Privacy policy
We explain in plain language what information we process and why. The legal details are in the privacy notice under the Turkish Personal Data Protection Law (KVKK).
Last updated: October 10, 2026
This translation is provided for convenience. In case of any conflict, the Turkish version prevails.
1.In short
- The records of your residential complex belong to its management; we process these records only to provide the service.
- We do not sell personal data or use it for ad targeting.
- Card details never reach CasaX; they are collected on the payment institution's secure page.
- The secret keys of payment and bank connections are stored encrypted and are never displayed again on any screen.
- Analytics cookies run only if you allow them.
2.What information we collect
The name, email address and phone number you provide when you create an account; subscription and billing details for your organization; login and activity records generated while you use the service; and the messages you send us.
If the management of a residential complex uses CasaX, the apartment, resident, balance due, collection, request, reservation, visitor and parcel records entered by the management are also stored in CasaX. The owner and data controller of these records is the complex management. The detailed list is in the KVKK privacy notice.
3.How we use information
- To create your account, verify your identity and keep your session secure.
- To run the panel, the resident app and notifications.
- To manage the subscription and issue receipts.
- To respond to your support requests.
- To prevent misuse, find errors and improve the service; improvement measurements use aggregated data that does not identify individuals.
- For product news and promotions, if you have given consent.
4.Payments
Dues payments. Dues payments made by residents by card are collected on the secure payment page of the iyzico or PayTR account connected by the complex management and go directly to the complex's account. CasaX does not see or store the card number; it records only the result received from the payment institution (successful or failed, amount, transaction number).
CasaX subscription. It is paid through iyzico on the web (Stripe if the foreign card payment option is enabled) and through the App Store or Google Play on mobile. Card details stay with these institutions.
5.Bank transactions
If the complex management sets up a BankSocket connection, only the transactions of the bank accounts that the management has matched with a complex account are read. The description, amount and sender details of a transaction are used to match the payment with the correct apartment. CasaX cannot withdraw money from the bank account or make transfers; the connection is read-only.
6.CasaX Assistant
To answer your question, the assistant looks only at the records you can see with your permissions. To generate the answer, your question and the necessary records are sent to an AI language model service. The assistant asks for your approval before sending or saving anything; every approved action is logged.
The assistant's answers may contain errors. Check the source record before making important decisions.
7.SMS, email and notifications
SMS messages sent on behalf of your residential complex are sent from the organization's own SMS provider account. If you do not want to receive SMS messages and emails from your complex, you can use the opt-out option in the message or tell your complex management; you can withdraw the consent you gave for CasaX's commercial messages at any time. Mandatory notifications about payments, security and your account are sent regardless of these preferences.
8.Cookies
We use the cookies necessary for your session; analytics tools run only if you allow them. Details are in the cookie policy.
9.Security
Connections are encrypted, passwords are stored irreversibly, team members are given permissions according to their roles, and changes to financial records are written to the activity history. Details are on the security page.
10.Retention and deletion
You can delete your account in the account settings in the app. When the subscription ends, the organization's records are not deleted; the management panel becomes read-only and the management can export its records. When the organization is deleted or the management requests it, the records are deleted or anonymized, subject to statutory retention obligations.
11.Changes and contact
This policy is updated when necessary; we notify you of significant changes at the email address registered to your account. For questions and KVKK applications: info@casax.com.tr.


