Privacy Policy

Sirius Technology Solutions (“Sirius”, “we”, “us”, or “our”) is a cybersecurity company specializing in dynamic data masking, write protection, and sensitive-data discovery. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website or use the Dynamic Data Masking Framework (the “Platform”). By using our website or the Platform, you agree to this Policy.

1. Who we are

Sirius Technology Solutions is the data controller for personal data processed through our website. For personal data processed within our customers' databases by the Platform, Sirius acts as a data processor on behalf of the customer (the data controller). Questions can be sent to privacy@sirius-technology.com.

2. Information we collect

2.1 Information you provide

• Contact & demo requests — name, email address, and the content of your message when you use our contact form.
• Account data — for the admin portal: username, name, email, and a hashed password.

2.2 Information collected automatically

• Log & usage data — IP address, browser type and version, pages visited, and timestamps.
• Consent fingerprint — when you accept our Privacy Policy and Terms, we record your IP address, user-agent, the document versions you accepted, the time, and a one-way browser fingerprint hash (derived from your user-agent, language, platform, screen, and time zone). This creates a tamper-evident record that consent was given, used solely for security, audit, and legal-compliance purposes.
• Cookies & local storage — we use strictly-necessary local storage to remember that you have accepted our Terms so you are not repeatedly prompted.

3. How we use information

• To operate, maintain, and secure our website and the Platform.
• To respond to enquiries and provide demos or support.
• To record and evidence acceptance of our legal terms.
• To detect, prevent, and investigate security incidents and abuse.
• To comply with legal obligations.

4. Processing of customer database data by the Platform

The Platform is a reverse proxy that masks sensitive fields in transit, before query results reach an unauthorized user. Sirius does not, in the normal course of operation, store or retain the contents of your databases. To determine which fields are sensitive, query metadata may be evaluated by an AI classification service (an OpenAI-compatible provider). We design the Platform to send only the minimum information necessary for that classification and never to exfiltrate masked values.

5. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on: your consent (e.g. accepting these terms, contacting us); our legitimate interests (securing and improving our services); and compliance with legal obligations.

6. Sharing & disclosure

We do not sell personal data. We share it only with: service providers acting on our behalf (e.g. hosting, AI classification) under appropriate confidentiality and data-processing terms; and authorities where required by law.

7. International transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

8. Data retention

We retain personal data only for as long as necessary for the purposes described above or as required by law. Consent and acceptance records are retained for the period needed to evidence compliance.

9. Security

We apply technical and organizational measures appropriate to the risk, including encryption in transit, hashed credentials, least-privilege access, and tamper-evident acceptance fingerprints. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on your location (e.g. under the GDPR or CCPA), you may have the right to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. To exercise these rights, contact privacy@sirius-technology.com.

11. Children

Our website and the Platform are not directed to children under 16, and we do not knowingly collect their personal data.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date and, where the change is material, ask you to re-accept.

13. Contact

Sirius Technology Solutions — privacy@sirius-technology.com. See also our Terms & Conditions.