Lura Logo
Legal

PRIVACY POLICY

Transparent information about the security and processing of your data.

1. Data Controller

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by Lura Software as the data controller within the scope described below. As a SaaS platform providing cloud-based payroll services, our company commits to maintaining the highest level of security for the data of both its direct customers and their employees included in the system.

2. Processed Personal Data

The data collected through our platform fall into these categories due to the nature of the service:

Identity Data

Name, surname, ID number, date of birth.

Contact Data

Email address, phone number, business address.

Payroll & HR Data

Salary info, title, department, entry/exit dates, IBAN, social security records.

Technical Data

IP address, system logs, browser info, cookie data.

3. Purposes and Legal Basis

Your data is processed within the framework of KVKK Articles 5 and 6 for:

Execution of employment contracts (Salary calculation, payroll notification).
Fulfillment of legal obligations under Labor and Social Security laws.
Ensuring system security and preventing unauthorized access.
Managing customer support and improving service quality.

4. Data Transfer

Processed data may be transferred to official institutions (Social Security, Revenue Admin), secure cloud providers, and business partners only for the purposes stated and in accordance with KVKK Articles 8 and 9. Your data is never sold to third parties for advertising or marketing.

5. Data Security and Our Role

Lura Software acts as a "Data Processor" for employee data entered by its clients (companies). The primary control and responsibility for this data belong to our clients. Lura takes industry-standard technical measures like 256-bit SSL encryption and regular backups to ensure data security.

6. Data Retention and Destruction

Your personal data is stored for the duration required by the processing purpose. If no paid subscription is started at the end of the trial period; all personal data, employee records, and system data belonging to the user are automatically and irreversibly deleted by our system at the end of 30 (thirty) calendar days following the end of the trial period.

7. Rights of Data Subject

Under Article 11 of KVKK; you have the right to learn if your data is processed, correct, delete, or anonymize it.

Last Update: 4/9/2026