Privacy Policy
Last updated: October 14, 2026
1. Application and Contact
ANKON ("Platform") is a mentorship platform operated by Anadolu Network ve Kariyer Organizasyonu (ANKON) that connects university students with career mentors.
For privacy-related questions: [email protected]
2. Personal Data We Collect and How We Use It
The following data is processed when you use the Platform:
- Account information: First and last name, institutional email (.edu.tr — for student verification), user role
- Profile information: University, department, interests; for mentors — areas of expertise and experience
- Usage data: Matching preferences, session records, evaluations
- Technical data: IP address, session information, browser and device information
This data is processed for account creation and identity verification, mentee–mentor matching, session scheduling, and platform security.
For detailed information on the legal basis, transfers, retention periods, and your rights regarding the processing of your personal data, please refer to our KVKK Privacy Notice.
3. Google API Usage
The Platform uses the Google Calendar API to automatically generate Google Meet links for mentorship sessions.
What we DO:
- A Platform administrator connects the Platform's own organizational Google account once, through the admin panel. This connection is limited to the calendar event creation scope (
calendar.events). - Using that account, the Platform creates a Google Calendar event for each confirmed session and generates an associated Meet link.
- When a session is cancelled, the corresponding event is deleted.
What we DO NOT do:
- We do not access the personal Google accounts or calendars of mentors or mentees. Users are never asked to connect a Google account.
- We do not read, list, or store existing events from the connected account's calendar.
- Data obtained from Google APIs is used solely to generate Meet links, for no other purpose, and is never shared with third parties.
4. Limited Use Disclosure
ANKON's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Data Security
All data transmission is encrypted via HTTPS. Passwords are protected with strong algorithms. Google API access is restricted to the authorized account connected by the Platform administrator.
6. Retention and Deletion of Google User Data
The Google account connection is established only by a Platform administrator, for the Platform's own organizational Google account. We never access the personal Google accounts of mentors or mentees.
Google-derived data we store:
| Data | Purpose | Retention period |
|---|---|---|
| Google Meet link | Conducting the session | Until the session record is deleted |
| Calendar event ID | Updating the event if the session time changes | Until the session record is deleted |
| Connected account's email address and calendar name | Showing the administrator which account is connected | Until the connection is removed |
| Authorization token (refresh token) | Creating calendar events for sessions | Until the connection is removed |
The authorization token is stored encrypted in our database and is never displayed to any user, in any interface, or in any log file.
Deletion:
- A Platform administrator can remove the Google connection at any time from the admin panel; the authorization token is deleted from the database when this happens.
- The owner of the connected Google account can revoke the Platform's access at any time from the Google Account permissions page.
- When a session record is deleted, the associated Meet link and calendar event ID are deleted with it.
- To request complete deletion of your account and data, write to [email protected]; requests are fulfilled within 30 days.
7. Use of Artificial Intelligence and Google Data
The Platform uses an AI-based text similarity service (Cloudflare Workers AI) to match mentor and mentee profiles.
The data sent to this service consists exclusively of information that users enter into the Platform themselves: profile texts, areas of expertise, and skill names.
No data obtained from Google is ever sent to any AI service. Google Calendar data, Meet links, and Google account information are kept entirely outside of AI processing.
Google user data is not used, transferred, or sold to develop, improve, or train generalized or foundational artificial intelligence or machine learning models. Our AI provider likewise commits that customer content is not used to train its models.