Security and privacy

Your account and your data, under your control.

On one page, we explain how to protect your talep.ai account, how to download your data and how to delete your account.

01Two-step verification

What is 2FA and how do I turn it on?

Two-step verification (2FA) asks for a 6-digit code from the authenticator app on your phone in addition to your password when you sign in. You turn it on in Settings by scanning the QR code and entering the first code; 10 single-use recovery codes are shown once.

  • TOTP apps such as Google Authenticator and Microsoft Authenticator
  • 10 recovery codes; can be regenerated
  • 15-minute lock after 5 wrong codes in a row
02Sessions

Where are you signed in?

The session list in Settings shows the device, browser, last activity and masked IP address of each session. You can end a single session or sign out of all other devices; an ended session becomes invalid immediately.

  • Device, browser and last activity
  • IP addresses are shown masked (e.g. 85.105.x.x)
  • Changing your password signs out your other sessions
03Phone verification

Is the number really yours?

You verify your phone number with a 6-digit SMS code. A verified number helps service providers work with genuine requests; you may be asked to verify before your request is assigned to a provider.

  • Code valid for 5 minutes
  • Up to 5 codes per day
  • Verification valid for 180 days
04KVKK data export

Download your data

"Download my data" gives you your account, requests, appointments, reminders, finance records, reviews, the messages you've sent, Documents, health records (if you gave consent), household shares and business-tool data as a single JSON file. Passwords, session keys and other people's personal data are not included.

  • A single, machine-readable JSON file
  • Up to 3 downloads per 24 hours
  • For both user and service provider accounts
05Account deletion

Delete your account

You can delete your account from the settings section of the dashboard. Deletion signs you out of all sessions and also deletes your request photos, Documents files, all health data and consent records, any household you own and your invite code. Records subject to a legal retention obligation (such as billing records) may be kept for the period required by the relevant legislation.

06Photos and documents

Your files are protected

Location and device data (EXIF) in the photos you upload are stripped on the server. Request photos are visible only to you and the service provider assigned to the request; links are short-lived and personal. Criminal record documents are reviewed only with explicit consent and deleted after 30 days.

  • Location and device data removed
  • Short-lived, personal links
  • File type verified from the content
08Encrypted fields

Sensitive fields are stored encrypted

Policy numbers and document notes; medication names, doses and notes; measurement values and health-calendar titles are encrypted in the database with AES-256-GCM and decrypted only for the account owner. Nobody but you, talep.ai admins included, can see your Documents files.

  • AES-256-GCM, bound to the user
  • Documents files open only to you
  • Short-lived, signed file links
09Location sharing

Location only on the way

A provider's location is shown only while a trip started with "I'm on my way" is active, and only to that job's customer. Once the trip ends the coordinates are never shown again; the last position and coarse trail are deleted completely 24 hours after the trip. Calendar subscriptions show addresses as district and city only and never include phone numbers.

  • A trip lasts at most 3 hours
  • Admins can't view live location
  • Renew or switch off a calendar link at any time
How live location works →
10Moderation

Report, block, community guidelines

In messaging you can report a message or a conversation and block the person. Reports are reviewed within 24 hours; the reported person is not told. For the review, a snapshot of the message and a few messages around it is kept and deleted one year after the decision. Messages that break the rules are removed.

  • Blocking closes all conversations both ways; the job isn't cancelled
  • A blocked provider won't be suggested to you again
  • Contact: info@talep.ai
Platform

What's running behind the scenes?

01

HTTPS only

All connections are made over encrypted HTTPS.

02

Role-based access

User, service provider and administrator permissions are separate; everyone can access only their own data.

03

Team permissions

In business accounts a technician sees only the jobs assigned to them; amounts, subscription and reports are limited to the owner and managers.

04

Rate limiting

Actions such as signing in, verifying codes and uploading files are rate-limited to prevent abuse.

FAQ

Frequently asked questions

See all questions →

How is my data protected?

Connections are made over HTTPS only, each role can access only its own data and sensitive actions are rate-limited to prevent abuse. You can turn on two-step verification and see and end your active sessions. Your data is processed in line with KVKK.

Is the Health section secure, and does it give medical advice?

The Health section opens only with your explicit consent. Medication names, doses, measurement values and notes are stored encrypted and shown only to you; reminder notifications never contain the medication name. The section gives no medical interpretation or advice and doesn't evaluate measurements; consult your doctor for health decisions.

How do I see my pro's location, and how long is it kept?

When the service provider taps "I'm on my way" you get a notification, and your request page shows their live location and approximate arrival time. The location is shown only while the trip is active and only to you; after the trip it can't be viewed, and all location records are deleted after 24 hours.

How do I report an offensive message or block someone?

In Messages you can report a single message or the whole conversation with a reason, or block the person. Reports are reviewed by our team within 24 hours; the reported person is not told. Blocking closes all conversations between you in both directions but doesn't cancel the job. Guidelines: panel.talep.ai/topluluk-kurallari.

How do I download my data?

With "Download my data" in Settings, all your account data, including Documents, health and household records, is downloaded as a single JSON file. Passwords, session keys and other people's personal data are not included. You can download up to 3 times in 24 hours.

How do I delete my account?

You can delete your user account by following the steps at panel.talep.ai/hesap-silme, and your service provider account at hizmet.talep.ai/hesap-silme. Deletion signs you out of all sessions and deletes the files you uploaded.

Start with confidence

Create your free account.

After signing up, we recommend turning on two-step verification in Settings.