Last updated: 27 September 2026
Privacy notice (KVKK)
This notice explains how 8x processes personal data in the 8x Scout program, as the data controller under Turkish Personal Data Protection Law No. 6698 (KVKK). It covers scouts, the brand contacts scouts tell us about, and people who open a scout's referral link.
01Who is responsible
The data controller is 8x. Company title and registered address: To be confirmed by 8x.
For anything about your data, write to To be confirmed by 8x.
02What we collect
- Scouts: name, email address, LinkedIn profile, password (stored only as a secure hash by our login provider), your activity in the program such as the brands you submit, onboarding progress and leaderboard settings, and your commission amounts and payout references.
- Brand contacts that scouts share: name, position, and an email or phone number, plus the note on how the scout knows them.
- People who open a referral link: IP address, browser details and the time of the click, and a cookie that remembers the scout's code for 90 days.
- People who book a meeting: the name and email on the booking.
03Why we use it
- To run your account and review your application.
- To credit meetings to the right scout and calculate and pay commission.
- To check that a submitted brand fits the program and is not already talking to 8x.
- To keep the service secure, for example by limiting repeated login attempts, and to fix errors.
- To meet our legal and financial record-keeping obligations.
04Legal basis
We process data because it is necessary to set up and perform your participation in the program (KVKK Article 5/2-c), to meet legal obligations (5/2-ç), and for our legitimate interest in running and protecting the program, provided it does not override your rights (5/2-f). Where the law requires your explicit consent, we ask for it separately.
06How long we keep it
We keep your data while your account is active and afterwards only for as long as the law requires or as needed to settle commissions and resolve disputes. Referral cookies expire after 90 days. Data we no longer need is deleted, destroyed or anonymised.
07Your rights
- Learn whether your personal data is processed, and request information about it.
- Learn the purpose of processing and whether it is used for that purpose.
- Know the third parties in Türkiye or abroad it is transferred to.
- Ask for incomplete or inaccurate data to be corrected.
- Ask for it to be deleted or destroyed under the conditions in KVKK Article 7.
- Ask that corrections or deletions are passed on to the third parties it was shared with.
- Object to a result against you that comes solely from automated analysis.
- Claim compensation if you suffer damage from unlawful processing.
08How to make a request
Send your request to To be confirmed by 8x, or in writing to the address above. We answer free of charge within 30 days at the latest. If a response involves a cost, it follows the fee schedule set by the Personal Data Protection Board.