Privacy Policy

This Privacy Policy is issued by Nano Liquid Film ("WetProof", "we", "us"), the data controller responsible for personal data processed through this website (web.nanoliquidfilm.com) and the WetProof mobile application ("the App").

For any privacy-related question, access request, deletion request or complaint, contact us at support@wetproof.com.tr. We will respond within 30 days as required by GDPR Art. 12(3) and KVKK Art. 13.

This policy covers personal data we process when you visit our website, use the WetProof mobile application, register a dealer or customer account, issue or receive a warranty, or contact us via any channel listed below.

It does not cover third-party services we link to from our content. Those services maintain their own privacy policies, which you should review separately.

Account data: full name, e-mail address, phone number and role (dealer or customer).

Vehicle and warranty data: VIN/chassis number, brand, model, year, photographs of the vehicle before and after application, GPS coordinates of the dealer location at the moment a warranty is issued.

Authentication data: hashed password, refresh tokens, biometric enrollment status. Biometric data itself never leaves your device; only a yes/no signal from the operating system reaches the App.

Social sign-in data: when you choose Google or Apple sign-in, the provider shares your e-mail and display name with us. No password is shared.

Device data: Firebase Cloud Messaging push token, device model, operating system version, App version, language and time zone.

Diagnostic data: anonymised crash reports, performance metrics and error logs collected via Firebase Crashlytics.

Communication data: any messages you send us through the contact form or e-mail.

Analytics data: aggregated, non-identifying website traffic statistics. Loaded only after you accept analytics cookies in the consent banner.

To create and manage your dealer or customer account and authenticate every session.

To issue, activate, display and verify nano-coating warranties, including the proof of work (before/after photos and GPS) that a warranty requires.

To send transactional push notifications and e-mails: warranty status changes, customer approval requests, expiry reminders and security alerts.

To enable communication between dealers and the customers they served.

To detect and prevent fraud: duplicate warranty issuance, fake GPS coordinates, abusive account behaviour.

To improve product reliability through anonymised crash and performance analytics.

To comply with legal obligations under Turkish commercial law, tax law and consumer protection regulations.

Under GDPR Art. 6(1), we rely on: (b) performance of the warranty contract to which you are a party; (c) compliance with our legal obligations; (f) our legitimate interest in fraud prevention and service security; and (a) your consent for analytics cookies and optional marketing communications.

Under KVKK Art. 5, we process your data based on: explicit consent (analytics), necessity to perform a contract, our legal obligations, and our legitimate interests where they do not override your fundamental rights.

Google LLC — Firebase Authentication, Cloud Messaging and Crashlytics for sign-in, push notifications and crash reporting.

Google LLC — Google Sign-In for optional social authentication.

Apple Inc. — Sign in with Apple for optional social authentication on iOS.

Hostinger International Ltd. — VPS hosting for the WetProof API, admin panel and this website.

Cloudflare Inc. — only if you reach us via a CDN-fronted endpoint, for DDoS protection and edge TLS termination.

We do not sell your personal data to anyone. We do not share your data with advertisers or data brokers.

Some of our processors (Google, Apple, Cloudflare) operate globally. Personal data may therefore be transferred to and processed in the United States or other jurisdictions outside Türkiye and the European Economic Area.

For such transfers we rely on the European Commission Standard Contractual Clauses (SCC), and where applicable on KVKK Art. 9 mechanisms such as explicit consent or undertakings approved by the Personal Data Protection Authority.

Warranty records: kept for the full warranty period plus 10 years thereafter, as required by Turkish Commercial Code for commercial records.

Account data: kept until you delete your account, then 6 months as a legal hold window, after which it is permanently erased or fully anonymised.

Crash and diagnostic logs: 90 days.

Push notification tokens: rotated automatically; old tokens are deleted within 30 days of becoming invalid.

Contact form messages: 2 years after the last reply, then archived or deleted.

You have the right to: access your data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict processing; receive a portable copy of your data; object to processing based on legitimate interest; withdraw consent at any time; and lodge a complaint with a supervisory authority.

In Türkiye your supervisory authority is the Personal Data Protection Authority (KVKK). In the European Union it is the data protection authority of your country of residence. In the United Kingdom it is the Information Commissioner's Office (ICO).

To exercise any right, e-mail support@wetproof.com.tr from the account address on file. We may ask for identity verification before fulfilling requests that involve sensitive data.

All traffic between your device, our website and our API is encrypted with TLS 1.2 or higher. The mobile application additionally pins our API server certificate to prevent man-in-the-middle attacks.

Passwords are stored as one-way salted hashes; we cannot recover them and neither can any employee. Biometric data never leaves your device.

API access uses short-lived access tokens with refresh-token rotation. Every administrative action is audit-logged.

We follow the principle of least privilege: engineers can access production data only through audited, time-limited sessions and only when investigating a specific incident.

The WetProof App and this website are intended for business use (dealers and adult customers issuing or receiving nano-coating warranties). They are not directed at children under 18 and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it.

Our website uses strictly necessary cookies to remember your language preference and consent choice. These cookies cannot be disabled because the site would not function correctly without them.

Analytics cookies (Google Analytics 4) are loaded only after you click "Accept" in the cookie consent banner. They help us understand which content readers find useful. You can change your choice at any time by clearing site data in your browser; the banner will reappear.

The mobile application does not use web cookies. It uses Firebase services as described in section 6 above.

We may update this Privacy Policy when our processing activities or legal obligations change. The "Last updated" date at the top of this page always reflects the current version. Material changes will additionally be announced in-app or by e-mail to active account holders.

For privacy-related questions, access requests, deletion requests or complaints, please write to support@wetproof.com.tr. We aim to respond within 30 days.