Legal

Privacy Notice (KVKK)

This notice explains how Ontra processes your personal data, for what purposes, and how you can exercise your rights under Turkish data protection law (KVKK).

Updated

Last updated: September 14, 2026

Contents

9 sections

01

Data Controller

Under Turkey’s Personal Data Protection Law (“KVKK”), Ontra is the data controller. Website: https://ontra.tr — Panel: https://panel.ontra.tr — Contact: destek@ontra.tr — Turkey.

02

Personal Data We Process

Within the scope of the service, we may process data in the following categories:

  • Identity and contact: name, email, phone, company / workspace name
  • Account and usage: sessions, roles, project and folder permissions, preferences, and support records
  • Work data: tasks, projects, sprints, roadmaps, documents, comments, and team activity records
  • Technical data: IP address, browser, device, logs, and security records
  • Billing data: invoice details, tax information, and payment references
03

Processing Purposes

Personal data is processed for the following purposes:

  • Account creation, authentication, and delivery of the workspace service
  • Running task, project, document, sprint, and team permission modules
  • Support, security, fraud prevention, and system improvement
  • Contract performance, billing, and legal compliance
  • Product announcements and marketing communications, where you have given explicit consent
04

Legal Bases

Processing is based on contract performance, legal obligations, legitimate interests, and explicit consent where required under KVKK Articles 5 and 6.

05

Transfers and Hosting

Data may be shared with cloud infrastructure, payment (PayTR), email, and analytics providers only as needed to deliver the service and with appropriate safeguards.

Cross-border transfers comply with KVKK requirements (explicit consent, undertakings, and similar safeguards) where applicable.

06

Retention

Data is retained for as long as required by the processing purpose and applicable limitation / retention rules. After that it is deleted, destroyed, or anonymized.

07

Security

We apply SSL/TLS, access control, workspace-level data isolation, role- and project-based permissions, and regular security reviews.

08

Your Rights under KVKK

Under KVKK Article 11 you may request information about processing, learn whether data is used for its purpose, know third parties it is shared with, request correction or deletion, object, and seek compensation for damages.

Send requests to destek@ontra.tr. We respond within the timelines set by KVKK.

09

Cookies

We may use session, security, and (with your consent) analytics cookies. You can manage cookies in your browser; disabling essential cookies may limit some features.

Other notices

Related legal documents

Support

Need more help?

For questions, write to destek@ontra.tr.

destek@ontra.tr