Privacy Policy

iLand Group ("iLand Group", "we", "us", "our") is a Turkish–Senegalese B2B export group. We source consumer goods in Türkiye and manage export, warehousing, customs clearance, distribution, sales and collection across African markets, operating from offices in Istanbul and Dakar.

This policy explains what personal and business data we handle, why we handle it, who we share it with, and what rights are available in respect of it. It applies to our websites, to our commercial relationships with customers, suppliers and partners, and to the internal software we operate — including the i-LandGroup App, our QuickBooks Online accounting integration, which is described in detail in Part C.

Who is responsible for your data

iLand Group is the data controller for the processing described in this policy. You can reach us at info@i-landgroup.com, or at the postal addresses at the end of this page.

Part A — Data we handle in the ordinary course of business

1. Business contacts

To trade, ship and get paid, we handle limited information about the people we deal with at customer, supplier, carrier, agent and authority organisations. This is business-context data: names, job titles, work email addresses and telephone numbers, employer, and the commercial correspondence and documentation exchanged with them.

We use it to negotiate and perform contracts, arrange freight and warehousing, complete customs and regulatory formalities, issue and settle invoices, manage credit and collection, and maintain the ordinary commercial record of the relationship.

Where the EU General Data Protection Regulation (GDPR) applies, our legal basis is performance of a contract, compliance with a legal obligation, or our legitimate interest in running the business (Article 6(1)(b), (c) and (f)). Where Turkish Law No. 6698 (KVKK) or Senegalese Law No. 2008-12 applies, processing rests on the equivalent grounds.

2. Records we are required to keep

Commercial, customs and tax law in the jurisdictions where we operate requires us to retain invoices, shipping documentation, customs declarations and accounting records for defined periods. We keep those records for as long as the applicable law requires and then dispose of them.

3. Candidates and personnel

Where we receive applications or engage staff and contractors, we handle the information necessary for recruitment, employment administration and legal compliance. It is used for those purposes only and is not shared beyond the providers and authorities involved in them.

Part B — Data we handle through our websites

4. Website visitors

Our public websites are informational. We do not require visitors to create an account, and we do not sell or share visitor data with advertising networks or data brokers.

• Enquiries. If you contact us through a form, by email, or through a messaging or social channel, we receive the details you choose to provide and use them to respond and to follow up on the enquiry.
• Technical data. Our hosting provider records standard server and delivery information, such as IP address, browser type and pages requested, for security, abuse prevention and performance. This is ordinary infrastructure logging, retained for a short period.
• Analytics. Where we measure site usage, we do so in aggregate to understand which pages are useful. We do not build advertising profiles of visitors.

5. Cookies

We use only the cookies and equivalent storage necessary to serve the site, remember your language preference, and keep the site secure. We do not use advertising or cross-site tracking cookies. Where local law requires consent for any non-essential cookie, we ask for it before setting it.

The pages of the i-LandGroup App at mcp.i-landgroup.com use only the session storage strictly required to keep an authenticated user signed in.

Part C — The i-LandGroup App (QuickBooks Online integration)

6. What the App accesses

Once a QuickBooks Online company is connected, the App may read and — where write permissions are enabled — create, amend or delete the following, through Intuit's QuickBooks Online Accounting API:

What the App does not access

• It does not connect to the QuickBooks Payments API, and does not process, store or transmit payment card numbers or bank account credentials.
• It does not move money, initiate transfers, or execute payment transactions with any financial institution. Where it records a payment, it is writing a bookkeeping entry, not settling funds.
• It does not receive your Intuit account password or QuickBooks sign-in credentials. Authorization is granted through Intuit's OAuth 2.0 flow.
• It does not access any QuickBooks company other than the one explicitly connected.

7. Why the App processes this data

• Financial reporting and analysis — producing and interpreting management reports for internal decision-making.
• Bookkeeping — creating, correcting and maintaining accounting records on the instruction of authorized personnel.
• Answering internal business questions — for example on receivables, margins, supplier balances or cash position.
• Service integrity — maintaining the connection, diagnosing errors, and detecting or preventing unauthorized access.

Data obtained from Intuit is used for these purposes only. We do not use it to build products, to train models, to profile individuals, or for any commercial purpose beyond running our own accounts.

8. Use of AI assistants

The App is accessed through general-purpose AI clients rather than an interface of our own. The providers that may therefore process this data are:

• Anthropic PBC — Claude models, where the App is used through Claude. Anthropic states that data submitted through its commercial API is not used to train its models. See the Anthropic Privacy Policy.
• OpenAI OpCo, LLC — GPT models, where the App is used through ChatGPT. See the OpenAI Privacy Policy.

We do not authorise either provider to use this data for any purpose other than generating the requested response, and we configure the accounts through which the App is accessed so that business data is excluded from model training. We do not use Intuit data to train, fine-tune or evaluate any model of our own.

Access is granted only through clients operated by these named providers. The App is not connected to any other AI service, and this list is updated before any further provider is enabled.

9. Where App data is stored, and for how long

The App does not maintain its own copy of the accounting records. Records are retrieved from Intuit's API when a request is made, held in memory only for as long as it takes to answer that request, and then discarded.

The following are stored on our server, located in Frankfurt, Germany:

• OAuth tokens and the company (realm) identifier — retained only while the connection is active.
• Operational logs — a record of which operation ran, when, and any error returned, including the Intuit transaction identifier (intuit_tid) needed to investigate API problems. Logs are retained for up to 30 days and are then deleted. They are not used to reconstruct the ledger.

10. Disconnecting

The connection can be ended at any time, by either route:

• In QuickBooks Online: Settings → Apps → i-LandGroup App → Disconnect.
• On the App itself: mcp.i-landgroup.com/disconnect.

On disconnection the stored tokens are revoked with Intuit and deleted from our server immediately, and the App loses all access to the company. Because no copy of the accounting records is kept, there is no further accounting data for us to delete. Operational logs age out under the 30-day period above.

Part D — Sharing, security, retention and your rights

11. Who we share data with

We do not sell, rent, license or trade personal or business data, and we do not use it for advertising or for profiling individuals. We disclose it only to the following categories of recipient:

Accounting data obtained from Intuit is not made available to anyone other than the company that owns it and the processors listed above, each of which acts on our instructions for the purposes stated in this policy.

12. Security

• All network traffic to our services is encrypted in transit using TLS 1.2 or higher.
• Access to the App requires authentication. No endpoint that can reach QuickBooks data is available anonymously or publicly.
• The App runs in an isolated container on a firewalled server. API credentials and tokens are held outside the application image, restricted to the service account under which the App runs, and are never written to client-side code, browser storage or public logs.
• Authorization to QuickBooks uses Intuit's OAuth 2.0 flow. We do not see or hold QuickBooks sign-in credentials, and refresh tokens are rotated on use.
• Errors and access events are logged so that faults can be traced and abnormal access identified.
• Access is granted only to personnel who require it for their role, and is withdrawn when it is no longer needed.

No system can be guaranteed absolutely secure. If a breach affecting personal data occurs, we will notify affected individuals and the competent supervisory authority where the law requires it, within the applicable time limits.

13. International transfers

We operate between Türkiye, Senegal and the European Union, and some of our providers are located in the United States. Where personal data moves between these jurisdictions, we rely on the safeguards available under applicable law, including Standard Contractual Clauses and the transfer mechanisms offered by the providers concerned.

14. Your rights

Subject to applicable law, you may request access to the personal data we hold about you, ask us to correct or erase it, object to or ask us to restrict its processing, and ask for a copy in portable form. You may withdraw consent where processing rests on consent.

Where personal data appears inside accounting records — for example a named contact at a customer or supplier — the record is held in QuickBooks Online and any correction or erasure is carried out there.

Write to info@i-landgroup.com and we will respond within the period the applicable law allows. You also have the right to complain to your local data protection authority.

15. Children

Our services are directed to businesses. They are not intended for children, and we do not knowingly collect the personal data of children.

16. Changes to this policy

We may update this policy to reflect changes in our services or in applicable law. The current version is always published at this address with its effective date. Where a change materially affects how data is shared, we will make that clear before it takes effect.

17. Contact

info@i-landgroup.com