BIGEXPORT Privacy Policy

The BIGEXPORT platform (https://www.bigexport.net) is operated by KMK Soft Solutions Ltd., Maltepe, Istanbul, Türkiye, which acts as data controller for the processing described in this Policy.

Data protection requests: info@bigexport.net. Corporate correspondence: bilgi@kmk.net.tr. Telephone: +90 216 504 21 21.

This Policy applies when people visit the Platform, use BIGEXPORT AI, create an account, act for a Buyer or Supplier Company, or are contacted by us as potential users. The Platform is intended for business contacts.

• Account data: name, email address, telephone number if provided, password (handled by our authentication service and not stored in readable form), email verification codes, language preference and account dates.
• Company profile and authorised person data: Company name, country, city, address, website, business email domain, Buyer/Supplier roles, sector, categories and capabilities, Supplier status, Members linked to the Company and billing details entered at checkout (billing name, tax ID, tax office, address).
• Buying Requests and quotes: request content (product, quantity, specifications, destination, timeline, budget, attachments), review notes, classification, status history, matches, quote content (price, terms, message) and Buyer decisions.
• Credit, Premium, order and transaction records: Credit balance and transactions, unlock records (which Supplier Company unlocked which Buying Request and when), orders, amounts, currencies, payment status records and Premium start and end dates.
• BIGEXPORT AI data: messages written to BIGEXPORT AI, AI answers, conversation titles, drafts prepared in a conversation and usage counters.
• Guest AI data: for visitors who are not signed in, a random guest key stored in the browser; our servers store only a hashed form of this key, linked to the guest's conversations.
• Notification data: in-app notifications and, for users who enable browser push notifications, the push subscription details provided by the browser and the chosen notification categories.
• Communications: contact form submissions (name, email, company, message) and emails exchanged with us.
• Potential Supplier data: business information about suppliers collected by BIGEXPORT from publicly available sources, such as the company's own website (company name, website, business email, telephone), with a record of the source of each item.
• Technical data: IP address, browser information and request logs processed by our hosting providers, and an approximate country derived from the IP address to suggest a language.

4.1 A Buying Request is shared only with Suppliers matched to it. Matched Suppliers first see a preview without the Buyer's identity or contact details.

4.2 If a Supplier Company spends 1 Credit, all Members of that Supplier Company can see the Buyer contact person's name, Buyer Company name, email address, telephone number, address and website, and the Supplier may submit a quote and contact the Buyer directly.

4.3 The Supplier Company keeps access to unlocked details after the Buyer accepts or declines its quote and after the Buying Request is closed. Closing a Buying Request stops new unlocks only. BIGEXPORT cannot withdraw details that a Supplier has already seen or saved.

4.4 After receiving the details, the Supplier is itself responsible for its use of them. The Terms of Use limit that use to communication about the Buying Request.

4.5 A Supplier's contact details are shown to the Buyer that owns the Buying Request once the Supplier has submitted a quote.

5.1 Messages written to BIGEXPORT AI are stored with the conversation and sent through the Lovable AI Gateway to an external AI model provider (currently OpenAI) to generate answers and drafts. These providers may process data outside Türkiye.

5.2 For visitors who are not signed in, conversations are linked to the guest key described in section 3. If the guest later creates an account and verifies the same email address used in the conversation, the guest conversations and drafts are linked to the new account.

5.3 Please do not enter sensitive personal data into BIGEXPORT AI.

5.4 BIGEXPORT AI does not take decisions with legal or similarly significant effects. Submitted Buying Requests are reviewed by BIGEXPORT staff.

We process personal data for the following purposes:

• creating, verifying and securing accounts and linking Members to Companies;
• reviewing, classifying and matching Buying Requests with Suppliers, showing previews, processing unlocks and enabling quotes and decisions;
• operating BIGEXPORT AI;
• processing orders, Credits and Premium memberships;
• sending service emails, daily summaries and notifications;
• identifying and inviting potential Suppliers and Buyers;
• answering contact requests and support questions;
• preventing misuse, enforcing usage limits and protecting the Platform;
• meeting legal obligations.

These activities rely, as applicable, on the legal grounds in Article 5 of the Turkish Personal Data Protection Law No. 6698 (KVKK): processing necessary for the establishment or performance of a contract, compliance with a legal obligation, the establishment, exercise or protection of a right, and our legitimate interests, provided they do not override your fundamental rights and freedoms. Where explicit consent is required, it is requested separately. Where other data protection laws apply to you, the corresponding legal grounds under those laws apply.

7.1 We send service emails such as verification codes, request status updates, match and quote notices and a daily summary.

7.2 Browser push notifications are sent only after you enable them in your browser. You can turn them off or choose categories in your settings at any time.

7.3 Invitation emails may be sent to business contacts of potential Suppliers and Buyers. Recipients can ask us at info@bigexport.net not to contact them again.

7.4 BIGEXPORT does not currently send marketing newsletters.

• matched Suppliers and Buyers, as described in section 4;
• hosting, database and infrastructure providers;
• email delivery services;
• the AI gateway and AI model provider(s);
• a payment provider, once payment processing is activated;
• professional advisers and public authorities where required by law.

We do not sell personal data.

The Platform serves businesses worldwide. Personal data may be transferred abroad (a) to matched Buyers or Suppliers located in other countries, at the request of the users concerned, and (b) to service providers whose servers are outside Türkiye, including AI providers. Such transfers are made in accordance with Article 9 of KVKK and other applicable law.

10.1 Personal data is kept while the account is active and afterwards for as long as necessary to meet legal obligations or to establish, exercise or defend legal claims. There is currently no automated deletion or anonymisation process; deletion is carried out manually on request or when data is no longer needed.

10.2 Members can correct account and Company information in their settings. Other corrections can be requested at info@bigexport.net.

10.3 There is currently no self-service account deletion. Deletion requests are handled manually. Details already unlocked by Suppliers remain with those Suppliers (section 4.3). Transaction records may have to be kept to meet legal obligations.

11.1 Under Article 11 of KVKK you may, among other things, learn whether your data is processed and request information about it, learn the purpose of processing and whether data is used accordingly, know the third parties in Türkiye or abroad to whom data is transferred, request correction of incomplete or inaccurate data, request deletion or destruction, request that these actions are notified to third parties, object to a result against you arising exclusively from automated analysis, and claim compensation for damage caused by unlawful processing. Other laws may give you further rights.

11.2 You can send requests to info@bigexport.net or in writing to KMK Soft Solutions Ltd. We may ask you to confirm your identity. Requests are answered as soon as possible and within 30 days at the latest.

11.3 You may also apply to the Turkish Personal Data Protection Authority or to the competent data protection authority in your country.

12.1 Access to data is checked on the server for every request. Data of one Company is not accessible to other Companies except as described in section 4. Data is transmitted over encrypted connections, guest AI keys are stored only in hashed form and payment results can be recorded only by our servers.

12.2 No system is completely secure. If a data breach occurs, we will notify the persons concerned and the competent authority as required by law.

See the Cookie Policy.

We may update this Policy. The updated version is published on this page with a new date, and Members are informed of material changes by email or by a notice on the Platform.