Privacy policy and data protection notice
Last updated: 6 October 2026
This notice explains how personal data is processed in the ZILKO service and on zilko.co under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
1. Who we are
ZILKO is a voice and messaging front-desk assistant provided by FUBER LTD (Istanbul, Türkiye). Contact: hello@fuber.ltd.
2. Our roles
The clinic or business using the service is the data controller for its own patients’ and customers’ data. ZILKO is the data processor handling that data on its behalf and on its instructions.
For website visitors, account holders and people who contact us, FUBER LTD is the data controller.
3. Data we process
- Website: if you email us, your email address and the content of your message.
- Account: name, email address, role and the clinic or business you belong to.
- Within the service (on behalf of the clinic): call recordings and transcripts, the caller’s phone number, WhatsApp, Instagram and Messenger messages and profile names, appointment and patient record details.
- Conversations may contain health information (for example a complaint). This is special-category personal data; establishing the legal basis for processing it and giving the required notices is the clinic’s or business’s responsibility.
4. Purposes
- Answering calls and messages, booking appointments and keeping records.
- Managing your account, giving support and billing.
- Keeping the service secure and preventing abuse.
- Improving the service (through aggregate, non-identifying measurements).
5. Legal bases
Establishment and performance of a contract, compliance with legal obligations, legitimate interest and, where needed, explicit consent.
6. Transfers
To deliver the service, data may be passed to recipient groups such as voice-assistant infrastructure, AI model providers, hosting and storage, messaging platforms (Meta), email and payment services. These recipients may be located abroad; transfers are made in line with Article 9 of KVKK.
Your data is not sold or shared for advertising.
7. Retention
Data is kept for a limited period for the purpose of the service. When an account is closed, data is deleted or anonymised within a reasonable time; legal retention obligations remain.
8. Security
- All connections are encrypted with TLS.
- Access keys and session details are stored encrypted.
- Each clinic’s or business’s data is kept separate; access depends on authorisation.
9. Your rights
Under Article 11 of KVKK you may learn whether your data is processed, request information, ask for correction or deletion, object to processing and claim compensation for damage. Send requests to hello@fuber.ltd. If you are a clinic’s patient, make your request to that clinic first.
10. Cookies
The website uses no analytics or advertising cookies. When you sign in, only a strictly necessary session cookie is used to keep you signed in.
11. Changes
This notice may be updated. The current version is published on this page with the date of the last update above.