This is an English translation for your convenience. In case of any discrepancy, the Turkish original governs.

1. Data Controller

This privacy policy applies to the Siriplan platform operated by BY Sirius Group Ai & Technology Co Ltd. (the "Company", "we", "us"). The Company acts as the data controller under Law No. 6698 on the Protection of Personal Data (KVKK).

Website: bysirius.com | Email: privacy@bysirius.com

2. Personal Data We Collect

The following data may be processed while using the platform:

First name, last name, email address, and phone number
Business name, address, and industry information
Appointment history and customer records
Payment and billing information (card details are not stored; processed by Stripe)
IP address, browser type, and usage statistics

3. Purposes of Processing

Providing and managing platform services
Processing subscriptions and payments
Providing customer support and technical assistance
Security, fraud prevention, and fulfilling legal obligations
Product development and improving service quality

4. Data Security

Your data is protected with SSL/TLS encryption. Our server infrastructure complies with industry-standard security protocols. Your payment information is never stored on our servers; all payment transactions are processed through PCI-DSS compliant Stripe infrastructure.

5. Third-Party Sharing

Your personal data is not shared with third parties unless required to provide the service. Sharing only occurs with payment (Stripe), notification (WhatsApp/SMS), and infrastructure service providers under data processing agreements.

6. Your Rights

Under Article 11 of KVKK, you have the following rights:

Learn whether your personal data is being processed
Request access to and a copy of your data
Request correction of inaccurate or incomplete data
Request deletion or destruction of your data
Object to the processing of your data

For your requests: privacy@bysirius.com

7. Account Deletion and Data Retention

As a business owner and individual user, you can request to delete your account and all associated data directly from within the app/web panel via Settings > Delete My Account or by sending a request to privacy@bysirius.com. Your request will be fulfilled promptly in accordance with store policies and data privacy standards.

Your business's contact details and the personal identifiers in your customer records (name, phone, email) are anonymized. Financial records such as appointment and revenue history may be retained in anonymized, aggregate form for the legally required retention period under Turkish Commercial Code.

8. Policy Changes

Changes to this policy will be announced through the platform. Continuing to use the platform after changes take effect means you accept the updated policy.

Privacy Policy