Privacy Policy

Last updated: August 16, 2026

This Privacy Policy explains how RPMVault collects, uses, and protects personal data when you use the motorcycle catalog, garage, and related services. RPMVault is offered to users in Türkiye, the European Union, and other countries. Processing of personal data is subject to the Turkish Personal Data Protection Law (KVKK, Law No. 6698). When we process personal data of people in the EU, the EU General Data Protection Regulation (GDPR) also applies to that processing. This document describes actual processing. It is not a claim of full KVKK or GDPR certification. Contact: info@rpm-vault.com.

For liability limitations regarding technical application risks, product compatibility, calculation outputs, and riding safety, see the Disclaimer.

Data Controller

RPMVault is operated by Başar Ballıöz, a natural person in Türkiye. Data controller contact: info@rpm-vault.com. A public postal address has not been published.

1. Information We Collect

2. How We Use Your Information

We use the collected information to operate the service you request. The specific KVKK/GDPR legal basis for each activity requires attorney confirmation and is not stated here as a final legal conclusion. Typical purposes include:

• To provide and maintain our motorcycle catalog service
• To improve and personalize your user experience
• To analyze usage patterns and optimize our platform
• To respond to your inquiries and provide customer support
• To send important updates and notifications about our service
• To detect and prevent fraud or abuse

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers who help us operate our platform (analytics, hosting, etc.)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share your information

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on RPMVault. Cookies help us:

• Remember your preferences and settings
• Understand how you use our platform
• Improve our services and features

You can control cookies through your browser settings and, where available, through the cookie preference panel. Disabling certain technologies may affect your experience on our platform.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. We retain personal data only for as long as necessary for the purposes described in this policy, legal compliance, dispute resolution, and enforcement of our agreements. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Objection: Object to processing of your data
• Portability: Request transfer of your data to another service

You can export your personal data directly from your Profile (Export my data), or exercise these rights by contacting us using the information provided in the Contact section. We may request identity verification before actioning a request and will respond within legally required timeframes.

You can export your personal data from your Profile (Export my data) or contact us. Account deletion instructions are also published at /account-deletion for users who cannot sign in.

Retention

We keep account data for as long as your account is active. Lead/quote form submissions are retained for approximately 180-365 days, AI conversations for approximately 30 days, and security logs for approximately 90 days. Legal consent records are retained for compliance purposes. After account deletion we delete or anonymize account data as described on the Account Deletion page. A one-way phone hash from lead forms may be kept for fraud prevention. Payment providers, app stores, analytics, email, push, and error-monitoring tools may retain records under their own policies.

7. Children's Privacy

RPMVault is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately so we can delete such information.

8. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Third-Party Services, Cookies, and Email Addresses

Infrastructure and Authentication

RPMVault uses third-party authentication for account sign-in, managed data storage, cloud hosting for infrastructure, and privacy-scrubbed error monitoring and reliability on the web. Transactional email is sent through our email delivery provider. Mobile push notifications use a third-party push service. Contact form alerts may be sent to an internal operations channel and can include name, email, and subject. Garage PDF exports are generated on our servers. These providers may process limited technical or operational data as needed to provide the feature.

Analytics and Cookie-Like Technologies

On the web, we may use analytics tools to understand traffic, sessions, and usage patterns. These tools are loaded only after you give cookie consent.

AI, Sign-In, and Payments

On web and mobile, RPMVault AI features may send your prompt and relevant garage or comparison context (such as motorcycle model, mileage, maintenance, fuel, and expense summaries) to an AI service provider to generate responses. VIN, license plate, and garage photos are not included in that context. The mobile app also uses Google Sign-In and Sign in with Apple for account access, and Google Play Billing or Apple In-App Purchase for subscription payments. Web card checkout is not currently offered. RPMVault does not currently use an in-app advertising SDK. These services can process technical device, session, content, and payment context as needed to provide the feature.

Email Addresses

RPMVault does not sell email addresses provided during registration or contact flows. Email data is processed only for account security, authentication, legal notices, and user communication purposes.

International Data Transfers

RPMVault is operated from Türkiye and uses service providers that may process data outside Türkiye and outside the EU, including authentication, hosting, storage, analytics, advertising, email delivery, push notifications, AI, error monitoring, and payment processors. Google and Apple may process data for sign-in, analytics, advertising, and in-app purchases where those features are used. We do not claim that a specific KVKK Chapter 5 transfer mechanism (including standard contracts) or GDPR transfer tool is already executed for each provider. Those mechanisms require attorney confirmation. Contact: info@rpm-vault.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: