01 · Data we collect
Account data.Email address, optional name, language and currency preferences, password hash. We never collect a physical address because we don’t ship anything physical.
Usage data.Which plans you’ve bought, when you activated them, coarse aggregate data consumption (not traffic content). Customer-support tickets. Session information (IP, user-agent) kept for 30 days for abuse prevention.
02 · Why we collect it
- Deliver your plan (legal basis: contract).
- Authenticate you and prevent fraud (legal basis: legitimate interest).
- Send you product updates you opted into (legal basis: consent).
- Comply with tax and accounting law (legal basis: legal obligation).
03 · What we never do
- Sell your data. Not to brokers, not to partners, not as “anonymous”.
- Read the traffic your data plan carries.
- Use dark patterns to make data-export or deletion harder.
04 · Your rights
You can export everything we have about you as JSON and PDF from your profile page. You can delete your account the same way. There is a 30-day grace period; deletion is fully reversible during that window and permanent afterward.
Questions: support@siru.world. Complaints: your national data-protection authority.