← Back to site

Privacy policy

Last updated: August 1, 2026

1. Identity of the controller

The data controller is:

  • Legal name: SIRATECK
  • Address: 18 avenue Bruno Bancher, 93270, Sevran, France
  • Privacy / DPO contact: equipe@sirateck.com

2. Scope and GDPR roles

  • SIRATECK acts as controller for account management, security, billing, support and the contractual relationship;

  • SIRATECK acts as processor for business data imported and processed by the Customer in Newsr Studio.

3. Categories of data processed

  • identification data (first name, last name, professional email, role);
  • account and authentication data;
  • usage data and technical logs;
  • editorial data and metadata;
  • distribution / outreach / CRM data entered by the Customer;

  • contractual and billing data (payer identity, billing address, transaction status, Stripe identifiers, masked payment-method details such as the last 4 digits — SIRATECK does not store full card numbers).

4. Purposes and legal bases

  • performance of the contract (GDPR Article 6.1.b);

  • legitimate interests (GDPR Article 6.1.f), including security, improvement and fraud prevention;

  • compliance with legal obligations (GDPR Article 6.1.c);
  • consent (GDPR Article 6.1.a) where required.

5. Recipients of the data

  • authorized SIRATECK staff;
  • technical processors strictly necessary for the service;
  • authorities legally entitled to receive them, where applicable.

List of processors / categories: Cloudflare, Inc.; Convex, Inc.; Stripe, Inc. / Stripe Payments Europe, Ltd. (payment and billing); Umami Software (anonymized audience measurement on the marketing site). Hosting and payment details are in the Legal notice. Stripe privacy policy: https://stripe.com/privacy. Umami privacy policy: https://umami.is/privacy.

6. Transfers outside the European Union

Where transfers outside the EU are necessary, SIRATECK implements appropriate safeguards (standard contractual clauses and complementary measures), in accordance with the GDPR.

Primary transfer mechanism: European Commission standard contractual clauses (SCCs) and complementary measures where applicable.

7. Retention periods

  • user account: duration of the contractual relationship then legal archiving;
  • security logs: maximum 90 days;
  • billing data: 10 years;
  • Customer business data: according to the contract, Customer instructions and the reversibility policy.

8. Data subject rights

Every data subject has the following rights:

  • access;
  • rectification;
  • erasure;
  • restriction;
  • objection;
  • portability;
  • withdrawal of consent (where applicable).

Requests should be sent to: equipe@sirateck.com.

A complaint may be lodged with the CNIL (French data protection authority).

9. Cookies and trackers

Newsr Studio uses cookies strictly necessary for the service to work and may use audience measurement or convenience cookies depending on settings.

The marketing site uses Umami, a cookieless audience-measurement tool without persistent identifiers, to produce aggregate statistics (page views, traffic sources, anonymized conversion events). No nominative data (email, name, company) is sent to Umami.

Cookie and tracker details are described at: /en/legal/cookies.

10. Security

SIRATECK implements appropriate technical and organizational measures, including:

  • access control;
  • logging;
  • encryption in transit;
  • backups;
  • incident management.

11. Outreach / social distribution data

The Customer warrants that it has an adequate legal basis for the processing it carries out via Newsr Studio (prospecting, distribution, tracking), and undertakes to meet information and rights management obligations.

12. Changes to this policy

This policy may be amended to reflect legal, technical or contractual developments.

In the event of a material change, users will be informed by an appropriate means.