legal · privacy

Privacy policy

merc4n.com does not track you: no cookies, no analytics, no advertising scripts. When you use merc4n we process only the data needed to provide the service and keep it secure; we do not sell your data or use it for advertising.

The website (merc4n.com)

• Sign up: takes you to the sign-up page on app.merc4n.com. An e-mail address typed into the box at the bottom of the page travels there after the "#" in the address; that part is never sent to a server, and the sign-up page takes it and removes it from the address bar.
• Invitation and reseller forms: for an invitation, your first name, last name, phone number and e-mail; for a reseller application, the company name, the contact person's name, city, phone, e-mail and an optional message. When a request is decided your phone number is deleted, and the request itself 30 days later; requests never decided are deleted after 180 days. The forms are protected against bots with Cloudflare Turnstile.
• E-mail: when you write to us, your name, e-mail address and the content of your message.
• Technical logs: for security and troubleshooting, the infrastructure that serves the website and the app keeps your IP address, the time of the request and the page requested for at most 90 days.

Your merc4n account

• Account: your first name, last name, phone number and e-mail address; sign-in, session and activity records (including IP address and time). We use your phone number to reach you about your account. Accounts opened on the sign-up page and not completed within 7 days are deleted.
• Your use: your conversations, the files you add, your memory, your bots, your routines and how much you use the models. All of it is visible to you only.
• Apps you connect: the password you type when connecting is never stored; the access the app grants is kept in an encrypted vault. Records read from your apps are used only for the work you ask for.
• Location: taken only when you ask something like "the nearest pharmacy" or "how do I get there" and have allowed it; rounded to roughly street level, passed to the map service (OpenStreetMap) as coordinates for the answer, and used only in that conversation.

The iPhone app

• Pairing: the app connects to your account with the code shown by the merc4n page on your computer. The camera opens only to read that code; no image is stored. You can also sign in in the app with your email address, your password and a code sent to your email. The phone's name is saved to your account when it pairs or signs in.
• Face ID: your identity is checked on the iPhone when you open the app; no face data reaches us.
• Microphone: a voice message is recorded only when you start the recording, sent to the speech recognition service on our own servers to be turned into text, and not stored.
• Location: as in the web app; only when you ask such a question and have allowed it.
• Notifications: if you allow them, a device token for Apple's notification service is saved to your account. Notifications carry no content: only a fixed "Sizi bekleyen bir şey var" ("something is waiting for you") and a reference for that one notification go through Apple; the notification extension on the phone asks our server directly what is waiting (for example a conversation's title) and shows it.
• Photos and files: a photo or file you choose to add to a conversation is uploaded to that conversation only; the app does not read your photo library. If you save an image to Photos, only permission to add is asked.
• Apple Watch: the watch app gets its key from your iPhone and sees only the actions waiting for your approval and your conversations; risky actions are approved on the iPhone only. When you ask by voice on the watch, Apple's dictation turns it into text (under Apple's own privacy terms); merc4n receives only the text. The merc4n complication shows only how many actions are waiting.
• Subscription: you buy Pro or Maximum in the app with your Apple ID; Apple takes the payment and your card details never reach us. The transaction information Apple signs (transaction number, package, renewal and end dates, refunds) is kept linked to your account and used only to turn your package on and count your allowance. It is deleted when your account is deleted.
• On the phone: the phone's session key is kept in the iPhone's Keychain; it is not backed up or synced to other devices. "Bu telefonu ayır" (unpair this phone) ends the phone's link to your account; "Sohbetleri sil" (delete conversations) permanently deletes your conversations except pinned and group ones.
• The app contains no advertising or tracking tools; we do not combine your data with data from other companies' apps and websites.

What stays in your browser

Your light or dark theme choice is kept in your browser's local storage and is not sent to us. Details on the Cookies page.

Other people's data

If you add other people's personal data to merc4n (candidates' CVs, the e-mails of people you write to, people in your documents), you are the data controller of that data and merc4n processes it only on your behalf. Informing those people and, where needed, obtaining their consent is your responsibility. The rules are in the data processing agreement (in Turkish).

Who we share data with

merc4n runs on servers in Türkiye and stores its data there. Apart from that, only these services process data, and only for the work described:

• Cloudflare: website and app traffic passes, encrypted, through Cloudflare's servers abroad to protect against attacks and is processed there; the bot check on the forms (Turnstile) is Cloudflare's too.
• Resend: sign-in and sign-up codes, invitations and the notices of form requests sent to us go through this e-mail delivery service abroad; the address and the content of these e-mails are processed there.
• Apple iCloud: our mailboxes are on iCloud; what reaches us by e-mail may be processed on servers abroad.
• Apple's notification service: the content-free notifications to iPhones and the device token.
• OpenStreetMap: for location questions, coordinates or a place name go to map services abroad for the answer.
• Anthropic (USA): our fast model merc4n-thinking runs only for people who allow it and choose it; then what you write in that conversation and the files you add go to Anthropic while the answer is prepared. You can withdraw your permission any time in the app under Hesap › Gizlilik (Account › Privacy).

Data from the apps you connect (Gmail, Outlook, Drive, Odoo, Netsis …) never goes to a model abroad; it is processed only by our own model in Türkiye (merc4n-high). We do not sell your data.

Deleting your account

You can delete your account yourself: on the web under Hesap › Gizlilik › Hesabımı sil (Account › Privacy › Delete my account), on the iPhone under Hesap › Hesabımı sil; you confirm with your password. You can also ask for it by writing to support@merc4n.com from your account's e-mail address. Your account, sessions, conversations, files, pending actions and app connections are deleted; the connections' access is revoked at the connected apps first. Usage counts stay without your identity; the unalterable activity records kept for security and the records of the texts you accepted are kept for the periods stated in the KVKK notice (in Turkish).

merc4n Kurumsal (business)

merc4n Kurumsal is installed separately for each company; the company using it is responsible for the data in its installation. For individual merc4n the data controller is Cenk Coşkun; what data is processed is described in the KVKK notice (in Turkish, under the Turkish Personal Data Protection Law No. 6698).

Your rights

Your rights regarding your personal data and how to exercise them are in the KVKK notice (in Turkish). For questions, write to support@merc4n.com.

Last updated: 1 November 2026