Privacy policy

Account data.Email address, optional name, language and currency preferences, password hash. We never collect a physical address because we don’t ship anything physical.

Usage data.Which plans you’ve bought, when you activated them, coarse aggregate data consumption (not traffic content). Customer-support tickets. Session information (IP, user-agent) kept for 30 days for abuse prevention.

• Deliver your plan (legal basis: contract).
• Authenticate you and prevent fraud (legal basis: legitimate interest).
• Send you product updates you opted into (legal basis: consent).
• Comply with tax and accounting law (legal basis: legal obligation).

• Sell your data. Not to brokers, not to partners, not as “anonymous”.
• Read the traffic your data plan carries.
• Use dark patterns to make data-export or deletion harder.

You can export everything we have about you as JSON and PDF from your profile page. You can delete your account the same way. There is a 30-day grace period; deletion is fully reversible during that window and permanent afterward.

Questions: support@siru.world. Complaints: your national data-protection authority.