Privacy Policy

This policy explains what personal data is processed when you shop on Divine, why it is processed, and what rights you have over it. It is prepared under Turkish Personal Data Protection Law No. 6698 (KVKK). WHAT WE PROCESS Account data: your e-mail address and username. Your password is stored as an encrypted hash (bcrypt); the plain value is never stored anywhere and cannot be read by us. Order data: the product and term you bought, the amount, the order status, the licence key delivered and the delivery time. Support data: the tickets you open, message contents, and any images you upload. Technical data: your IP address and browser information. This is processed only for rate limiting, abuse detection and security logging. WE NEVER SEE YOUR PAYMENT DETAILS Payment is completed on Shopier's infrastructure. Your card number, expiry date and security code NEVER reach Divine servers, are not stored by us, and cannot be seen by us. We are told only the result of the payment and its amount. COOKIES Session cookies (access and refresh tokens) are set as httpOnly, so scripts on the page cannot read them. These cookies are required to keep you signed in. A further cookie remembers your language preference. No third-party advertising or profiling trackers are used. WHO WE SHARE DATA WITH Payment provider: the minimum information needed to take the payment. E-mail provider: your e-mail address, so order and delivery notices can be sent. Beyond this, your personal data is not sold, rented or transferred to third parties for marketing. Disclosures to competent authorities where legally required are reserved. MARKETING MESSAGES Campaign and announcement e-mails are sent only if you separately opt in. Transactional e-mails such as order confirmation and licence delivery are part of the service and are sent regardless of that opt-in. You can unsubscribe from campaign e-mails using the link in the message or by asking support; unsubscribing does not affect your order and delivery e-mails. RETENTION Account and order records are kept for as long as your account is open and thereafter for the period required by applicable law. Support tickets are retained so that service history remains traceable. Security logs are deleted after a reasonable period. YOUR RIGHTS You have the right to learn whether your personal data is processed, to request information about it, to ask for correction or deletion, and to object to processing. To exercise these rights, open a support ticket from your account or reach us through the channels on the contact page. A deletion request may not cover order and invoice records that must be retained by law; in that case we will tell you which record is retained and why. SECURITY Passwords are stored hashed, session tokens are short-lived and rotated regularly, and access to the admin interface is restricted by role. Even so, no transmission over the internet can be guaranteed absolutely secure; we recommend using a strong password unique to this site. CHANGES When this policy is updated, the new version is published on this page. Continuing to use the service means you accept the current policy.