Scope and contact
This policy applies to the Bilkosis website and Bilkosis One application operated by Bilkosis Medikal Ürünler, Bilgisayar ve Elektronik Cihazlar San. Tic. Ltd. Şti. The application provides customer portal, quotation, device, document and support management, and backup features for authorized administrators. Contact info@bilkosis.com.tr or Tansel Caddesi No:12 D:51, Maltepe/Istanbul, Türkiye for privacy requests.
Information and purposes
Account and contact details are processed to provide services, authenticate accounts and handle quotations and support. Uploaded documents and transaction records support service delivery. IP addresses, browser information, visit records and security logs may be used for security, troubleshooting and visitor statistics.
Sign in with Google
When optionally enabled, Google sign-in requests openid, email and profile permissions to access the Google account identifier, verified email address and basic profile information. The email is matched to an existing authorized account; the Google identifier is stored to link that account. This sign-in does not request access to Gmail messages, contacts or Drive files.
Google Drive backups
An authorized administrator may separately connect Google Drive backups. The drive.file permission allows management of files and folders created by the application or explicitly made accessible to it. System backups are uploaded to the connected account’s Bilkosis Backups folder and may contain application data and documents. Listing, downloading and retention-based deletion support this backup function. The refresh token is stored encrypted on the server; access tokens are used for Google API requests.
Use and sharing of Google data
Google API data is used only to provide the user-facing sign-in and backup features. It is not sold, used for advertising targeting, or used to train general-purpose AI models. Use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers and security
Data may be sent to hosting, email, SMS and enabled Google service providers as necessary to provide the service, or disclosed to competent authorities where legally required. Depending on the configured providers, processing may take place abroad. Authorization, access controls and security logging are applied. No system can guarantee absolute security.
Cookies and analytics
Session and security cookies support authentication and account operations. When Google Analytics is configured, Google may process visit measurements. You can manage cookies in your browser; blocking some cookies may affect authentication.
Retention, deletion and revocation
Information is retained only as needed for service purposes, security and applicable legal retention obligations. Send access, correction, account or data deletion requests to info@bilkosis.com.tr; identity verification may be required. Revoke Google access at https://myaccount.google.com/permissions. Revoking access does not automatically delete existing Drive backups; delete them in Drive or request deletion through an authorized administrator. Data not subject to mandatory retention is deleted or anonymized following assessment of the request.
Updates
Policy changes are published on this page. Last updated: 26 October 2026.