Privacy and personal data
Balansfer is a clearing infrastructure that enables balance transfers between members of connected sites. This page summarizes what member data is processed and why.
What data is processed
National ID number and phone number are stored encrypted; a one-way (HMAC) hash is kept separately for matching. Name and email come from connected sites. No card or bank details are ever processed.
Why it is processed
Matching ID and phone number is required to verify that accounts on different sites belong to the same person — without it there is a risk of transferring to the wrong person.
Who it is shared with
ID and phone data are never sent back to connected sites; sites only ever see an opaque "member_ref". Balansfer never shares or sells member data with third parties.
Retention
Transfer records are kept for 10 years (financial record-keeping), balance snapshots for 90 days, callback logs for 1 year, security events for 2 years. Data is automatically archived/deleted afterwards.
Your rights
Under Turkish data protection law (KVKK, no. 6698) you may request access, correction or deletion of your data. Contact the site you transacted with; they will reach Balansfer on your behalf.
Security
Every request is HMAC-signed, data is stored encrypted, and access is restricted by role-based authorization and audit logging.