Privacy Policy

Last updated: 12 October 2026

This policy explains how we handle your personal data on the gno-cy.com website, in the GO ERP & CRM app (app.gno-cy.com) and when you buy and pay: what data we collect and why, who we share it with, how long we keep it and what your rights are. Our WhatsApp inbox service has its own GO Inbox privacy policy.

1. Who we are
2. What data we process
3. Payments and card details
4. What we use data for
5. What we never do
6. Service providers
7. Where data is kept
8. How long we keep data
9. Security
10. Cookies and browser storage
11. Your rights
12. Children
13. Changes

1. Who we are

gno-cy.com and GO ERP & CRM are run by Gavani & Özkoç Digital Solutions Ltd. ("G&O", "we"), a software company based in Nicosia, North Cyprus. G&O is the data controller for the personal data described in this policy.

• Address: Şht. Ecvet Yusuf Cad. Öztek Apt. No:19/2, Yenişehir, Nicosia, North Cyprus
• E-mail: support@gno-cy.com
• Phone: +90 533 886 00 09 · +90 548 879 95 71

We process personal data in line with North Cyprus's Personal Data Protection Law No. 89/2007. Customers based in Turkey also keep their rights under Turkey's Personal Data Protection Law No. 6698 (KVKK).

2. What data we process

When you visit the website

• Server logs: our hosting provider, Hostinger, keeps standard access logs (IP address, browser details, the page requested, time) for security and debugging.
• Analytics (only with your consent): if you choose "Accept" in the cookie notice, Google Analytics measures the pages you visit, the steps you take on the site (for example seeing the prices, clicking a pack, your answers in the pack finder and whether you send a form), your approximate location (country, city) and your device and browser type, for aggregate statistics. Your name, phone number and e-mail address are never sent to Google Analytics. If you choose "Reject", no analytics data is collected. Advertising signals are always off.
• Demo videos: the videos on the demo page don't load from YouTube until you press play. When you do, YouTube (Google) plays the video under its own privacy policy.

When you contact us

• Contact form: your name, e-mail address, company name if given and message are forwarded to us by e-mail through our form provider, Formspree.
• Pack finder: if you ask us to call you from the pack finder on the GO ERP page, your answers (type of business, number of staff, the system you use today), the pack suggested to you, your name, phone number, business name and e-mail address if given, how you want us to get back to you, and the page and link you came through are forwarded to us by e-mail through Formspree. We use them only to get back to you and prepare an offer.
• E-mail, phone and WhatsApp: our correspondence, and the number and time of calls, are kept to resolve your request.

We don't add your contact details to marketing lists.

When you use GO ERP & CRM

• Account details: your name, e-mail address, company name, language preference and user role; sign-in data. If you sign in with Google, the name, e-mail address and profile photo link Google shares. Passwords are never stored in readable form and we cannot see them. If you turn on two-step verification, your verification key is stored with your account.
• Signup source: if you sign up for GO ERP through a link on our website or a campaign link, the kind of link you clicked (for example a pricing card or the pack finder), the pack you chose, the campaign tags in the link (utm) and the name of the site that referred you are stored with your company record. We use them only to measure which channels work.
• Business records: the records your company enters in GO ERP (accounts, invoices, products, stock, orders, staff and the like). For personal data in these records (for example details of your customers or employees), your business is the data controller; G&O processes that data only on your business's behalf and to provide the service.
• AI features: when you use Salti or the app's other AI features, what you write, the images you add and the records needed to answer are sent to our AI provider, Anthropic, to generate the answer. When you don't use these features, nothing is sent to Anthropic.
• Problem reports: the description and screenshot you send with "Report a Problem" in the app. No screenshot is taken on screens that show card details or a verification key.
• Technical logs: error logs, and the IP address and browser details the sign-in service keeps for security.

When you buy

• The pack and billing period you choose, the amounts, the company details needed for the invoice (legal name, address, tax details), the outcome of the payment, and correspondence about cancellations and refunds.

3. Payments and card details

For cancellations and refunds, see our Cancellation and Refund Policy.

4. What we use data for

• To open your account, provide GO ERP and make sure each business sees only its own data (entering into and performing the contract).
• To handle purchases, payments, invoicing, cancellations and refunds (performing the contract and legal obligations).
• To answer your questions and support requests (performing the contract and legitimate interest).
• To get back to you about requests from the pack finder and prepare an offer (at your request, steps before a contract).
• To send the e-mails the service needs, such as account verification, security alerts, subscription and invoice notices (performing the contract).
• To keep the service secure, prevent abuse and fraud, and find and fix errors (legitimate interest).
• To measure website use in aggregate (only with your explicit consent).
• To measure which channels and campaigns bring signups and requests, by keeping the signup source (legitimate interest).
• To keep tax and accounting records and respond to lawful requests from authorities (legal obligations).

5. What we never do

• We don't sell or rent data.
• We don't use data for advertising or profiling or to send you marketing messages, and we don't share it with ad networks. We use the signup source only to measure whether our channels work.
• We don't share one business's data with another business.
• We access your business records only for support, fixing errors or legal obligations, and only as much as needed.
• We don't use your data to train AI models. Under its commercial terms, our AI provider Anthropic doesn't use data sent to it this way to train its models either.
• We don't share data with anyone other than those listed on this page.

6. Service providers

We work only with these providers to run our services. Each processes data only to provide its own service:

• Google (Google Cloud and Firebase): hosting, database, server functions and sign-in (Firebase Authentication) for GO ERP. The app loads its fonts from Google Fonts, which passes your browser's IP address to Google.
• Google Workspace: our e-mail, and the account verification, invitation and notification e-mails the app sends.
• Google Analytics: on the website only, and only with your consent.
• Anthropic: Salti and the other AI features.
• Hostinger: hosting of the gno-cy.com website.
• Formspree: the website's contact form and pack finder.
• Our partner bank: card payments and refunds.
• Meta (WhatsApp): when you message us on WhatsApp, messages travel through Meta's infrastructure under Meta's own terms.
• YouTube: demo videos, only when you press play.

Beyond these, we share data only where the law requires it, in response to lawful requests from authorities.

7. Where data is kept

• Account and business records in GO ERP are stored and processed in Google Cloud data centres in the European Union.
• Sign-in data (e-mail, name, the unreadable form of the password, IP address and browser details) is processed by Firebase Authentication, which Google runs from data centres in the United States.
• Anthropic processes AI requests in the United States. Formspree and Google Analytics may also process data in the United States.

These transfers outside North Cyprus happen only for the purposes listed in this policy and under the providers' data protection commitments.

8. How long we keep data

• Account and business records: kept while your account is open. When your subscription ends or a payment is not made, access to your account closes; from then on you can get a copy of your records only through us, as Excel files. When you ask us to close the account or delete the records, they are deleted within 30 days and are fully removed from Google's backup systems within 180 days at the latest.
• Invoice, payment and refund records: kept for as long as tax and accounting law requires.
• Correspondence, contact form and pack finder messages: kept for as long as needed to resolve your request, and deleted when no longer needed.
• Technical and security logs: kept briefly, usually deleted within 30 days.
• Analytics data: kept in Google Analytics for 14 months at most.

9. Security

• All connections are encrypted (HTTPS/TLS). Google also stores database data encrypted.
• Each business sees only its own data; this is enforced both on the server and in the database rules. Within a company, each user's access is limited by their role.
• You can turn on two-step verification for your account.
• Passwords are stored in unreadable form; card details are never stored by us at all.

No system is perfect. If we become aware of a security incident affecting data, we inform those affected without delay.

10. Cookies and browser storage

• Website: your cookie choice, and a single timestamp that tells the WhatsApp button when to tuck away, are kept in your browser's own storage. Google Analytics cookies load only if you choose "Accept".
• GO ERP: the data needed to keep you signed in and your language and theme preferences are kept in your browser's own storage; these are required for the service to work. The pack you chose on the website and your signup source are also kept in the tab's temporary storage and are deleted at the latest when you close the tab or sign out; the signup source is only for measuring our channels and is not required for the service.

We don't use advertising or tracking cookies. To change your cookie choice, clear this site's data in your browser; the notice will appear again.

11. Your rights

To the extent data protection law grants them, you have the right to learn whether data about you is processed, to access it, to ask for it to be corrected, deleted or its processing restricted, to object to its processing, to get a copy of your data, and to withdraw your consent at any time.

Write to support@gno-cy.com with your request; we reply within 30 days at the latest. We may ask for more information to confirm the request is yours. If you are a customer or employee of a business that uses GO ERP, you can also send your request directly to that business; we resolve requests that reach us together with the business. You also have the right to complain to the competent data protection authority.

12. Children

Our website and GO ERP are meant for businesses and are not intended for anyone under 18. If you think data of someone under 18 has reached us, write to us and we will review and delete it.

13. Changes

We update this policy when needed; the current version is always published on this page, with the date it was last updated at the top. We tell customers about important changes by e-mail or in the app before they take effect.

Questions: support@gno-cy.com