Privacy Policy

Who We Are and Scope of This Policy

Ercan Technology LLC ("Ercan Technology", "we", "us", or "our") is a United States limited liability company formed in the State of New Mexico, USA, with a registered office in Albuquerque, New Mexico, USA. For the purposes of applicable data protection law, we act as the data controller (or "business") responsible for the personal data processed through this website.

This Policy applies only to this corporate website (the "Website"). It does not apply to the games published under the Ercan Games brand or to our Forgevid AI-assisted video creation product (forgevid.ai), each of which is governed by its own separate privacy notice. Where this Website links to third-party sites or services, those are governed by the third parties' own privacy policies.

If you have any questions about this Policy or our data practices, you can contact us at privacy@ercantechnology.com.

Personal Data We Collect

We deliberately keep our data collection minimal. Depending on how you interact with the Website, we may process the following categories of personal data:

Information You Provide Through the Contact Form

When you use our contact form, we collect the name, email address, and message content you submit so that we can read and respond to your enquiry. We also use an anti-spam mechanism (described below) to protect the form.

Analytics Data

We use Cloudflare Web Analytics, a privacy-friendly, cookieless analytics service. It does not set cookies, does not track you across other websites, and does not build advertising profiles. It collects limited, aggregated information about Website usage (such as page views, referrers, and general device or browser type).

Server and Security Logs

Our hosting and security provider, Cloudflare, automatically generates standard server and content delivery network (CDN) access logs. These logs may include your IP address, the date and time of access, the pages or resources requested, and technical information such as user-agent string. These logs are used for hosting, performance, and security purposes.

Anti-Spam (Cloudflare Turnstile)

We use Cloudflare Turnstile on our contact form to distinguish humans from automated bots and to protect against spam and abuse. Turnstile may process limited technical signals from your browser and device for this purpose.

We do not use advertising cookies, and we do not engage in cross-context behavioural advertising on this Website.

How and Why We Use Your Data (Legal Bases)

We process personal data only where we have a valid legal basis to do so. The purposes and corresponding legal bases (under the EU/UK GDPR and equivalent laws such as Türkiye's KVKK) are as follows:

• To receive and respond to your enquiries submitted through the contact form. Legal basis: our legitimate interests in communicating with you and managing enquiries, and/or taking steps at your request prior to entering into a contract (contractual necessity), and where required, your consent.
• To operate, secure, and maintain the Website, including protecting against spam, fraud, and abuse via Turnstile and server/security logs. Legal basis: our legitimate interests in keeping the Website secure, available, and functioning, and compliance with our legal obligations.
• To understand and improve how the Website is used through cookieless analytics. Legal basis: our legitimate interests in measuring and improving Website performance and content.
• To comply with applicable legal, regulatory, or law-enforcement requirements. Legal basis: compliance with a legal obligation, and our legitimate interests in establishing, exercising, or defending legal claims.

Where we rely on legitimate interests, we have assessed that these interests are not overridden by your rights and freedoms. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Who We Share Your Data With

We do not sell your personal data, and we do not share it for cross-context behavioural advertising or targeted advertising purposes. We share personal data only with trusted service providers (processors) who act on our instructions and under appropriate data protection terms, and where required by law.

• Google (Google Workspace / Gmail API) — used to deliver and store contact-form submissions so that we can read and respond to your messages.
• Cloudflare — used for website hosting, content delivery, security (including WAF and Turnstile anti-spam), and cookieless analytics.
• Sanity — used as our content management system; content is read at build time only and Sanity does not receive contact-form submissions.

We may also disclose personal data where necessary to comply with applicable law, respond to lawful requests from public authorities, enforce our terms, or protect the rights, property, or safety of Ercan Technology, our users, or others. In the event of a corporate transaction (such as a merger or acquisition), personal data may be transferred as part of that transaction, subject to this Policy.

International Data Transfers

Ercan Technology is based in the United States, and our service providers may process personal data in the United States and other countries. As a result, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data from the European Economic Area, the United Kingdom, Türkiye, or other regions with data-transfer restrictions, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) or other lawful transfer mechanisms recognised under applicable law. You may contact us at privacy@ercantechnology.com for more information about these safeguards.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to respond to your enquiry, to meet our legal, accounting, or reporting obligations, and to protect against fraud and abuse.

• Contact-form submissions are retained for as long as needed to handle and follow up on your enquiry, and thereafter for a reasonable period consistent with our legitimate interests and legal obligations.
• Server and security logs are retained for a limited period in line with our hosting and security provider's standard practices and our security needs.
• Cookieless analytics data is aggregated and retained only as needed to measure and improve the Website.

When personal data is no longer required, we delete it or anonymise it in a secure manner.

Security Measures

We take the protection of personal data seriously and implement appropriate technical and organisational measures designed to safeguard it against unauthorised access, loss, misuse, or alteration. These measures include serving the Website exclusively over HTTPS, hosting on Cloudflare's secure edge network with web application firewall and anti-bot protections, minimising the data we collect, restricting access to personal data, and using reputable processors with their own security commitments.

No method of transmission over the internet or method of electronic storage is completely secure, so while we strive to protect your personal data, we cannot guarantee absolute security.

Your Privacy Rights

Depending on where you live and the applicable law, you may have rights in relation to your personal data. These may include the right to access, correct, delete, or receive a copy of your personal data; to object to or restrict certain processing; to withdraw consent; to data portability; and to lodge a complaint with a supervisory authority. You also have the right not to be discriminated against for exercising your privacy rights.

• EU/EEA residents: rights under the General Data Protection Regulation (GDPR), with the ability to complain to your local Data Protection Authority.
• United Kingdom residents: rights under the UK GDPR and Data Protection Act, with the ability to complain to the Information Commissioner's Office (ICO).
• Türkiye residents: rights under the Law on the Protection of Personal Data No. 6698 (KVKK), with the ability to apply to the Personal Data Protection Authority (KVKK / KVKK Board).
• California residents: rights under the California Consumer Privacy Act, as amended by the CPRA, including rights to know, delete, correct, and opt out of the sale/sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising.

To exercise your rights, please visit our Your Privacy Rights page at /privacy/data-requests, or contact us at privacy@ercantechnology.com. We will respond in accordance with applicable law. We may need to verify your identity before acting on your request.

Children's Privacy

This Website is intended for a general business and professional audience and is not directed to children. We do not knowingly collect personal data from children under the age of 13 (or under 16 where a higher age applies under local law). If you believe that a child has provided us with personal data, please contact us at privacy@ercantechnology.com so that we can take appropriate steps to delete it.

Cookies and Similar Technologies

We use minimal cookies and similar technologies on this Website. Our analytics are cookieless, and we do not use advertising or cross-site tracking cookies. For full details about the cookies and similar technologies we use, and how to manage your preferences, please see our Cookie Policy at /legal/cookies.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. We encourage you to review this Policy periodically.

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, you can contact us at:

• Email (privacy and data protection): privacy@ercantechnology.com
• Postal address: Ercan Technology LLC, Albuquerque, New Mexico, USA

This Policy is governed by the laws of the State of New Mexico, USA, without prejudice to any mandatory consumer or data protection rights you may have under the laws of your own country of residence (for example, in the EU/EEA, the United Kingdom, or Türkiye).