordance with other applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”). It is presented to you when you create an account and remains available on our website at all times.

This Policy covers both personal data (information that identifies, or can be used to identify, a natural person) and other information we collect, including data that is not personal data, which is described separately in Section 3. This Policy forms part of, and must be read together with, our Terms of Service and our Cookie Clarification Text. If you do not agree with this Policy, please do not use the Services.

2.INFORMATION WE COLLECT

Information you provide. When you create an account and use the Application, you provide certain personal information, such as your name and email address. If you contact us for support or otherwise communicate with us, we collect the information you choose to share in those messages. If your account is created or administered by an organization (for example, under a multi-seat License), that organization is responsible for the account data it provides to us, and we process that data to provide the Services.

Content you enter. The Application processes the cargo, container, truck, and loading data you enter (such as dimensions, weights, and specifications) in order to generate loading optimization recommendations. This content is primarily business data rather than personal data; Section 3 explains how we treat it.

Information collected automatically. When you visit our website or use the Application, we automatically collect certain technical and usage information, such as your IP address, browser type, operating system, referring pages, and your interactions within the Application (pages viewed, features used, and similar usage data). We also collect log data, such as access times and error or diagnostic information, to keep the Services secure and running properly.

Payment information. Paid Licenses are sold and processed by Paddle.com Market Ltd. (“Paddle”), our Merchant of Record. Paddle is the seller of record for all purchases: your payment card and billing information are collected and processed by Paddle under Paddle's own privacy policy, and we do not store or have access to your payment card information. Invoices are issued by Paddle and can be downloaded from the customer portal at paddle.net.

Special categories of personal data. The Application is not designed to collect special categories of personal data (KVKK Art. 6; GDPR Art. 9), such as data about health, biometrics, or political opinions. Please do not enter such data into the Application.

3. DATA THAT IS NOT PERSONAL DATA

Some of the information we handle is not personal data at all, or stops being personal data once it no longer identifies you:

• Your cargo and loading content. The cargo, container, truck, and loading data you enter is business data. We process it to provide the Application's core functionality and, as described in Article 13.2 of our Terms of Service, to provide and improve the Services. We do not treat this content as personal data unless it actually identifies a natural person.
• Aggregated and anonymized data. We may aggregate or anonymize information collected through the Services, for example, usage statistics, feature popularity, or performance metrics, so that it no longer identifies any individual. Once information is truly aggregated or anonymized, it is not personal data, and we may use and share it for any lawful purpose, including product development, analytics, and service improvement.
• Recommendations and indicators. The loading schemes, center-of-gravity figures, axle-load distributions, and similar outputs are generated algorithmically from the data you provide. They are informational tools for your own logistics decisions; they do not produce legal effects (see Article 3.3 of the Terms of Service).

4. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, pixels, web beacons, and similar technologies on our website. Strictly necessary cookies keep the website and your session working and do not require your consent. Performance and analysis, personalization and preference, and advertising and marketing cookies are set only with your explicit consent, which you may give, change, or withdraw at any time through the cookie preference panel on our website (also reachable from the “Cookie Settings” link in the footer) and through your browser settings. For the full list of cookies, providers, purposes, and durations, see our Cookie Clarification Text.

5. HOW AND WHY WE USE YOUR INFORMATION

We use your personal data only for the purposes below, each on the legal basis shown:

• To provide the Services and manage your account, creating and maintaining your account, delivering Licenses and features, processing upgrades and downgrades, and sending service-related notifications about your License or account. Legal basis: performance of our contract with you (KVKK Art. 5/2(c); GDPR Art. 6(1)(b)).
• To communicate with you, responding to your support requests and other messages. Legal basis: performance of our contract (KVKK Art. 5/2(c); GDPR Art. 6(1)(b)).
• To analyze, improve, and personalize the Services, understanding how the Services are used and perform, fixing issues, improving features, and personalizing your experience. Legal basis: our legitimate interests (KVKK Art. 5/2(f); GDPR Art. 6(1)(f)).
• To keep the Services secure and prevent abuse, protecting our systems, detecting and preventing fraud, misuse, and unauthorized access, and enforcing our Terms of Service. Legal basis: our legitimate interests (KVKK Art. 5/2(f); GDPR Art. 6(1)(f)).
• To comply with legal obligations, keeping records required by tax, accounting, and other applicable laws. Legal basis: legal obligation (KVKK Art. 5/2(ç); GDPR Art. 6(1)(c)).
• For analytics and marketing cookies, and for marketing emails, only with your explicit consent, which you may give or withdraw at any time through the cookie preference panel or the unsubscribe link in our emails. Legal basis: explicit consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)).
We do not use your personal data for purposes incompatible with those described above.

6. WHO WE SHARE INFORMATION WITH

We do not sell your personal data, and we do not share it with third parties for their own purposes.

We share personal data only in the following limited cases:

• Service providers and partners. Our group companies and business partners, and service providers who help us operate the Services, including Paddle (payment processing as Merchant of Record), Cloudflare (hosting, security, and infrastructure), and Google (analytics), and our hosting, email, and professional advisers (such as legal and accounting professionals). These recipients process personal data only under contract, on our instructions, and only to the extent necessary to provide their services.
• Your consent. Where you have given us explicit consent to share.
• Legal requirements. Where required by law, regulation, or a valid request from a public authority or court.
• Business transfers. In connection with a merger, acquisition, reorganization, or sale of assets, in which case this Policy will continue to apply to your data.

Paddle processes your payment and transaction data as an independent data controller for the purchase, under its own privacy policy (available at paddle.com/legal).

7. INTERNATIONAL TRANSFERS

Some of our service providers are located outside Türkiye, including in the United Kingdom, the United States, and the European Union. Where we transfer your personal data abroad, we do so in accordance with Article 9 of the KVKK, and, for transfers subject to the GDPR, on the basis of the European Commission's Standard Contractual Clauses or other valid transfer mechanisms.

8. HOW LONG WE KEEP YOUR INFORMATION

We keep your personal data only as long as necessary for the purposes described in this Policy. In practice, for as long as your account is active, and as required by applicable legal obligations, such as tax and accounting record-keeping. Support communications and log data are kept only as long as needed for support, security, and legal purposes. When your data is no longer needed, we delete, destroy, or anonymize it.

Free Accounts do not expire on their own. If you delete your account or it is terminated, we may delete your personal data and content, as described in Articles 15.2 and 16.2 of our Terms of Service. You are responsible for keeping your own backups of any content you enter into the Application.

9. HOW WE PROTECT YOUR INFORMATION

We apply appropriate technical and organizational measures, including encryption in transit (TLS), access controls, and similar safeguards, to protect your personal data against unauthorized access, loss, or misuse. Please note that no method of transmission or storage over the Internet is entirely secure, and you provide your information at your own discretion.

10. THIRD-PARTY WEBSITES AND SERVICES

Our website and the Application may contain links to, or integrate with, third-party websites, services, and providers (such as Paddle's checkout). This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third party before providing them with your information.

11. CHILDREN

The Application is not directed to children, and you must be at least 18 years old to create an account, as set out in our Terms of Service. We do not knowingly collect personal data from anyone under 18.

12. YOUR RIGHTS AND CHOICES

Your rights. Under Article 11 of the KVKK (and, where applicable, the GDPR), you have the right to:

• learn whether your personal data is being processed, and request information about that processing;
• learn the purpose of processing and whether your data is used in accordance with that purpose;
• know the third parties, in Türkiye or abroad, to whom your personal data is transferred;
• request the correction of incomplete or inaccurate data;
• request the deletion or destruction of your personal data under the conditions of Article 7 of the KVKK;
• request that corrections and deletions be notified to the third parties concerned;
• object to a result against you arising exclusively from the analysis of your data by automated systems;
• request compensation for damage caused by unlawful processing.

Where the GDPR applies, you also have the right to restrict processing and to receive your data in a structured, commonly used, and machine-readable format (data portability). Where we rely on your consent, you may withdraw it at any time; withdrawal does not affect processing already carried out on that basis. You may also lodge a complaint with the Turkish Personal Data Protection Authority (kvkk.gov.tr) or, if you are in the EEA or the UK, with your local supervisory authority.

Your choices.

• Marketing emails. We send marketing communications only with your consent. You can unsubscribe at any time using the link in our emails; you will continue to receive service-related notifications about your account and Licenses.
• Cookies. You can manage cookies through the cookie preference panel and your browser settings, as described in Section 4.
• Account deletion. You can ask us to delete your account and data as described in Section 8. Deletion may be immediate and permanent and cannot be undone (see Article 16.2 of the Terms of Service).
• Do Not Track. We do not currently respond to browser “Do Not Track” signals.

To exercise your rights, contact us at info@softwarefabrica.com or in writing at our registered address above, using the e-mail address registered in your account. We will respond as soon as possible and in any case within thirty (30) days, free of charge (where a request requires additional cost, the fee set by the Personal Data Protection Board may apply).

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes take effect when published on our website, and the “Last Updated” date at the top of this Policy will change accordingly. We encourage you to review this page regularly. Your continued use of the Services after a change means you accept the updated Policy.

14. CONTACT US

Software Fabrica Bilişim Anonim Şirketi Cumhuriyet Mah. Şişecam Yolu Sk. Ar-ge G3 No: 28, Gebze/Kocaeli, Türkiye.

E-mail:
info@cargoloader3d.com (product support) · info@softwarefabrica.com (company inquiries)