Last updated: 1 October 2026
Vosetu Social is the tool Vosetu uses to publish content to its own social media accounts and to answer the people who interact with them. This policy explains what data we receive from social platforms when you comment on our posts or message us, why, for how long, and how to have it deleted. The English version of this document is the canonical one.
1. Who is responsible
The data controller is Vosetu. Vosetu Social is operated by Vosetu for Vosetu's own accounts (for example our Instagram, Facebook, Threads and TikTok accounts). For any question or request: contact@vosetu.com.
2. Data we receive
Our own accounts: when we connect one of our accounts, the platform shares that account's identifier, username, profile picture and access tokens. Tokens are stored encrypted.
Comments: when you comment on one of our posts, the platform (for example Instagram, through Meta's official API) notifies us of the comment. We receive the comment text, the comment and post identifiers, the time, and your platform-scoped user identifier and username.
Direct messages: when you send a direct message to our account, or reply to one we sent you, we receive the message content, its time, and your platform-scoped user identifier and username.
We do not receive your password, e-mail address, phone number, follower list or any other private data from the platform. We do not read anything beyond the comments and messages addressed to our own accounts.
3. How we use it
To reply to you. Some of our posts invite you to comment a keyword (for example "LINK") to receive something — a guide, a link or more information. When you do, we automatically send you a single private reply containing what you asked for, and may also reply publicly under your comment. We send this message only to people who requested it by commenting.
To answer the messages you send us, from our team's shared inbox.
To understand which of our posts generate interest (for example, how many people asked for a guide from a given post).
We do not use this data for advertising profiles, we do not sell it, and we do not send you further commercial messages through the platform unless you write to us again, within the limits the platform allows.
4. Legal basis
We process this data because you asked for it by commenting or messaging us — to take the steps you requested (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)) — and on the basis of our legitimate interest in responding to people who contact our accounts and in measuring our own content (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).
5. If you contact us further
The link we send may lead to a form on a Vosetu website. If you choose to fill it in, the information you enter (such as your name, business and phone number) is recorded in Vosetu's own sales and customer-relations system so that we can get back to you, together with the fact that you reached us through our social media account. That form shows its own privacy notice, and commercial messages are sent only with the consent required by law.
6. Sharing and transfers
We share this data only with the infrastructure providers that host our systems, only to the extent needed to run the service, or where the law requires disclosure. The platforms themselves (such as Meta) process your comments and messages under their own privacy policies. We never sell data.
7. Retention
Raw notifications received from the platform are deleted 30 days after receipt.
Comments and messages are kept for 12 months from the time they were written and are then deleted automatically.
Our accounts' access tokens are kept while the integration is active and removed when it is disconnected.
8. Data deletion
You can ask us to delete all data we hold about you from your interactions with our social media accounts at any time. Send an e-mail to contact@vosetu.com with the subject "Data deletion", stating the platform and your username on it (for example: Instagram, @yourname). You may also send the same request as a direct message to our account.
We delete the related comments, messages and records within 30 days at the latest and confirm the deletion to you. Deleting your comment on the platform removes it from the platform; to remove our copy as well, please send the request above.
9. Your rights
Under the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and, where applicable, the GDPR, you may ask what data we hold about you, request correction or deletion, object to processing, and lodge a complaint with the competent authority (in Türkiye, the Personal Data Protection Authority). Send requests to contact@vosetu.com; we respond within 30 days.
10. Changes
We update this policy when our practices change and revise the date at the top. The general website privacy policy at vosetu.com/en/privacy covers data collected on vosetu.com itself.