This is an English translation for your convenience. In case of any discrepancy, the Turkish original governs.

1. Data Controller

This privacy policy applies to the Siriplan platform operated by BY Sirius Group Ai & Technology Co Ltd. (the "Company", "we", "us"). The Company acts as the data controller under Law No. 6698 on the Protection of Personal Data (KVKK).

Website: bysirius.com | Email: privacy@bysirius.com

2. Personal Data We Collect

The following data may be processed while using the platform:

First name, last name, email address, and phone number
Business name, address, and industry information
Appointment history and customer records
Payment and billing information (card details are not stored; processed by Stripe)
IP address, browser type, and usage statistics

3. Purposes of Processing

Providing and managing platform services
Processing subscriptions and payments
Providing customer support and technical assistance
Security, fraud prevention, and fulfilling legal obligations
Product development and improving service quality

4. Data Security

Your data is protected with SSL/TLS encryption. Our server infrastructure complies with industry-standard security protocols. Your payment information is never stored on our servers; all payment transactions are processed through PCI-DSS compliant Stripe infrastructure.

5. Third-Party Sharing

Your personal data may be shared, only to the extent necessary to provide the service and under data processing agreements, with service providers in the following categories: hosting and database infrastructure, application deployment, code repository and version control, email delivery, payments (Stripe) and messaging (WhatsApp/SMS). Some of these providers are located outside Türkiye (in the EU or the US); transfers are made with appropriate safeguards and contractual obligations in accordance with Article 9 of the KVKK. Your data is not sold to third parties or shared for marketing purposes.

6. Your Rights

Under Article 11 of KVKK, you have the following rights:

Learn whether your personal data is being processed
Request access to and a copy of your data
Request correction of inaccurate or incomplete data
Request deletion or destruction of your data
Object to the processing of your data

For your requests: privacy@bysirius.com

7. Account Deletion and Data Retention

As a business owner and individual user, you can request to delete your account and all associated data directly from within the app/web panel via Settings > Delete My Account or by sending a request to privacy@bysirius.com. Your request will be fulfilled promptly in accordance with store policies and data privacy standards.

Your business's contact details and the personal identifiers in your customer records (name, phone, email) are anonymized. Financial records such as appointment and revenue history may be retained in anonymized, aggregate form for the legally required retention period under Turkish Commercial Code.

8. Policy Changes

Changes to this policy will be announced through the platform. Continuing to use the platform after changes take effect means you accept the updated policy.

9. International Users and Applicable Provisions

Siriplan is operated by BY Sirius Group Ai & Technology Co Ltd. The personal data of users accessing from outside Türkiye is also processed for the purposes and by the methods described in this policy. If the data protection law of your country grants you additional rights, you may exercise them by contacting privacy@bysirius.com; requests are assessed within the time and scope required by applicable law.

Privacy Policy