Data Deletion Request
Veri Sızıntısı is a cyber threat intelligence platform that analyzes breach data compiled from publicly available sources. You may formally request deletion of your data from our own database through this form.
If you wish to delete your HUBOne account data, you do not need this form. Go to HUBOne → Account Settings → Permanently Delete My Account — your account and all associated data will be deleted immediately and permanently.
What We Can and Cannot Do
- Delete records associated with your email address or domain from our own database.
- Permanently exclude your email address or domain from all future monitoring.
- Delete data from the original breach source — the third-party platform where the leak occurred.
- Technically or legally intervene in external systems where the breach took place.
- Provide information about the data source. For questions such as which platform it leaked from, contact that platform or your national data protection authority.
Legal Rights
Your Rights Under KVKK & GDPR
Under Article 11 of the Turkish Personal Data Protection Law (KVKK No. 6698) and Article 17 of the EU General Data Protection Regulation (GDPR), you have the following rights:
- Right to learn whether your personal data is being processed and for what purpose
- Right to learn which third parties your data has been transferred to, domestically or abroad
- Right to request correction of incomplete or inaccurate personal data
- Right to request erasure or destruction of your data under KVKK Article 7 ("right to be forgotten")
- Right to object to automated decisions that produce legal effects concerning you
Legal references: KVKK Md. 11 · GDPR Art. 17
Timeframe & Verification
- 30 days: Under KVKK Article 13, we are legally obligated to respond to your request in writing within 30 days.
- +30 day extension: If the request is complex or technically challenging, this period may be extended by a further 30 days with stated reasons (maximum 60 days total).
- Identity verification: We may request additional documentation to verify the identity or authority of the requester. The legal deadline begins once complete documentation is received.
- Domain verification: For domain-scoped requests, you may be required to verify domain ownership by adding a DNS TXT record.
How the Process Works
This form is not an automated deletion system. Your request is assessed within a legal framework; correspondence regarding identity, authority, and ownership verification may be required.
Once submitted, you will receive a confirmation email containing your reference number. The request is logged and enters preliminary review.
Our team reviews the scope and legal validity of your request. At this stage, we may email you with follow-up questions or document requests that require your response.
Individuals may be asked for a government-issued ID; companies for a letter of authorization; domain holders for a DNS TXT record. The completeness of documentation directly affects the timeline.
Once approved, the relevant data is processed within the defined scope. You will be notified of the outcome by email. The statutory maximum is 60 days; complex requests may use the full period.