Information you provide
Contact, seller and property-inquiry forms can collect name, email, optional telephone/WhatsApp details, message, preferred language/contact method and the property or page connected to the request. Viewing requests also collect the requested date/time. Signed-in users may store a profile telephone number and upload a profile image.
Accounts and authentication
Customer and administrator sign-in currently uses the ChatGPT/OpenAI authentication supplied by the hosting platform. MUJ receives the authenticated email address and available display name and stores an MUJ account record with preferences and last-login time. MUJ does not operate a separate password-login flow and the current application does not use the nullable legacy password field.
Account activity
For signed-in users, MUJ can store synchronized favorites, saved-search filters, viewing requests, inquiry history and language/currency preferences. Anonymous favorites stay only in that browser unless the user later chooses account synchronization.
Security and technical information
The application uses an IP-derived SHA-256 rate-limit key to prevent abuse. The raw IP address is not stored in MUJ's application database by this control; stale rate-limit keys are removed after they are no longer operationally needed. Hosting/network providers may separately process request, device and security logs under their own infrastructure arrangements.
Optional first-party analytics
No advertising pixel or third-party analytics SDK is configured. MUJ's own conversion measurement remains off unless the visitor allows analytics. When allowed, the application stores event type, page path, language, currency and narrowly limited event metadata; normal tracking code does not intentionally send names, email addresses or telephone numbers.
Storage and backups
Structured records are stored in the site's Cloudflare D1 database and uploaded media in its private Cloudflare R2 storage as provisioned through ChatGPT/OpenAI Sites. Encrypted recovery copies include database records and protected media copies. Current technical recovery retention can keep selected encrypted recovery points for up to 12 months; legal approval of this retention and deletion treatment is still required.
Service providers and external destinations
The current technical architecture uses ChatGPT/OpenAI Sites and Cloudflare infrastructure. Maps load OpenStreetMap tiles in the visitor's browser. Istanbul location suggestions may use TurkiyeAPI from the server. Some editorial images are served by Wikimedia Commons or Unsplash. Google Maps, WhatsApp, Instagram, Facebook and TikTok are opened only when a visitor chooses their external link. These providers may receive network/request information when their resources or services are used.
Retention and deletion
New website inquiries and viewing requests receive a provisional operational review date 24 months after collection. This is not presented as a legally approved destruction period and does not trigger automatic deletion. At review, MUJ must delete, anonymize or retain the record only after checking applicable obligations, disputes and legal holds. The final schedule, periodic deletion process and backup-deletion treatment require Turkish legal approval before launch.
Your privacy requests
Signed-in users can start access, correction, deletion-review and marketing-withdrawal requests from Account. Requests are queued for administrator review and do not automatically disclose or delete data. Identity and legal-retention checks may be necessary. People without an account should use the verified Contact channel until the final KVKK application address/method is approved.
Promotional communications
The public website does not currently collect an active promotional-marketing opt-in and does not include a marketing-delivery system. Service replies to an inquiry remain separate from promotional marketing. Any future commercial electronic messaging must be enabled only after the applicable consent, withdrawal and İYS process has been confirmed.
MUJ and RookZ Doruk
MUJ Real Estate is the primary website brand and Ahmed Mujahed is presented as the consultant. RookZ Doruk is described as a professional affiliation. This site does not yet state that RookZ Doruk is MUJ's data controller, processor or joint controller because that legal relationship has not been confirmed.
Official references
KVKK · Aydınlatma Tebliği · KVKK · Yurt Dışına Aktarım · KVKK · Silme / Yok Etme / Anonimleştirme
Technical/legal-content review: 10 August 2026 · Contact MUJ