Gizlilik operasyonları

İşleme kaydı ve saklama

Süreler yetkili gizlilik / hukuk personeli tarafından onaylanıp girilene kadar boş bırakılır. “Gerektiği sürece” tek başına saklama politikası değildir.

Yasal merkeze dön

İşleme faaliyetleri

Operate Secret Community membership and roles

Create and operate invitation-only communities

GDPR: Art. 6(1)(b) contract / Art. 6(1)(f) legitimate interests (service integrity)
KVKK: Document per applicable KVKK Art. 5 provision — counsel to confirm
Kategoriler: account id, username, membership, roles, permissions
Profilleme: Hayır
İnsan incelemesi: Evet
Saklama referansı: rp-membership

Telephone verification

Verify control of number; prevent abuse

GDPR: Art. 6(1)(b) / Art. 6(1)(f) — not consent for mandatory verification
KVKK: Document per applicable KVKK Art. 5 provision — counsel to confirm
Kategoriler: phone number, verification status, verification logs
Profilleme: Hayır
İnsan incelemesi: Evet
Saklama referansı: rp-phone-verify

Voice-call verification and creator interview

Confirm creator request and security understanding

GDPR: Art. 6(1)(b) / Art. 6(1)(f)
KVKK: Document per applicable KVKK Art. 5 provision — counsel to confirm
Kategoriler: call timestamps, result, reviewer id, category notes
Profilleme: Hayır
İnsan incelemesi: Evet
Saklama referansı: rp-voice-verify

Internal Community Trust Score / risk indicators

Prioritise security review; detect abuse

GDPR: Art. 6(1)(f) legitimate interests; Art. 22 safeguards for significant effects
KVKK: Document profiling/automated decision rules with counsel
Kategoriler: reports, abuse signals, moderation history, score events
Profilleme: Evet
İnsan incelemesi: Evet
Saklama referansı: rp-trust-score

Reports, moderation decisions, appeals

Enforce rules; investigate reports; safety

GDPR: Art. 6(1)(f) / legal obligation where applicable (e.g. DSA duties)
KVKK: Document per applicable KVKK Art. 5 provision — counsel to confirm
Kategoriler: report content refs, decision records, appeal status
Profilleme: Hayır
İnsan incelemesi: Evet
Saklama referansı: rp-moderation

Privileged Root access auditing

Accountability for privileged access

GDPR: Art. 6(1)(f) / Art. 6(1)(c) where security logging is obligatory
KVKK: Document with counsel
Kategoriler: root user, resource, reason, action, session
Profilleme: Hayır
İnsan incelemesi: Evet
Saklama referansı: rp-root-access

Saklama matrisi

ID	Kayıt türü	Gün	Yöntem	Sorumlu
`rp-phone-verify`	Telephone verification records	Danışman belirleyecek	secure-delete	privacy
`rp-voice-verify`	Voice-call verification & interview records	Danışman belirleyecek	secure-delete	privacy
`rp-invitations`	Invitation records	Danışman belirleyecek	secure-delete	privacy
`rp-invite-tokens`	Expired invitation tokens/secrets	Danışman belirleyecek	secure-delete	security
`rp-membership`	Membership records	Danışman belirleyecek	secure-delete	privacy
`rp-acceptances`	Rule/notice acceptance records	Danışman belirleyecek	secure-delete	privacy
`rp-security-logs`	Security logs	Danışman belirleyecek	secure-delete	security
`rp-moderation`	Moderation & appeal records	Danışman belirleyecek	secure-delete	trust-safety
`rp-trust-score`	Trust Score history	Danışman belirleyecek	irreversible-anonymise	trust-safety
`rp-reports`	User reports	Danışman belirleyecek	secure-delete	trust-safety
`rp-root-access`	Root privileged-access logs	Danışman belirleyecek	secure-delete	security
`rp-legal-hold`	Legal-hold records	Danışman belirleyecek	legal-hold-exempt	legal
`rp-dsr`	Data-subject request records	Danışman belirleyecek	secure-delete	privacy