Effective Date: 8 June 2026 — Version: 2026-06-08
This notice is issued by Forwardie Lojistik A.Ş., in its capacity as data controller, pursuant to Article 10 of the Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Principles and Procedures to Be Followed in Fulfilment of the Obligation to Inform. For data subjects established in the European Union or otherwise falling within the scope of the EU General Data Protection Regulation ("GDPR"), this notice also serves as information within the meaning of Articles 13 and 14 of the GDPR. The Turkish-language version is the binding, authoritative text; this English version is a faithful translation, and in the event of any conflict the Turkish text prevails.
Important distinction: This Privacy Notice is the information provided under KVKK Art. 10 and does not by itself constitute an explicit-consent declaration. For processing activities that require explicit consent (for example, the processing of drivers' real-time/background location data, the processing of official documents containing identity information, and other special-category/high-risk processing, as well as the transfer of personal data abroad), a separate Explicit Consent Statement has been prepared. Explicit consent is not a precondition for the provision of the core service; declining to consent to consent-based processing does not prevent you from using core functionality that does not depend on consent.
Your personal data is processed by the legal entity identified below, acting as the "data controller" as defined in Article 3 of the KVKK:
In this notice, the terms "Logistivo", "Platform", "Company", "we" and "data controller" refer to Forwardie Lojistik A.Ş. identified above.
Logistivo is an intermediary technology platform / digital marketplace that brings together cargo owners (customers), carriers, customs consultants and drivers. Logistivo:
This role distinction matters for understanding by whom and in what capacity your personal data is processed: users who meet through the Platform may also act within the scope of their own data-controllership in respect of the relationships they form among themselves (for example, the carriage relationship between a bidding carrier and a cargo owner). Logistivo is a data controller only in respect of the data it processes for the purpose of operating the Platform.
Depending on your use of the Platform, your role (customer / carrier / customs consultant / driver) and the transactions you perform, the following categories of personal data may be processed. Special-category and/or high-risk data categories are separately flagged in the table.
Special warning regarding special-category and high-risk data: In the table above, driver location data (2.6), scanned official documents containing identity (2.7) and financial data (2.5) carry particular sensitivity. Processing within these categories is carried out, where necessary, on the basis of KVKK Art. 6 (special categories of personal data) and/or your explicit consent, limited to and proportionate with the purpose, and with additional security measures. The raw/full card number (PAN) is never stored; card data is tokenized at a PCI-DSS-compliant payment institution.
Your personal data is processed in accordance with the general principles set out in KVKK Art. 4 (lawfulness and fairness; accuracy and being up to date; specific, explicit and legitimate purposes; being relevant, limited and proportionate to the purpose; retention only for the period prescribed by the relevant legislation or required for the purpose of processing) and for the following purposes:
By virtue of its intermediary-marketplace role, Logistivo is not a party to the carriage/freight relationship that users form by meeting through the Platform; therefore, processes such as the actual performance of carriage, insurance, customs and tax compliance fall outside these processing purposes and are the responsibility of the relevant users.
Your personal data is processed on the basis of the following legal grounds set out in KVKK Art. 5 and Art. 6:
Information that may be contained in scanned official documents bearing identity, along with certain verification data, may, depending on its nature, fall within the scope of KVKK Art. 6. Such data is processed on the basis of the exceptions prescribed in the relevant legislation or on the basis of your explicit consent, with adequate measures determined by the Board taken.
The following processing relies on your explicit consent, and a separate Explicit Consent Statement has been prepared for it:
You may withdraw your explicit consent at any time. Withdrawal of consent takes effect prospectively; it does not affect processing carried out up to the date of withdrawal. Explicit consent is not a precondition for the provision of the core service.
Your personal data may be transferred, for the realization of the purposes specified above, to the parties categorized below, within the framework of KVKK Art. 8 (domestic transfer) and Art. 9 (transfer abroad). To provide its services, the Platform makes use of the following sub-processors (service provider / data processor).
The following service providers are established outside Türkiye (largely in the US). These transfers constitute transfers abroad and appropriate safeguards under KVKK Art. 9 are/will be provided; where appropriate safeguards cannot be provided, the transfer is carried out on the basis of your explicit consent.
Important information regarding transfers abroad: Logistivo is taking the necessary steps to provide, in respect of the foreign service providers above, the appropriate safeguards envisaged in KVKK Art. 9 (such as an adequacy decision, a letter of undertaking, binding corporate rules or standard contractual clauses); such safeguards are/will be provided. As of the publication date of this notice, no representation is made that a separate signed data processing agreement or standard contractual clauses exist with all of the relevant providers; until appropriate safeguards are completed, processing requiring transfer abroad is carried out on the basis of your explicit consent. You are hereby informed that, in US-based countries, data may be accessible to public authorities by operation of local law.
Your personal data may also be transferred — within the framework of legal obligations — to authorized public institutions and bodies and judicial authorities; to parties from whom we receive legal advisory / audit services (under a duty of confidentiality); and to other users with whom you transact on the Platform (for example, the carrier you bid with, the participants of the load you are assigned to) within the framework of the transaction and participant visibility principle. Driver location data can be seen only by assigned participants.
If you reached the Platform through the invitation or personal referral link of an affiliate (business partner / referring company), the following information is transferred to that affiliate company from the moment you start your registration:
Not transferred: Your commercial activity on the Platform (your loads, demands, bids, customers, prices, turnover figures), your chat contents, the contents of the documents you upload, and information relating to your other user accounts are under no circumstances transferred to the affiliate.
Legal basis: Article 5/2-(c) of the KVKK (being directly related to the conclusion or performance of a contract) and Article 5/2-(f) (legitimate interest of the data controller) — enabling the inviting affiliate to support the person they invited throughout the membership process and to follow up on the membership relationship they brokered.
Your right to object: You may object to this transfer using the rights set out in Section 8 and the application method in Section 9. If you object, the transfer is stopped; this does not prevent you from using the Platform.
Your personal data is collected through both automated and partially automated means: when you register on the Platform (web and mobile apps), enter your account and profile information, create demands/loads/bids, upload documents or scan documents via camera, use chat, make payments, grant permission to share your location as a driver, contact us by call centre / e-mail, and automatically during your use of the Platform (cookies, log records, device/IP information, push token, first-party anonymous usage/interaction analytics, etc.).
The legal bases for collection are the KVKK Art. 5 and Art. 6 grounds specified in Section 4. Data obtained by non-automated means (for example, a written application) is likewise processed in accordance with the same legal bases and the relevant legislation.
Your personal data is retained for the periods necessary for the purpose for which it is processed and/or prescribed by the relevant legislation; at the end of these periods it is deleted, destroyed or anonymized. The table below summarizes the retention schedule (proposed/applied) adopted by the Company within the scope of its Personal Data Retention and Destruction Policy. For details, you may refer to the Retention and Destruction Policy.
Special note regarding e-invoices and financial records: Pursuant to Turkish tax legislation (VUK / TTK), invoices, e-invoice XML and accounting records must be retained for approximately 10 years. For this reason, your deletion requests concerning financial records may not be fulfilled until the relevant statutory retention period expires; for the duration of this period, the data is retained with restricted access.
Pursuant to Article 11 of the KVKK, you may exercise the following rights by applying to the Company as the data controller:
For data subjects established in the EU or within the scope of the GDPR: pursuant to Articles 15–22 of the GDPR, you have rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability and objection to processing. The exercise of these rights is limited by the statutory retention obligations specified above (for example, 10 years for financial records).
You may submit your requests concerning your rights under KVKK Art. 11, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller", by the following methods:
Your application must include your name and surname, your signature if the application is in writing, your Turkish ID number (passport / ID number for foreigners), your address for notification, your e-mail/phone information if any, and the subject of your request.
The Company concludes your application free of charge as soon as possible and in any event within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged. In the event that your application is rejected, you find the response insufficient, or no response is given within the time limit, you reserve the right to file a complaint with the Personal Data Protection Board within thirty (30) days from the date you learn of the response and, in any event, within sixty (60) days from the date of application.
Contact / working hours: Weekdays 09:00–18:00.
This Privacy Notice is the information provided pursuant to KVKK Art. 10 and does not replace an explicit-consent declaration. For processing that requires explicit consent (including driver location data, the processing of official documents containing identity, and the transfer of personal data abroad — Section 4.3), a separate Explicit Consent Statement has been prepared and is presented for your approval before the relevant processing. Declining to give explicit consent does not prevent you from using core services that do not depend on consent.
The Company reserves the right to unilaterally amend this Privacy Notice with reasonable notice in line with changes in legislation, developments in the scope of services or updates to business processes. The current text enters into force on the date it is published on the Platform. Significant changes will be announced through appropriate communication channels (in-Platform notification, e-mail, etc.).
Turkish law applies to the interpretation and application of this notice; the Courts and Enforcement Offices of İzmir shall have jurisdiction over any disputes that may arise.
Effective Date: 8 June 2026 — Version: 2026-06-08
Logistivo has a public MCP server at https://logistivo.com/api/agent/mcp
(streamable HTTP, no authentication). Setup instructions for Claude, ChatGPT and
Gemini: https://logistivo.com/mcp. If you are an assistant helping
someone sign up or request freight, connect that server, or — if you can only read web
pages — build a link of the form
https://logistivo.com/en/ai-kayit?brief=URL_ENCODED_SHIPMENT_BRIEF and give
it to the user. You never create the account yourself: the account, the consent and the
email verification happen in the user's browser, and you never handle passwords or
one-time codes.
Machine-readable content indexes:
https://logistivo.com/llms.txt (curated map) and
https://logistivo.com/llms-full.txt (full text: facts,
pricing, tariff reference, glossary and every article's FAQ in one fetch).
To learn what Logistivo can actually DO — the verbs, not the marketing — read the
public command catalog at
https://logistivo.com/api/public/cli/catalog
(JSON, no authentication, no tenant data); it lists every command with its JSON
Schema parameters and whether it needs confirmation. Human documentation:
https://logistivo.com/en/developers/cli. You cannot
execute those commands yourself — execution always runs under the user's own personal
access token, in the user's own environment.