How Oltara handles your data
Last updated 8 November 2026
Who we are
Oltara (oltara.app) is run by PCIT Service ApS, Denmark. Contact: [email protected].
Two roles
Controller: for data about you as a user of Oltara (your account, your business, your plan) and for visits to our website.
Processor: for the data your business puts into Oltara about its own customers (customers, quotes, invoices, requests, photos). Your business is the controller of that data, and we only process it to provide the service to you.
What data
- Account: name, email, password (hashed), language.
- Business: name, company number, address, bank and payment details for invoices, logo.
- Your customers and documents: customer details, quotes, invoices, payments, subscriptions, requests from your website and social media, photos of the work.
- Facebook/Instagram: if you connect a Facebook Page we store the Page id, name and an access token so new leads from your lead forms can be fetched. We store nothing about your personal Facebook account.
- Visits and security: visit statistics (country, page, referrer, IP address), deleted automatically after 90 days. For requests the IP address is only stored hashed (spam protection). When a customer accepts a quote, their name and IP address are kept as proof.
Why
To provide the service (contract), to meet bookkeeping law (invoices are kept for 5 years), to protect against abuse and spam (legitimate interest) and to send important messages about your account.
Who gets access
We never sell data. Sub-processors: server hosting at Contabo GmbH (Germany, EU), Cloudflare (security and delivery), Mastercard/Aiia (if you use pay by bank), Meta (if you connect a Facebook Page) and Google Fonts (fonts). We send email from our own server.
Retention and deletion
- Invoices and bookkeeping data are kept for 5 years, as the law requires.
- You can delete requests marked lost or spam at any time.
- If you disconnect a Facebook Page, we delete its access token at once.
- Accounts that are never activated are deleted automatically.
Cookies
We only use a necessary session cookie for login and security. No advertising or tracking cookies.
Your rights
You can access, correct, export or delete your data and object to processing. Email [email protected]. If you are a customer of a business that uses Oltara, contact that business – we help them respond. You can complain to the Danish Data Protection Agency (datatilsynet.dk).
Deleting Facebook data
To have data we received from Facebook deleted, disconnect the Page under Requests → Get requests from your website, or email us. Meta can also send us a deletion request automatically.