Privacy Policy

Operator / Controller: Ferhat Canberk Döğer (trading as Kortex Bilişim)
Last updated: 27.09.2026

Who operates TaskTraQ

TaskTraQ is provided by Ferhat Canberk Döğer, trading as Kortex Bilişim, and offers service desk, project management, customer portal, team communication, knowledge base and related work-management functionality for businesses and professional teams.

For TaskTraQ's own account administration, security, service operation and communications, the controller is:

Ferhat Canberk Döğer (Kortex Bilişim)
Email: [email protected]
Phone: +90 850 840 96 04

Where a business customer submits personal data concerning its employees, customers or other individuals to TaskTraQ, that customer may act as the controller and TaskTraQ may act as its processor.

Information we may process

Depending on how TaskTraQ is used, we may process:

• name,
• email address,
• account and profile information,
• user and organisation identifiers,
• organisation membership and permissions,
• support requests and ticket content,
• projects, tasks, comments and status information,
• team messages,
• customer portal content,
• knowledge-base content,
• uploaded files and documents,
• communications with support,
• IP addresses and connection data,
• authentication and security logs,
• browser, operating system and application version,
• Firebase installation identifiers and push-notification tokens,
• other technical information necessary to operate and secure the service.

Users may enter additional personal information in free-form fields. The content submitted through such fields is determined by the user or customer organisation.

Why we use information

We may process information to:

• create and manage accounts,
• authenticate users,
• provide TaskTraQ functionality,
• operate service-desk and ticket workflows,
• manage projects and tasks,
• manage organisations, memberships and permissions,
• provide customer portals and knowledge bases,
• enable team communication,
• deliver notifications,
• provide support,
• prevent abuse and unauthorised access,
• investigate security incidents,
• maintain availability and performance,
• troubleshoot technical problems,
• comply with applicable law,
• develop and improve TaskTraQ.

Legal bases

Depending on the processing activity and applicable law, processing may be based on:

• performance of or steps necessary to enter into a contract,
• compliance with legal obligations,
• establishment, exercise or defence of legal claims,
• legitimate interests that do not override the rights and freedoms of individuals,
• consent where consent is legally required.

Hosting

TaskTraQ's primary application servers and application database are hosted on infrastructure located in Türkiye and managed by the TaskTraQ operator.

Some supporting service providers use international infrastructure and may process limited technical information outside Türkiye.

Service providers

Cloudflare

TaskTraQ uses Cloudflare for DNS, network security, traffic management and abuse prevention.

Cloudflare may process IP addresses, connection data and security-related technical information.

Google Firebase Cloud Messaging

Firebase Cloud Messaging is used to deliver push notifications to Android devices.

Google/Firebase may process Firebase installation identifiers, application version information, push tokens and technical information necessary to deliver notifications.

Apple Push Notification Service

Apple Push Notification Service is used to deliver notifications to iOS devices.

Device push tokens and technical delivery information may pass through Apple infrastructure.

TaskTraQ aims to avoid including unnecessary sensitive personal information in push-notification payloads.

Cloudflare Turnstile is used on the sign-up and sign-in forms to block automated abuse. It sets no cookies and does not profile visitors across sites.

International transfers

Although TaskTraQ's primary application database is located in Türkiye, use of Cloudflare, Google/Firebase and Apple may result in limited technical or notification-related personal data being processed internationally.

Where required, TaskTraQ uses or seeks to use appropriate transfer mechanisms and safeguards required by applicable data-protection law.

Separation between customer organisations

TaskTraQ is a multi-tenant system.

Access is restricted through user membership, organisation membership and authorisation controls. Application-level controls are designed to prevent users belonging to one customer organisation from accessing another customer's information.

Security

Depending on the relevant part of the service, security measures may include:

• HTTPS encryption in transit,
• secure password hashing,
• organisation and membership-based authorisation,
• rotating refresh-token mechanisms,
• hashed API keys,
• HMAC-signed webhooks,
• membership and permission checks for files,
• tenant-level access controls,
• security and system logging.

No internet-based service can guarantee absolute security.

Retention and deletion

Information may be retained for:

• the duration of an active account or customer relationship,
• as long as necessary to provide the service,
• periods required by applicable law,
• reasonable periods necessary for security or dispute resolution.

Deleted information may remain temporarily in technical backups until the relevant backup cycle expires.

TaskTraQ aims to delete or anonymise information when it is no longer reasonably necessary and no legal retention requirement applies.

Cookies and similar technologies

Current use of cookies and similar technologies is described in the TaskTraQ Cookie and Similar Technologies Policy.

TaskTraQ uses Google Analytics on its public marketing website (tasktraq.app) to understand which pages are useful. It runs only after you accept analytics cookies, is not used for advertising, and is not present in the TaskTraQ application itself. Google acts as a processor for this and may process the data internationally. You can change or withdraw your choice at any time using the Cookie settings link in the site footer.

Google reCAPTCHA is not currently enabled. If it is enabled in the future, this Policy and the Cookie Policy will be updated.

Your rights

Depending on applicable law, you may have rights to:

• request access to personal data,
• request correction,
• request deletion,
• restrict certain processing,
• receive portable data where applicable,
• object to certain processing,
• withdraw consent where processing is based on consent,
• exercise applicable rights relating to automated decision-making.

Requests may be sent to [email protected]. See also Privacy Choices and Account Deletion, the Data Processing Addendum and the KVKK Information Notice.

Children

TaskTraQ is designed for businesses and professional teams and is not directed to children.

Changes

We may update this Policy when TaskTraQ, its infrastructure or applicable legal requirements change.