1. Who we are
Sirrx is a cloud ERP (business management) platform operated by [LEGAL COMPANY NAME], [LEGAL ADDRESS] ("we", "us"). This Privacy Policy explains what data we collect, why, how we store and protect it, and how it can be deleted. It applies to the Sirrx web application and the website https://sirx.tj.
2. Data of Sirrx account users
When a business registers in Sirrx, we process the information needed to provide the service: name, email address, phone number, organisation details, user roles, and the business data that users enter into the system (products, sales, warehouse, finance, CRM records and similar). We also process technical data such as log-in times and IP addresses for security purposes.
3. Meta (Facebook and Instagram) integration
Sirrx lets a business connect its Facebook Pages and its Instagram professional accounts. These are two separate, independent connections: connecting one does not connect the other, and each can be disconnected on its own. Through these connections the business can:
- view insights and statistics of its Pages and Instagram accounts;
- publish and schedule posts;
- read and reply to comments;
- read and reply to direct messages (Facebook Messenger and Instagram Direct);
- read advertising statistics (ad metrics).
When a business connects an account, we receive and store via the Meta APIs:
- Page / account profile information (ID, name, username, profile picture, category, follower counts);
- posts and media (text, images, videos, publication time) and their engagement data;
- insights metrics (reach, impressions, engagement and similar aggregated statistics);
- comments on the business's posts and the commenters' public name and profile picture;
- direct messages sent to or from the business's Page or Instagram account, and the senders' public profile name and profile picture;
- advertising metrics (campaign, ad set and ad statistics such as spend, reach, clicks);
- access tokens issued by Meta for the connection (stored encrypted).
4. How we use the data
We use data received from Meta only to provide the features described above to the business that connected the account. Data is isolated per business account (organisation): one organisation can never see another organisation's data.
- We do not sell this data.
- We do not share it with third parties (except as required by law).
- We do not use it for advertising, profiling or building marketing audiences.
- We do not transfer it to data brokers or use it to train models unrelated to the service.
Our use of data received from Meta complies with the Meta Platform Terms and Developer Policies.
5. Storage and security
Data is stored on Sirrx servers hosted on Microsoft Azure. Access tokens are stored encrypted. Access to production systems is restricted to authorised personnel, and all traffic is transmitted over HTTPS.
6. Data retention
- Data received from Meta is kept while the integration remains connected.
- When a business disconnects an integration in Sirrx, it can choose to delete all data collected through that connection.
- When the Sirrx app is removed (deauthorised) in Facebook or Instagram settings, or when a deletion request is received, the related data is deleted within 30 days.
- Sirrx account data is kept while the account is active and deleted on request.
7. How to delete your data
- In Sirrx: go to M-Core → Integrations, click Disconnect on the Facebook or Instagram connection and choose to delete the data.
- In Facebook: Settings & privacy → Settings → Apps and Websites (or Business Integrations), find Sirrx and remove it. In Instagram: Settings → Apps and websites / Business integrations, remove Sirrx. Removal automatically triggers deletion of the related data.
- By email: write to info@sirx.tj.
Full instructions: Data Deletion.
8. Your rights
You have the right to request access to, correction of, or deletion of your personal data, to withdraw consent (by disconnecting the integration or removing the app), and to object to processing. If you messaged or commented on a business that uses Sirrx, you may also contact that business directly. To exercise your rights, contact us at info@sirx.tj; we respond within 30 days.
9. Children
Sirrx is a business service and is not intended for children under 13. We do not knowingly collect data from children.
10. Changes to this policy
We may update this Privacy Policy. The current version is always published at this page with its effective date. Significant changes will be communicated to account administrators.
11. Contact
- Company: [LEGAL COMPANY NAME]
- Legal address: [LEGAL ADDRESS]
- Phone: [PHONE]
- Email: info@sirx.tj
- Website: https://sirx.tj