Privacy Policy
1. Who We Are and What This Covers
Business Monster is the trading name of Türker Erdinç Çap, sole proprietor, Vakıf Mahallesi, Güçlü Sokak, No:18/2, Çay, Afyonkarahisar, Türkiye. This provider is the data controller for the personal data described in this policy. Contact: business.mnstr@gmail.com, +90 850 305 70 39.
Business Monster is a self-service software platform at businessmonster.co. It finds businesses listed on Google Maps and returns their publicly available details as a downloadable file or through our API. This policy explains how we handle your personal data as a customer of the platform. Section 8 explains how we handle the business information the platform collects on your behalf.
2. Data We Collect About You
Account information: Name, email address and profile picture, received from Google or Facebook when you sign in. We never see or store your password.
Billing information: Billing name, address and country, and the record of your credit purchases. Card details are handled by our payment provider and never reach our servers.
Usage data: Searches you run, credits reserved and charged, files you export and API requests you make.
Technical data: IP address, browser information and platform usage statistics.
3. How We Use Your Data
- Giving you access to your account and running the searches you request
- Reserving and charging credits, issuing invoices and keeping payment records
- Customer support and service notifications
- Detecting abuse and keeping the platform secure
- Improving service quality
- Meeting our legal obligations
4. Data Sharing
We do not sell your personal data to third parties.
We share it only with the service providers we need to run the platform (payment processing, hosting and email delivery), and with legal authorities when the law requires it.
5. Data Security
- SSL/TLS encryption (256-bit) on the website and the API
- API keys are stored only as a one-way hash, never in readable form
- Secure server infrastructure with access control and authorization
- Regular security reviews
6. Data Retention
- Active accounts: As long as the account is active
- Inactive accounts: 2 years from last activity
- Search results: Kept in your account until you delete them
- Payment records: 10 years, as legally required
7. Your Rights
Under the GDPR, the Turkish KVKK and other applicable laws you have the right to:
- Access: Request a copy of your data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data
- Objection: Object to processing
- Portability: Transfer your data to another service
Write to business.mnstr@gmail.com to exercise any of these rights.
8. Business Information Collected Through the Platform
When you run a search, the platform collects information that businesses have chosen to publish: their Google Maps listing and the pages of their own website. Typical fields are the business name, category, address, opening hours, phone number, website, publicly listed email address and public social media profiles.
- We collect only what is publicly visible. We never guess or invent a value; if a field is not published, it comes back empty.
- Most of this is company information rather than personal data. Where a sole trader's contact detail is personal data, you decide what to do with it once it is exported, which makes you the data controller for that use, and us your processor.
- You are responsible for having a lawful basis to contact anyone in your export, and for honouring opt-out requests. See the Terms of Service.
- If you represent a business and want its information removed from our systems, write to business.mnstr@gmail.com and we will remove it.
9. Cookies
Essential cookies are always active: they keep you signed in, hold your cart and remember your language and your cookie choice. Analytics and marketing cookies are set only after you choose "Accept all" in the cookie notice. You can change your choice at any time via "Cookie settings" in the footer.
- Essential cookies: Sign-in session, cart, language, cookie choice (bm_consent, 12 months)
- Analytics cookies: Visitor statistics through Google Tag Manager, only with your consent
- Marketing cookies: Meta Pixel to measure our advertising, only with your consent
10. Data Deletion Request
You can delete your account and personal data at any time.
Method 1 — From your dashboard (recommended):
- Sign in to your Business Monster account
- Go to Support and send a deletion request, or write to us from the address below
- Your request is processed within 24 hours
Method 2 — By email:
- Email: business.mnstr@gmail.com
- Subject: "Data Deletion Request"
- Include the email address registered to your account
- We will contact you to verify your identity
- After verification your data is permanently deleted within 30 days at most
Data to be deleted: Account information (name, email), search history and exported results, API keys and credit balance records. Payment records are retained for 10 years as legally required. Unused credits are forfeited on deletion and are not refunded.
Third-party logins (Google/Facebook): If you signed in with Google or Facebook, deletion also removes the social login connection on our side. For data held by Facebook, we also recommend removing app access in your Facebook settings.
11. Changes to This Policy
If we change this policy we update the date at the top of this page. Significant changes are announced by email or in the dashboard.
12. Contact
For privacy-related questions: business.mnstr@gmail.com