Copytrove — KVKK Information Notice (courtesy English translation)
Version: 4 · 4 October 2026
1. Data controller
Name: Moontra Software Yazılım ve İnovasyon Ticaret Limited Şirketi (Moontra Software Ltd.; "Moontra Software") · Address: HALKALI MERKEZ MAH. HALKALI CAD. TEKNO PARK İDARE BİNASI NO: 281/23 İÇ KAPI NO: 2 KÜÇÜKÇEKMECE/İSTANBUL, Türkiye · Tax ID: 6222607413 (tax office: Halkalı Tax Office) · Contact: info@moontrasoftware.com · Phone: +90 507 009 69 84 · VERBİS: We are assessed to fall under the Board's exemption criteria for the registration obligation (fewer than 50 annual employees and an annual balance-sheet total below TRY 100 million; Board Decision 2023/1154); we therefore take the view that we currently have no obligation to register with VERBİS.
2. Clipboard data is not processed; the app sends limited data only in licence actions
Your clipboard history in the Copytrove app is kept only on your device; as controller we do not access, collect or transfer it. The app reaches the network only in licence actions you start (activation, re-verification after a renewal/upgrade, "remove this Mac") and sends the limited licence data below. Your computer name, user name and clipboard content are never processed.
3. Personal data processed, purpose and legal basis
| Data | Source | Purpose | Legal basis (KVKK art. 5) |
|---|---|---|---|
| Email, interface language, sign-up time | Waitlist form | Launch notification; confirmation email (double opt-in) | Explicit consent (art. 5/1; form checkbox) |
| Optional price-survey answers, feature of interest, test-price group | Waitlist form | Fair pricing, product planning (anonymous statistics) | Explicit consent |
| Name, email, country, order no./amount (limited data from Paddle) | Purchase (Paddle) | Delivering the licence key, support, accounting/tax duties | Contract (art. 5/2-c); legal obligation (art. 5/2-ç); legitimate interest (art. 5/2-f — support) |
| Support correspondence | Answering your request | Legitimate interest / contract | |
| Licence key ID, package or single product (1/5 Mac) and the Moontra apps it covers (product rights), update-entitlement end date per app, licence status | Purchase (Paddle) and the Moontra licence service | Managing the licence, tracking the update entitlement | Contract (art. 5/2-c) |
Irreversible device digest (derived separately for each app), the product ID of the app being activated, device model name (e.g. MacBookPro18,1), activation date | App (when you activate) | Enforcing the seat count (1/5 Mac per app) and the "seats + 3 new Macs in 30 days" activation limit, showing your Macs in the account panel, preventing abuse | Contract (art. 5/2-c); legitimate interest (art. 5/2-f — abuse prevention) |
| Licence verification: activation confirmation (contains the licence ID, the product ID and the irreversible device digest) | App — together with the update check if automatic update checks are on (at most once a day; a separate request from the update request), otherwise only when you run a check yourself | Enforcing the licence terms (turning Pro off on a removed or refunded Mac, the 60/75-day verification rule, the seat count) and preventing abuse | Contract (art. 5/2-c); legitimate interest (art. 5/2-f — abuse prevention) |
| Email, single-use sign-in link (only its hash is kept), session cookie (httpOnly, 7 days) | Account-panel sign-in | Passwordless authentication, providing the panel | Contract (art. 5/2-c); legitimate interest (art. 5/2-f — account security) |
| Payment history (date, type, amount, Paddle invoice link) | Paddle notification | Showing in the panel, accounting/tax | Legal obligation (art. 5/2-ç); contract |
| Transactional emails: licence key, sign-in link, renewal reminder (30 days / 1 day before and on the end date) — sent flag | Moontra licence service, with email service Resend | Delivering the licence, providing sign-in, telling you when your update entitlement ends (not marketing; each reminder has a switch-off link in the panel) | Contract (art. 5/2-c); legitimate interest (art. 5/2-f) |
| Technical error logs (no IP address, email or licence key) | Website | Operating the service, debugging | Legitimate interest (art. 5/2-f) |
The site uses no analytics/advertising cookies or trackers; the only cookie is the strictly necessary/functional session cookie for the account panel, and the test-price group is kept only in browser session storage. Licence keys and email addresses are not written to server logs.
4. Transfers (domestic / abroad)
- Paddle (payment provider / Merchant of Record, established in the UK and elsewhere) processes payment and invoicing data on its own behalf under its own privacy policy and passes us limited information. This is a transfer abroad.
- Resend (email delivery service; sends licence, sign-in-link and reminder emails from
license@moontrasoftware.com) processes your email address and the email content on our behalf as a processor; this is a transfer abroad. Resend (Plus Five Five, Inc., San Francisco, USA) processes data mainly in the United States; the current list of its sub-processors is at https://resend.com/legal/subprocessors. Resend applies the EU Standard Contractual Clauses (2021/914) for transfers and states that it complies with the EU-U.S. Data Privacy Framework (Resend Data Processing Addendum, https://resend.com/legal/dpa). No clipboard data or device digest is sent to Resend. - Hosting / database: the one Moontra licence service for all Moontra apps (licence, product-right, device and account records; account panel
account.moontrasoftware.com) and the site and database (including the waitlist) are on the company's Hetzner server in the Finland data centre; Finland is abroad and KVKK has no adequacy decision. - Basis for transfers abroad (KVKK art. 9): transfers abroad are carried out relying on the standard contract mechanism, one of the appropriate safeguards provided for in KVKK art. 9.
- Your data is not sold or shared with third parties for advertising.
5. Retention
Waitlist: 12 months after launch or until you withdraw your consent, whichever comes first. Licence and email record while the licence is valid; a removed device record 12 months; sign-in link hash 24 hours after use/expiry; session 7 days. Purchase, invoice and licence transaction records are kept for the retention periods set by the applicable tax and commercial legislation (Tax Procedure Law art. 253, Turkish Commercial Code art. 82 — 10 years). Details: Privacy Policy C.4. After that, data is deleted, destroyed or anonymised.
6. Your rights (KVKK art. 11)
By applying to the controller you may: (a) learn whether your data is processed; (b) request information if it is; (c) learn the purpose and whether it is used accordingly; (d) know the third parties it is transferred to, at home or abroad; (e) request correction of incomplete/incorrect data; (f) request deletion/destruction under art. 7; (g) request notice of (e) and (f) to third parties; (h) object to an outcome against you produced solely by automated analysis; (i) claim compensation for unlawful processing. You may withdraw explicit consent at any time (withdrawal does not affect earlier processing).
7. How to apply
Write to info@moontrasoftware.com (in writing, by registered email, secure e-signature, or from your registered email address). Applications are answered within 30 days. If unsatisfied you may complain to the Personal Data Protection Board. You may send your application in writing to the email address above or to the company address stated above. Your application must include your full name, contact details and your request (Communiqué on the Procedures and Principles of Applications to the Data Controller, art. 5).