Privacy Policy

At Rafilis, we value your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our products and services.

Information You Provide

• Account information (email address, password)
• Profile information (name, preferences)
• Payment information (processed by our payment processor)
• Messages you send through contact forms

Automatically Collected

• Device information (device type, operating system)
• App usage data
• Crash reports and performance data

• Provide and maintain our services
• Process your subscriptions and payments
• Provide technical support
• Notify you about service updates
• Improve our products

We do not sell your personal data. We may share your information only:

• With our payment providers for payment processing
• With valid court orders for legal requirements
• With third parties with your explicit consent

• TLS encryption for data in transit
• AES-256 encryption for data at rest
• Regular security audits
• Access controls and monitoring

• Access your data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications

We use cookies on our website to remember your language preferences and session information. You can disable cookies through your browser settings.

Our services are not designed for children under 13. We do not knowingly collect personal information from users under 13 years of age.

Your data may be processed on servers in different countries. We ensure all transfers are protected by appropriate security measures.

We retain your data only as long as necessary. When you delete your account, your personal data will be deleted within 30 days, except where required by law.

App: Rafilis Remote Control · Developer: Rafilis Bilişim Teknolojileri Ltd. Şti.

You may request deletion of your account and associated data at any time. There are two paths:

1. In-app (Rafilis Multizone, desktop): Open Multizone → Users page → select your user → Delete. This immediately removes the user record and all related local data (login credentials, audit logs) from your local Multizone database. No server-side data exists for in-app user accounts — they live solely on your venue's PC.
2. By email (for cloud Rafilis accounts created at rafilis.com): Send a deletion request from your registered email address to support@rafilis.com with the subject line "Delete my account". We will confirm and process the request within 7 days.

What is deleted:

• Account profile (email, name, hashed password)
• License records
• Active sessions and authentication tokens
• Cloud Playlist download history
• Audit logs of your actions

What is retained (and for how long):

• Anonymized payment records (transaction ID, amount, date — no personal identifiers) for up to 10 years as required by Turkish tax and accounting law (VUK §253).
• Invoice copies with name and amount for up to 5 years as required by tax law.

All other personal data is permanently deleted within 30 days of the request.

We may update this policy from time to time. We will notify you of significant changes through email or in-app notification.