Privacy Policy
Last updated: 7 November 2026
This policy explains how the PanoIO application (“PanoIO”, “the service”) processes personal data. PanoIO is software that lets businesses manage the messages and comments arriving at their WhatsApp, Instagram and Facebook accounts on one screen.
1. Who we are
PanoIO is provided by MORE Organizasyon Turizm Anonim Şirketi (“MORE”, “we”).
Address: __ADDRESS__
Email: info@panoio.com
Our role depends on the type of data:
- PanoIO user accounts (such as the names and email addresses of our customer’s staff): MORE is the data controller.
- Items arriving at our customer’s accounts (messages and comments from guests and followers): the business using PanoIO is the data controller. MORE is the data processor and processes this data only on the business’s instructions and to provide the service.
2. Data we process
| Data | Examples |
|---|---|
| User account | Name, email address, role, language preference. Passwords are stored as one-way hashes; the password itself is never stored. |
| Connected platform accounts | The ID and name of the Facebook Page, Instagram account and WhatsApp number; access tokens issued by Meta (stored encrypted). |
| Item data | Incoming messages, comments and story mentions; the sender’s platform name, ID and profile picture link; media links; time and delivery status. |
| Work data | Your team’s replies, who picked up an item, tags, statuses, and records of actions such as replying, hiding or deleting. |
| Demo requests | The name, company, email, phone, number of businesses and message you share in the demo form. |
| Technical logs | IP address, request time and browser details for security and troubleshooting. |
3. Why we process data
- To receive items from the platforms, show them to your team and send your replies back.
- To reply to, hide or delete comments when you ask us to.
- To provide work sharing, tagging and reporting features.
- To let you sign in and reset your password.
- To respond to your demo requests.
- To keep the service secure and fix errors.
- To meet our legal obligations.
4. Meta Platform Data
We use data received from Facebook, Instagram and WhatsApp only for the features you enable. We do not sell it, use it for advertising, use it to train AI models, or share it with anyone for purposes outside the service. When you send a reply or hide or delete a comment, the information needed to perform that action is sent to Meta.
5. Who we share data with
Message content is not sent to any third party for processing, including AI or analytics services. To run the service we work only with these providers:
- Hosting: Hetzner Online GmbH (Germany). Data is stored on servers in the country chosen by the customer.
- Email delivery: Resend. Only the recipient’s email address and the email itself are passed on, for password reset and demo request emails.
- Domain and network service: Cloudflare. Traffic to the website and the application may be routed through this service.
- Meta Platforms: to receive items and send replies.
We may share data with competent authorities where required by law.
6. International transfers
Your data is stored on servers in the country you choose. If that country is outside Türkiye, the transfer is made in line with the cross-border transfer rules of Turkish Personal Data Protection Law No. 6698 (KVKK).
7. How long we keep data
- Item data: kept for the period set by the business using PanoIO.
- When an account is disconnected: when you remove a platform account from PanoIO, its access token and items are deleted.
- User accounts: kept for the term of the service agreement. They are deleted or anonymised within 30 days of the end of service or of your request.
- Demo requests: kept until we have responded and the conversation is concluded, for at most one year.
- Technical logs: kept for the shortest period needed for security.
8. Security
Connections are encrypted with HTTPS. Meta access tokens are stored encrypted and passwords as one-way hashes. Staff can see only the items of the accounts they are assigned to.
9. Cookies
The application uses only a strictly necessary session cookie to keep you signed in; your language preference is stored in your browser. We do not use advertising or tracking cookies. Our network provider Cloudflare may set its own strictly necessary security cookies.
10. Your rights
Under Article 11 of KVKK you have the right to learn whether your data is processed, request information, ask for correction or deletion, and object. Send requests to info@panoio.com; we reply within 30 days.
If you sent a message or comment to a business and have a request about that data, we recommend contacting that business first. If you contact us, we will pass your request to the business. See Data Deletion for deletion options.
11. Changes
We may update this policy. We will tell our customers about significant changes in the application or by email.