Our policies

We put our rules in writing

We apply all of the following in how we quote, contract and support. If you run into anything that contradicts them, tell us.

Quality policy

We commit to making everything we deliver measurable, documented and transferable.

Every project is split into modules; scope, timeline and price are fixed in writing.
Requests outside the scope are handled with a separate quote, never added quietly.
Before launch we run acceptance, performance and accessibility checks.
Admin training and documentation come as standard on delivery.
The first month after delivery includes free bug fixing.

We work on customer data, credentials and source code under the principle of least privilege.

Every system is served over HTTPS; admin panels are protected by session and role checks.
Passwords are hashed irreversibly and never stored in plain text.
Access rights are revoked when the work ends; keys are rotated when someone leaves the team.
Backups are taken on a schedule and restore drills are run.
If a vulnerability is found, the client is informed within 24 hours.

We meet our obligations as a data controller under Turkish data protection law (KVKK, no. 6698).

We collect only the data the work requires; no field is asked for without a reason.
The purpose and the legal basis of processing are explained in the privacy notice.
Requests from data subjects are resolved within 30 days at the latest.
Data whose retention period has expired is deleted, destroyed or anonymised.

Explains how data collected through the site is used and how cookie preferences work.

We classify support requests by urgency and commit to a response time.

Critical (system down): first response within 1 hour in office hours, work continues without a break.
High (a core function broken): answered the same business day.
Normal (bug or improvement): answered within 1 business day, scheduled into a release.
Requests are tracked in one logged channel, not in a personal inbox.

Our commercial relationships run on transparency, avoiding conflicts of interest and straight talk.

If we cannot do the work, we say so up front.
When we work with competing companies at the same time, we tell the client in advance.
We take no hidden commission on ad or supplier accounts opened for a client.
Work shared as a reference needs client approval; figures are anonymised where required.

Digital products consume resources too, so we treat efficient work as a quality measure.

We build light, fast interfaces that use few resources; performance is a sustainability question for us.
We shut down unused servers and services and review infrastructure cost regularly.
We offer internships and mentoring to students.
We support digital projects of non-profits on discounted terms.

Legal documents

The complete texts on personal data and privacy are published on their own pages.

Explains why and on what legal basis your personal data is processed, and your rights under article 11 of the KVKK.

Explains how data collected through the site is used and stored, and how cookie preferences work.

Sets out the rights and obligations of both parties for online purchases made through Dipasoft.

Mandatory information about the product, price, payment and right of withdrawal before you buy.

Subscription cancellation, right of withdrawal and refund terms.

Legal notice

The official details that appear on contracts and invoices.

If you need a supplier assessment form, an information security annex or a specific contract clause, write to us and we will prepare it.

Monday – Saturday 09:00 – 18:00