Privacy Policy
1. Data Controller
Your personal data may be processed by Onay360, acting as the data controller, within the scope described below in relation to the SMS verification services available at https://onay360.com.
2. Purpose of Processing Personal Data
Within the scope of our SMS verification services, your personal data is processed for the following purposes:
Provision of SMS verification services.
Creation, management, and security of user accounts.
Processing of payments and maintenance of financial records.
Management of customer relations and handling user requests.
Provision of technical support services.
Fulfillment of legal obligations.
Improvement of service quality and system development.
3. Categories of Processed Personal Data
Within the scope of our SMS verification services, the following categories of personal data are processed:
Identity Data
Basic user information such as name, surname, and email address.
Contact Data
Email address and information enabling communication with the user.
Customer Transaction Data
SMS verification transactions, transaction history, payment details, and invoice records.
SMS Content Data
SMS verification codes and message content (processed temporarily).
4. Method and Legal Basis for Collecting Personal Data
Your personal data is collected through the following methods:
Membership processes carried out via the website.
Data generated during the use of the SMS verification service.
Information obtained during payment and billing processes.
User support requests and contact forms.
Data obtained through cookies and similar technologies.
This data is processed based on the legal grounds specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698.
5. Transfer of Personal Data
Your personal data may be transferred to the following parties within the scope of service requirements and legal obligations:
SMS operators and communication service providers.
Payment institutions and financial service providers.
Legal authorities (courts, prosecutors, and authorized public institutions).
Technical infrastructure providers (hosting, security, and software services).
6. Processing of SMS Data
Within the scope of the SMS verification service:
SMS verification codes are processed and stored temporarily.
SMS content is used solely for verification purposes.
After the transaction is completed, SMS data is securely deleted.
SMS history may be retained for a limited period solely for technical requirements and system security.
7. Data Security
The following technical and administrative measures are implemented to ensure the security of your personal data:
Secure data transmission using SSL encryption technology.
Use of secure and up-to-date server infrastructure.
Regular system updates and security checks.
Access control, authorization, and logging mechanisms.
Data backup and disaster recovery systems.
8. Rights of the Data Subject
Pursuant to Article 11 of the Personal Data Protection Law No. 6698, data subjects have the following rights:
To learn whether their personal data is being processed.
To request information if their personal data has been processed.
To learn the purpose of processing and whether it is used in accordance with its purpose.
To know the third parties to whom personal data is transferred domestically or abroad.
To request correction of incomplete or incorrectly processed data.
To request deletion or destruction of personal data.
To object to the analysis of processed data through automated systems.
9. Cookies
Cookies are used on our website to improve user experience:
Mandatory Cookies
Required for the functionality of the site and the provision of basic services.
Analytical Cookies
Provide statistics regarding site usage.
Functional Cookies
Enhance user experience by remembering user preferences.
10. Data Retention Periods
Your personal data is retained for the following periods:
Membership information: As long as the user account remains active.
SMS verification data: Up to a maximum of 24 hours after the transaction is completed.
Payment and invoice information: For the periods required by applicable legislation.
Technical log records: Up to 1 year.
11. Contact
You can use the following contact information to exercise your rights under KVKK and submit your requests:
Email: [email protected]
Website: https://onay360.com
12. Policy Changes
Onay360 reserves the right to amend this privacy policy without prior notice. The updated policy shall become effective as of the date it is published on the website.
Â
Last updated:Â 27.03.2026