Ontero

Privacy Policy

*ONTERO PRIVACY POLICY*

*Effective from: 21 October 2026*

1. Data controller

*The controller of personal data processed in connection with the use of Ontero is:*

*Ask Me Aleksander Melech* *ul. 1 Maja 54* *96-300 Żyrardów* *Poland* *Tax ID (NIP): 8381856095* *REGON: 368389429*

*Contact for personal data matters:*

*hello@ontero.app*

*This Privacy Policy sets out the rules for processing personal data in connection with the use of the Ontero website, the Ontero application, and contact with the Controller.*

2. What data may we process?

*The scope of the data we process depends on how you use Ontero.*

*We may process, in particular:*

Data provided when you contact us

  • *first and last name,*
  • *e-mail address,*
  • *phone number,*
  • *company name,*
  • *the content of your message,*
  • *other information you voluntarily provide in the course of contacting us.*

Account-related data

*If you use the Ontero application, we may process:*

  • *first and last name,*
  • *e-mail address or login,*
  • *phone number,*
  • *company name,*
  • *Tax ID (NIP),*
  • *information about the account and the organisation,*
  • *information related to your use of the account.*

*Passwords are stored in a secured form and are not stored by the Controller in clear text.*

Technical data

*When you use the website or the application, technical information relating to your device and connection may be processed automatically, in particular:*

  • *IP address,*
  • *date and time of connection,*
  • *information about the browser and device,*
  • *operating system,*
  • *information about the request made to the server,*
  • *information about errors and security-related events.*

*This data is used primarily to ensure that Ontero operates correctly, securely, and reliably.*

Data provided in connection with support

*If you contact technical support, we may process the content of your ticket, correspondence, and any attachments you send, including screenshots.*

*The scope of this data depends on the information provided by the user.*

*Please include in your tickets only the information necessary to resolve the problem.*

3. Data entered into Ontero by the Client

*Ontero is a system intended for use in a business or professional activity.*

*The Client may enter into the System data of its employees, contractors, customers, or other persons, to the extent related to the Client’s business activity.*

*In such a case, the Client is, as a rule, the controller of that data, and Ontero processes it on the Client’s behalf to the extent necessary to provide the service.*

*The detailed rules for such processing are set out in a separate Data Processing Agreement (DPA).*

*The Controller does not use data entered by the Client for its own advertising purposes or to train artificial intelligence models.*

4. For what purposes do we process data?

*We process personal data in particular in order to:*

  • *create and maintain a user account;*
  • *provide Ontero services;*
  • *serve Clients and provide technical support;*
  • *communicate with you in connection with your use of the System;*
  • *handle payments and billing;*
  • *ensure the security and proper operation of the System;*
  • *detect abuse and prevent unauthorised access;*
  • *comply with legal obligations;*
  • *establish, pursue, or defend against claims;*
  • *carry out marketing communications, if you give the required consent.*

5. Legal bases for processing

*Depending on the purpose of processing, the legal basis may be:*

  • *Article 6(1)(a) GDPR – consent;*
  • *Article 6(1)(b) GDPR – performance of a contract or taking steps prior to entering into a contract;*
  • *Article 6(1)(c) GDPR – compliance with a legal obligation;*
  • *Article 6(1)(f) GDPR – the legitimate interests of the Controller, in particular those relating to security, operation of the System, communication with users, and the establishment, pursuit, or defence of claims.*

6. Marketing communications

*We may contact you about matters related to your use of Ontero, including your account, the operation of the System, security, payments, and changes to our services.*

*We send marketing information about Ontero products and services in accordance with applicable law.*

*Where consent is required to send such information, that consent is:*

  • *voluntary,*
  • *independent of acceptance of the Terms of Service,*
  • *not a condition of using Ontero,*
  • *capable of being withdrawn at any time.*

*Ontero does not sell user data to advertisers and does not use user data to display third-party advertisements.*

7. Who may we share data with?

*In operating Ontero, we may use external providers of IT infrastructure, hosting, databases, e-mail, security, and other services necessary to maintain and develop the System.*

*These entities may process data on our behalf only to the extent necessary to provide the services entrusted to them and on the basis of appropriate data protection arrangements.*

*We may also disclose data to entities authorised to receive it under the law.*

*We do not sell personal data.*

8. Transfers of data outside the European Economic Area

*In connection with the use of our providers’ services, data may in some cases be transferred outside the European Economic Area.*

*Where such a transfer takes place, we apply the appropriate mechanisms provided for by the GDPR, in particular standard contractual clauses or other lawful grounds for the transfer of data.*

9. How long do we keep data?

*We keep data for the period necessary to achieve the purpose for which it was collected.*

*In particular:*

  • *account and organisation data – for the period of use of the service and, as a rule, for up to 2 years after you stop using Ontero;*
  • *billing-related data – for the period required by law;*
  • *correspondence and support tickets – as a rule, for up to 2 years from the closure of the ticket;*
  • *technical data and logs – for a period determined by security and diagnostic needs and by the configuration of the infrastructure used.*

*Data may be kept for longer where this is required by law or is necessary to establish, pursue, or defend claims.*

10. Backups

*To ensure the security and continuity of Ontero’s operation, we use automatic backups.*

*Backups may contain data held in the System.*

*Deleting data from the active System does not necessarily mean its immediate deletion from existing backups. Backups are deleted or overwritten in accordance with the retention cycle of the infrastructure used.*

11. Data security

*We apply appropriate technical and organisational measures designed to protect data against unauthorised access, loss, destruction, or unauthorised alteration.*

*In particular, we use mechanisms for securing transmission, authentication, access control, backups, and monitoring of the security of the System.*

*Despite the use of appropriate safeguards, there is no IT system that provides absolute data security.*

12. Your rights

*If you are a data subject, in the cases provided for by law you may have the right to:*

  • *access your data;*
  • *rectify your data;*
  • *erase your data;*
  • *restrict its processing;*
  • *data portability;*
  • *object to processing;*
  • *withdraw consent you have given.*

*Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.*

*Where data is processed by Ontero on behalf of a Client, the Client is the controller of that data. In such a case, a request concerning that data should, as a rule, be addressed to the Client.*

13. Complaint to a supervisory authority

*If you believe that we are processing your data in breach of the law, you can contact us:*

*hello@ontero.app*

*You also have the right to lodge a complaint with the competent supervisory authority, in particular:*

*the President of the Personal Data Protection Office (UODO) (Prezes Urzędu Ochrony Danych Osobowych).*

14. Cookies and similar technologies

*Ontero currently uses primarily technical cookies that are necessary for the application to work correctly and to maintain the user’s session.*

*In the Ontero application, we do not currently use analytics or advertising tools to track users.*

*Detailed information about the cookies we use is set out in the Cookie Policy.*

15. Automated decision-making

*Ontero does not currently subject users to automated decision-making that produces legal effects concerning them or similarly significantly affects them.*

16. Data of minors

*Ontero is a service intended for use in connection with a business or professional activity and is not directed at children.*

*If, in the course of its business, a Client enters data of minors into the System, the Client is responsible for ensuring that such processing complies with applicable law.*

17. Changes to this Privacy Policy

*This Privacy Policy may be updated, in particular in the event of:*

  • *changes in the law;*
  • *changes to Ontero’s functionality;*
  • *changes in the way data is processed;*
  • *changes in the services or providers used.*

*The current version of the Policy is available on the Ontero website.*

*In the case of material changes, we may inform users in an appropriate manner.*

18. Contact

*For matters relating to the protection of personal data, you can contact the Controller:*

*Ask Me Aleksander Melech* *ul. 1 Maja 54* *96-300 Żyrardów* *Poland*

*Tax ID (NIP): 8381856095* *REGON: 368389429*

*E-mail: hello@ontero.app*

Version 2026-10-21 · Effective 10/21/2026