Privacy policy
Last updated 17 October 2026
This policy explains what personal data ThSirius ("we", "us") handles, why, and the choices you have. It covers this website and the ThSirius service.
Two kinds of data
Data about our customers and visitors. When you use this website or have a ThSirius account, we decide how that data is used, and this policy applies to it in full.
Data our customers put into ThSirius. Businesses use ThSirius to call people and keep records of those calls: leads, phone numbers, call recordings, transcripts and notes. We handle that data only on our customer's instructions, to provide the service. If a business called you using ThSirius, that business decides how your data is used, so please contact it first. We will help it answer your request.
What we collect
- Website forms: your name, email, company, phone number and message, the topic you chose, and the IP address the form was sent from.
- Accounts: users' names, email addresses or usernames, roles, passwords (stored only as one-way hashes), two-factor settings, sign-in times and IP addresses, and an audit log of changes made in the workspace.
- Billing: the company's billing details, balance and invoices. Card details are handled by our payment provider; we never see or store full card numbers.
- Service data: the leads, calls, recordings, transcripts and settings our customers put into ThSirius, as described above.
Why we use it
- To reply to your message or demo request.
- To provide, secure and support the service, and to bill for it.
- To keep workspaces safe: sign-in protection, rate limits and audit logs.
- To meet legal obligations, such as tax records.
We do not sell personal data, and we do not use our customers' service data for advertising.
Cookies
This website sets no cookies and uses no analytics or advertising trackers. The ThSirius app uses one cookie to keep you signed in, and remembers display preferences in your browser.
Who else handles it
We use these service providers, each only for the purpose listed:
- Hetzner (Finland and Germany): servers, databases and recording storage.
- Cloudflare: domain name system (DNS) for our addresses.
- Stripe: card payments.
- Zoho: sending email, such as invitations and password resets.
- Slack: telling our team about new website messages.
- Answering-machine detection and speech-to-text services: audio of calls, when a customer uses those features.
Customers choose their own phone carriers, and can choose their own storage for recordings; those providers act for the customer, not for us.
Where it is kept
ThSirius runs on servers in the European Union (Finland and Germany). Data is sent there from wherever you use the service.
How long we keep it
- Website messages: as long as needed to answer and follow up, and no longer than two years.
- Service data: as long as the customer chooses (recordings can be kept from 7 days to 10 years, or until deleted), and deleted within 90 days after a workspace is closed.
- Billing records: as long as tax law requires.
Security
Data travels over encrypted connections. Each customer's data is separated in the database, passwords are hashed, secrets such as carrier passwords are encrypted, access by our staff needs a reason and is logged, and backups are encrypted.
Your choices
You can ask to see, correct or delete the personal data we hold about you, or object to how we use it. Send a privacy request through our contact form. We may need to confirm it is you before we act. If the data was put into ThSirius by a business that called you, we will pass your request to that business.
Children
ThSirius is a business service and is not meant for anyone under 18.
Changes
We will post any change here with a new date, and tell customers about significant changes before they take effect.