1. Who this policy covers
Omqelo is a private-beta workspace for authorized business account connections and customer communication. This policy describes the current service and distinguishes messaging functionality that is still in development.
Omqelo is operated by Kerem Mıhçı, a sole proprietor operating Omqelo, based in Istanbul, Türkiye. The operator is responsible for the service and handles privacy inquiries through the contact below. This description does not assign a single controller or processor role to every category of customer data.
For account administration, service security and support, the operator determines how information is used for those purposes. Connected customer information is processed to provide the features authorized by the relevant workspace. The applicable legal role depends on the particular processing activity.
2. Information and the reasons we process it
We process information needed to operate accounts, authorize workspace actions, connect supported services and protect the service. Information is collected electronically from users, authorized platform connections, authentication and service events, and communications sent to us.
Depending on the activity and applicable law, processing is based on steps needed to provide the requested service or perform an agreement, legal obligations, establishing or protecting legal rights, or legitimate service and security interests that do not override individual rights. Where consent is required, it must be obtained for the relevant purpose. Authorizing a platform connection is not blanket consent to unrelated processing.
- Account and authentication information, such as an email address and profile details: to sign users in, maintain their account and support access recovery.
- Organization, workspace and membership information: to associate connections and actions with the right team and access permissions.
- Instagram Professional account information and provider identifiers: to identify the account a user authorizes, display its connection and maintain consistent ownership.
- Authorization history and encrypted provider credentials: to record consent-related connection state and make authorized provider operations possible. Credentials are handled server-side.
- Webhook and event information: to validate incoming platform events, avoid duplicate receipts and associate events with the appropriate authorization. A complete message Inbox is not yet available.
- Technical and security logs: to diagnose failures and investigate misuse. Infrastructure may record request timing, route, status and network or browser information, including an IP address where configured.
- Support communications: to respond to inquiries and process requests sent to the monitored contact inbox. Do not send tokens or unnecessary customer data in a support message.
3. Data from connected platforms
A user intentionally authorizes a supported third-party account. Omqelo processes the authorized Platform Data needed for enabled features, subject to the provider’s permissions and the user’s organization and workspace access.
Platform Data is not sold and is not used for unrelated advertising. The current Instagram scope concerns Professional account information and business messaging. It does not include a content-publishing or comment-management service.
When messaging functionality processes messages, message content, participants, attachments or event metadata may be needed to deliver that functionality. Production end-to-end messaging and Inbox consumption are not currently complete. Future functionality must be reflected in this policy before it is introduced.
Users can disconnect an account and can request deletion. Disconnecting and deleting data are different processes; the Data Deletion page explains the distinction.
5. Retention and deletion
Omqelo retains personal and Platform Data only for as long as reasonably necessary to provide the service, maintain security and integrity, comply with applicable legal obligations, resolve disputes where applicable, and complete valid deletion requests. Disconnecting does not immediately erase all related records.
Operational and recovery backups may temporarily retain data as part of normal backup and disaster-recovery processes. No fixed public retention or backup-expiration schedule has been adopted. Applicable legal deletion and response obligations still apply. A deletion request acknowledgement records a request; it is not proof that every related record has been erased.
6. Protecting information
Omqelo uses tenant-aware authorization, server-side credential handling, encrypted provider credential storage and account ownership protections. These measures reduce risk but cannot guarantee absolute security.
The Security page explains implemented architecture practices. It does not claim a formal compliance certification.
8. Your choices and requests
You can review your connection state in the workspace and disconnect an authorized Instagram connection. Depending on the law that applies, you may have rights to ask about access, correction, deletion, restriction, objection or a copy of personal information.
Where Türkiye’s personal data protection law applies, rights include learning whether information is processed, its purposes and recipients, requesting correction or deletion when the relevant conditions are met, requesting notification of those actions to recipients, objecting to adverse results from exclusively automated analysis, and seeking compensation for unlawful processing. Applicable complaint rights are preserved.
Omqelo may request information reasonably necessary to verify the identity or authority of the person making the request before processing it. Some records may need to be retained where permitted or required by applicable law. Applicable statutory request procedures and response periods apply; this is not a promise of immediate total erasure.
9. Changes and contact
This policy should be updated when the service or its data practices change. The date above identifies this content revision. Material changes may require additional notice under applicable law.
For privacy inquiries and data requests, contact Kerem Mıhçı, a sole proprietor operating Omqelo using the monitored inbox below. Where possible, write from the email address associated with your Omqelo account and describe the request. Any additional information needed for a formal statutory request will be handled proportionately; do not send credentials or unnecessary sensitive information.
Privacy and data requests: info@omqelo.com