Privacy Policy

Last updated: 01 November 2026

Draft placeholder. [Company legal name / address — to be completed] · [Registration number, governing law and contact e-mail — to be completed]. This text is a starting point and must be reviewed by a lawyer before launch.

1. Roles

For the business data an organisation stores in SiraNexa (its employees, reports, documents, finance records and so on) the organisation is the data controller and SiraNexa, operated by [Company legal name / address — to be completed], is its processor. For account, billing and website data of our customers' admins, SiraNexa is the controller.

2. Data we process

Account data: names, work e-mail addresses, usernames, roles and the organisation's details given at sign-up.
Customer content: whatever the organisation and its users enter or upload.
Billing data: plan, number of active employees, invoices and payment status. Card details are handled by our payment provider, Stripe, and are never stored by SiraNexa.
Security and usage logs: sign-in events, IP addresses, device and browser type, kept to protect the service.

3. Why we process it

To provide and secure the service, to bill subscriptions, to support customers, to meet legal obligations and, for website visitors, to answer enquiries. We do not sell personal data and do not use customer content for advertising.

4. Sub-processors

Hosting provider [to be completed], Stripe (payments) and an e-mail delivery provider [to be completed]. A current list is available on request.

5. Retention

Customer content is kept for the life of the subscription and deleted after the post-termination export window. Billing records are kept as long as tax law requires. Security logs are kept for a limited period.

6. Security

Each organisation's data is logically separated; access is role-based and logged; connections are encrypted in transit.

7. Your rights

Depending on where you live you may have rights of access, correction, deletion, restriction, objection and portability. Employees of a customer should first contact their own organisation; others can contact us at [contact e-mail — to be completed].

8. International transfers

[Hosting location and transfer safeguards — to be completed].