Privacy Policy

Last updated: 31 August 2026

This policy explains what data ELPO Bilisim processes in SkyyDesk, why, and what rights you have over it. It covers the desktop, mobile and web clients.

In short: the screen you see, the audio you hear and the files you transfer in a remote session are end-to-end encrypted; our servers cannot decrypt them and do not store them. What we do keep is your account, your device records and connection metadata.

Data controller

ELPO Bilisim. Contact: destek@elpo.com.tr

Data we process

Account details: Name, e-mail, phone. If a licence was purchased, billing address and tax or national ID number. Needed to create your account, assign the licence and issue an invoice.
Device records: SkyyDesk ID, device name, operating system and app version. Used to build your address book and to show whether a device is online.
Connection metadata: Which ID connected to which, when, and the IP the connection came from. Kept so the session can be established and abuse can be detected. The content of a session is not in these records.
Payment details: Payments are taken through PayTR. Card number, expiry date and CVV are not stored on our servers. All we keep is the amount, date and outcome of the order.

Data we do not process

Screen images, audio and keyboard or mouse input in a remote session — these are end-to-end encrypted and the server only relays the encrypted packet.
The contents of files you transfer — never stored on the server.
Advertising identifiers and advertising cookies. The apps (Windows, Linux, Android, the web client) are not wired to any tracking infrastructure; the measurement described below is for this marketing site alone.

Legal basis

Account and device data are processed to perform the contract; connection metadata and security records on legitimate interest (keeping the service safe); invoice data to meet a legal obligation.

Retention

Account and device data: for as long as the account exists.
Connection metadata: 12 months at most.
Invoice and payment records: for the period tax law requires (10 years).

Sharing

We do not sell your data. It is shared in only three cases: with the payment provider (PayTR), the details needed to take the payment; with Google Analytics, the visit measurement on this site, if you allowed it; and with public authorities acting on a lawful request. The servers sit in ELPO Bilisim's own data centre; no third-party cloud is used for hosting.

Cookies and visit measurement

On this marketing site we use Google Analytics to see which pages get read. Measurement needs your consent: you are asked on your first visit, and until you accept no cookie is written and nothing is sent to Google. Decline and the site works exactly the same. If you accept, the page you visit, where you came from, your browser and an approximate location go to Google; your IP address is shortened before it is sent. You can undo your choice by clearing this site's data in your browser.

This measurement is on this website only. The remote access apps — Windows, Linux, Android and the browser client — carry no analytics; your sessions are end-to-end encrypted and do not reach third parties.

Your rights

Under Turkish data protection law (KVKK art. 11) and the GDPR you may access your data, ask for it to be corrected, deleted or restricted, and exercise portability and objection rights. Write to destek@elpo.com.tr; we answer within 30 days.

To delete your account and your data: Account deletion

Children

SkyyDesk is a business product and is not directed at anyone under 18; we do not knowingly collect data from children.

Changes

If this policy changes, the date on this page is updated. For a significant change we also notify the e-mail address on your account.