Privacy Policy

Sirah Atlas respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store and protect your personal information when you use our platform.

This policy is drawn up in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy legislation.

Sirah Atlas is the data controller for the processing of your personal data.

We collect the following categories of personal data:

2.1 Account Data

• •Username
• •Email address
• •Password (stored encrypted)
• •Account type (free/premium)

2.2 Subscription Data

• •Subscription status and type
• •Payment history
• •Billing information (via Paddle)

2.3 Usage Data

• •Login activity
• •Pages visited and content accessed
• •Usage duration and frequency
• •Device and browser information

2.4 Technical Data

• •IP address
• •Browser type and version
• •Operating system
• •Session information

We process your personal data for the following purposes:

3.1 Service Provision

• •Creating and managing your account
• •Providing access to our services
• •Processing subscriptions
• •Customer service and support

3.2 Payment Processing

• •Processing payments via Paddle
• •Tracking subscription status
• •Billing and accounting

3.3 Service Improvement

• •Analyzing usage patterns
• •Improving user experience
• •Developing new features

3.4 Legal Obligations

• •Complying with legal obligations
• •Preventing fraud and abuse
• •Protecting our rights and property

We process your personal data based on the following legal grounds:

• •Contract performance: For providing our services and managing your account
• •Legitimate interest: For improving our services and preventing abuse
• •Legal obligation: For complying with tax and other legal obligations
• •Consent: For marketing communications (if applicable)

We only share your personal data in the following cases:

5.1 Service Providers

• •Paddle: For payment processing and subscription management
• •Hosting providers: For hosting our website and databases
• •Email services: For sending transactional emails

5.2 Legal Requirements

We may share your data when legally required or to protect our rights.

We never sell, rent or share your personal data for commercial purposes with third parties.

We do not retain your personal data longer than necessary:

• •Account data: As long as your account is active, plus 1 year after deactivation
• •Payment data: 7 years in accordance with tax legislation
• •Usage data: Maximum 2 years for analytical purposes
• •Technical logs: Maximum 6 months

Under the GDPR, you have the following rights:

7.1 Right to access

You have the right to know what personal data we process about you.

7.2 Right to rectification

You can have incorrect or incomplete data corrected.

7.3 Right to be forgotten

You can request deletion of your personal data.

7.4 Right to restriction

You can have the processing of your data restricted.

7.5 Right to data portability

You can request your data in a structured format.

7.6 Right to object

You can object to certain processing activities.

To exercise these rights, you can contact us at [email protected]

We take the security of your personal data seriously and have implemented appropriate technical and organizational measures:

• •Encryption of sensitive data
• •Secure HTTPS connections
• •Regular security updates
• •Access control and authorization
• •Regular backups
• •Monitoring of suspicious activities

We use cookies and similar technologies to:

• •Ensure proper functioning of the Platform
• •Remember your preferences and settings
• •Analyze usage for improvement purposes
• •Maintain your login session

You can manage your cookie preferences through your browser settings.

10.1 Page views

In addition to cookies, we run our own first-party page-view logging to see which content is popular. This works as follows:

• •We record which page was viewed and when, so we can see which content is popular.
• •If you have given consent for the Statistics category, the view is linked to a session identifier and, when you are signed in, to your account.
• •Without that consent, the view is still recorded for aggregate statistics, but without a session identifier, without any link to an account, and without setting a cookie. What remains is the page visited, the country derived from your network connection, and the domain of the website that referred you.
• •We never store IP addresses: the country is determined at request time by our CDN provider (Cloudflare), and only the two-letter country code is kept.
• •Detailed page-view records are deleted after 90 days; only anonymised daily totals per page are kept for longer.
• •At registration we additionally record the country, the domain of the referring website, and the first page visited, so we understand how visitors find the platform.

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). In such cases, we ensure that adequate protection measures are in place.

We may update this privacy policy from time to time. Important changes will be announced at least 30 days in advance via our website or by email.

If you have complaints about our data processing, you can:

For questions about this privacy policy or our data processing practices: