Last updated: 17 September 2026
Privacy Policy
This Privacy Policy describes how Krest Yazılım San. Tic. A.Ş. ("Krest Yazılım", "we"), operator of the Specula brand and specula.com.tr (the "Service"), collects, uses, and protects information.
1. Information we collect
When you create an account we collect your name, email address, and company details. We also record technical data from your browser such as IP address, session identifier, and usage statistics. Data relating to the assets you monitor is covered separately, in the section below.
2. Data about the assets we scan
What we collect about the domains you monitor comes from publicly available sources and describes the technical state of your assets: DNS records, certificate details, externally visible port state, email authentication records, WHOIS records, and the source code of published pages. We retain these measurements so that scans can be compared against one another and changes shown. What we store is the measurement; not the contents of your systems, your databases, or your users' data. Leak scanning searches publicly disclosed breach datasets for addresses tied to your domain. Corporate email addresses belonging to your staff may be processed in this context; we neither store nor display the contents of leaked passwords. We hold no confidential data belonging to third parties.
3. How we use your data
We use your data to (a) provide and improve the Service, (b) send account-related notifications, (c) prevent fraud and ensure security, and (d) comply with legal obligations. We do not share your data with third parties for marketing without your explicit consent.
4. Cookies
We use cookies for session management, preference storage, and anonymous usage analytics. You can reject cookies via your browser settings; some features may not function in that case.
5. Third-party services
We rely on cloud providers, payment processors, and analytics tools to operate the Service. We share only the minimum necessary data with these providers and have data processing agreements (DPAs) in place.
6. Data retention
Account data is retained while your account is active and for the duration of any legal obligations. When you close your account we delete personal data within 30 days, and backups within 90 days.
7. Your rights
Under KVKK and GDPR you have the right to access, rectify, erase, request portability, and object to processing of your data. Send requests to hello@specula.com.tr.
8. Changes
We may update this policy from time to time. For material changes we notify you via email or in-app message.