(07)Legal

Privacy policy

1. Who is responsible for your data

The data controller is SIRTECH SARL, a limited liability company governed by Algerian law, with share capital of [TO BE COMPLETED] DZD, whose registered office is at [TO BE COMPLETED: full address], registered in the trade register under no. [TO BE COMPLETED], tax identification number (NIF) [TO BE COMPLETED], represented by its manager, [TO BE COMPLETED: name].

  • Contact: contact@sirtech.dev
  • Data protection officer (Article 41 bis of Law No. 18-07, introduced by Law No. 25-11): dpo@sirtech.dev. They are your point of contact for any question about your data, and the ANPDP’s.
  • Declaration to the National Authority for the Protection of Personal Data (ANPDP): [TO BE COMPLETED: receipt number, or “in progress”].

2. What this policy covers

This policy applies to:

  • the sirtech.dev website;
  • the SIRTECH WhatsApp number, +213 661 18 36 38, which we use to:
    • send the verification codes requested by users of the applications published by SIRTECH;
    • answer the support requests and quote requests sent to us;
  • the contact@sirtech.dev and dpo@sirtech.dev addresses.

Each application published by SIRTECH has its own privacy policy for the data processed within the application itself (account, orders, content, etc.). This policy covers only what passes through the website, the WhatsApp number and the email addresses above.

When SIRTECH builds a product for a client, the client is responsible for its users’ data; SIRTECH then acts as a processor, on the client’s instructions only (Article 39 of Law No. 18-07), under our terms of service.

3. What data, why, and for how long

3.1 Visiting the website

The website has no account and no form. The “Message us on WhatsApp” buttons and the email links open your own app: whatever you then write to us is processed as described in 3.3 and 3.4.

  • Language cookie: a single cookie, “sir-locale”, remembers the language you chose (French, English or Arabic) for 12 months. It is strictly necessary for the website to work and is used for nothing else. No advertising or tracking cookie is set.
  • Technical measurements: on the 3D island page, your browser sends us a few measurements of how the page runs (the graphics processor’s name, screen size, the device’s memory and number of cores, connection type, loading times, page weight, smoothness of the image, technical errors), without cookies and without any identifier that outlives the page. They are used only to fix and speed up the site; no profile is built.

3.2 Verification codes by WhatsApp

When an application published by SIRTECH offers you “Receive the code on WhatsApp”, you are the one who writes to us first, with a message that is already prepared.

  • Data: your phone number, your WhatsApp profile name, the content of the prepared message, the date and time, the application concerned, and the code sent (kept only in an irreversibly encrypted form).
  • Purpose: to verify that you do hold this number, for the application that requested it, and to protect the service against abuse.
  • Legal basis: performance of the service you request (Article 7 of Law No. 18-07).
  • What the application receives: only the result of the verification (number verified or not). It does not receive the content of your messages, and no application knows whether you use another SIRTECH application.
  • Retention: verification requests are deleted after 30 days; the technical identifiers of messages, after 24 hours. A code expires 10 minutes after it is sent and can be used only once.

3.3 Support and quote requests by WhatsApp

  • Data: your number, your WhatsApp profile name, your messages and what you attach to them (photos, voice messages, documents, location, contacts), dates and times, read status, and the name of the member of our team who replied to you.
  • Purpose: to answer your requests, send you a quote if you ask for one, and follow up.
  • Legal basis: pre-contractual steps taken at your request, and your own initiative, since you are the one writing to us (Article 7 of Law No. 18-07).
  • Retention: conversations are deleted 180 days after the last message; attached files, 90 days after they are received. If a contract is concluded, the related documents are kept for the legal retention period for commercial and accounting records.
  • When we receive your first message, you get an automatic reply confirming that your message has arrived. A member of our team then answers you.

3.4 Email

  • Data: your email address, your message and its attachments.
  • Purpose: to reply to you, and to handle requests about your data (for dpo@sirtech.dev).
  • Retention: 12 months after our last exchange, unless the law requires a longer retention period.

3.5 Security and technical logs

Our hosting providers keep, for a limited period, technical logs (IP address, date, page or service requested) that are needed for the security and proper operation of the services. We do not use them for any other purpose.

4. What we do not do

  • We do not sell or rent your data.
  • We do not send you advertising messages, by WhatsApp or by email.
  • We write to you on WhatsApp only to reply to a message you have sent us, in accordance with WhatsApp’s rules.
  • We will never ask you to give us a verification code. A code you receive must be entered only in the application that requested it.
  • No decision concerning you is made by fully automated means. Automatic frequency limits protect the service against abuse; their only effect is to temporarily suspend the sending of codes.

5. Who receives your data

  • Authorised members of the SIRTECH team, each with personal access.
  • Our technical service providers, who act on our instructions:
    • Meta Platforms / WhatsApp (WhatsApp Business Platform): your messages pass through WhatsApp’s servers, and WhatsApp processes them under its own terms and privacy policy;
    • Aruba S.p.A.: hosting of the sirtech.dev website, of the verification service and of WhatsApp support (data centre in Italy);
    • Resend: delivery of the emails SIRTECH receives and sends.
  • The competent authorities, upon a lawful request.

6. Transfers outside Algeria

The providers above process your data outside Algeria, in particular in the European Union (Italy) and in the United States. In accordance with Articles 44 and 45 of Law No. 18-07:

  • transfers needed to provide the service you ask for (code, support, reply to your message, quote) rely on Article 45, 2°, d): performance of a service or of pre-contractual steps taken at your request;
  • hosting of the website and its technical logs: [TO BE COMPLETED: “ANPDP authorisation No. … of …” or “authorisation requested from the ANPDP on …”].

Exchanges are encrypted in transit and access to the data is limited to the people who need it.

7. How we protect your data

  • Encryption of exchanges (HTTPS/TLS);
  • verification codes kept only in an irreversibly encrypted form, single-use and time-limited;
  • separation between applications: one application can never read another application’s data;
  • access to support through a personal account with a strong password; each reply is attributed to the person who sent it;
  • limits on the number of attempts and requests;
  • a record of processing activities kept in accordance with Article 41 bis 2 of Law No. 18-07.

In the event of a data breach likely to concern you, we inform the ANPDP and, if it poses a high risk to your rights, we inform you without delay, in plain terms, with its possible consequences and the measures taken.

8. Your rights

In accordance with Law No. 18-07 on the protection of natural persons in the processing of personal data, as amended and supplemented by Law No. 25-11 of 24 July 2025, you have:

  • a right to information (Article 32), which this policy fulfils;
  • a right of access to the data concerning you (Article 34);
  • a right to rectification, erasure and blocking of data that is inaccurate, incomplete or processed unlawfully, free of charge and within 10 days (Article 35);
  • a right to object, on legitimate grounds, and without giving reasons to any direct marketing (Article 36);
  • the right to withdraw your consent at any time, for the future (Article 7).

To exercise these rights, write to dpo@sirtech.dev (or to contact@sirtech.dev) stating your request, or ask directly in your WhatsApp conversation with SIRTECH (for example, to have your support conversation erased). We may ask you to prove your identity.

You may also lodge a complaint with the National Authority for the Protection of Personal Data (ANPDP): anpdp.dz.

If you are in the European Union, the General Data Protection Regulation (GDPR) may also apply. You then also have the rights it provides, in particular to restriction of processing and to data portability, and you may complain to the data protection authority of your country of residence.

9. Minors

Our services are not specifically aimed at children. If you are under 18, the processing of your data requires the consent of your legal representative (Article 8 of Law No. 18-07).

10. Changes

We may change this policy to reflect changes in our services or in the law. The date of the last update appears at the top of the page. If a change is significant, we will say so visibly.

11. Contact us

SIRTECH SARL — contact@sirtech.dev — dpo@sirtech.dev — [TO BE COMPLETED: postal address].