Privacy Policy

Scope

This Privacy Policy describes how Synkro Labs Inc (“Synkro,” “we,” “us,” or “our”) handles personal information when you visit synkro.sh, request access, communicate with us, or use our software, APIs, command-line tools, integrations, and related products and services (collectively, the “Services”).

When we process information on a customer’s behalf as its service provider or processor (“Customer Data”), that processing is governed by the customer’s instructions and our applicable agreement, including our Terms of Service for self-service customers and any applicable data processing agreement. The customer determines why and how that information is processed. If you use the Services through an organization, its privacy notices govern that Customer Data, and privacy requests concerning it should be directed to that organization.

Customer Data can include code, agent sessions, tool calls, rules, consent decisions, and related records. We assist customers with privacy requests as required. This policy still applies to personal information we control to manage our relationship with you, such as account, billing, and support information, including when you use a self-service account.

Information we collect

The information we collect depends on how you use the Services:

• Contact and account information. Name, work email, organization, role, authentication identifiers, and account settings that you or your organization provide.
• Communications. Access requests, support messages, feedback, and other information you send us.
• Billing information. Billing-contact and transaction details, credit purchases and balances, metered usage and credit deductions, payment status, and any refund or dispute records for paid Services. Payment providers may collect payment details directly and return transaction and payment-method information to us.
• Usage and technical information. Pages and features used, workspace settings, timestamps, IP address, device and browser details, referring pages, authentication events, and diagnostic or security logs. Browser storage may also hold your interface preferences.

We may also receive information from your organization, connected integrations, business partners, public sources, and service providers. Information from integrations depends on the permissions you or your organization grant.

How we use information

We use personal information to:

• review access requests and administer accounts and workspaces;
• process credit purchases, meter usage, maintain balances, reconcile payments, and handle billing questions, refunds, disputes, and tax or accounting obligations;
• provide, support, secure, troubleshoot, and improve the Services;
• authenticate users, prevent abuse, and send service or security messages;
• respond to inquiries and send product communications consistent with your choices and any limits stated when we collected your information; and
• comply with law and enforce our agreements.

Where applicable law requires a legal basis, we rely on performance of a contract, compliance with legal obligations, our legitimate interests in operating, improving, and securing the Services, and consent where requested. When we rely on legitimate interests, we consider their effect on your rights.

How we disclose information

We may disclose personal information to:

• Service providers. Companies that provide infrastructure, hosting, security, authentication, communications, analytics, customer support, and other services on our behalf, subject to appropriate contractual restrictions.
• Payment providers. Providers that process purchases and related transactions. They may also process information for their own fraud-prevention, security, and legal-compliance purposes under their privacy policies.
• Your organization and its administrators. If you use an organization-managed account, its administrators may access and manage your account and associated activity.
• Integrations and parties you direct. Third-party products or services that you or your organization connect to Synkro, in accordance with the permissions and instructions provided.
• Professional advisers. Lawyers, accountants, insurers, auditors, and similar advisers where reasonably necessary.
• Authorities and other parties. When we reasonably believe disclosure is required by law, necessary to protect rights or safety, or appropriate to investigate fraud, abuse, or security incidents.
• Transaction participants. Parties involved in a financing, merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction, subject to appropriate confidentiality protections.
• Affiliates. Current or future companies under common control with Synkro, consistent with this policy.

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising. If our practices change, we will update this policy and provide any choices required by law.

Third-party websites and integrations you choose to use have their own privacy practices. Review their policies and permissions before sharing information with them.

Cookies and similar technologies

We may use cookies and browser storage to operate and secure the Services and remember preferences. Other technologies may help us understand usage or measure communications; these are not automatically essential, and we obtain consent or provide choices where required by law. We do not currently use advertising cookies. Your browser lets you control cookies and storage, although blocking them may affect functionality.

Because there is not a consistent industry standard for “Do Not Track,” we do not currently respond to that signal. Where required, we honor legally recognized browser-based opt-out preference signals.

Retention and security

We keep personal information as long as reasonably necessary for the purposes described in this policy, legal obligations, and resolving disputes. Retention depends on the information, its purpose, and applicable legal or contractual requirements. Customer Data retention and deletion follow the applicable agreement, customer instructions, and law.

We use administrative, technical, and organizational safeguards designed to protect personal information, but no system is completely secure. Protect your credentials and notify us promptly of suspected unauthorized access.

Your choices and privacy rights

Depending on where you live, you may have the right to request access to, correction or deletion of, or a copy of personal information associated with you. You may also have rights to object to or restrict processing, withdraw consent, opt out of certain uses, or appeal a decision. These rights may be subject to exceptions. We may verify your identity and authority before acting on a request.

You may opt out of promotional email using the unsubscribe link in the message. We may still send non-promotional communications about your account, the Services, security, or this policy. Where permitted, you may use an authorized agent. We will not discriminate against you for exercising a privacy right.

To submit a request concerning information Synkro controls, email team@synkro.sh. To appeal a decision, reply to our response and state that you are submitting a privacy appeal. For Customer Data, contact the organization that controls the relevant Synkro workspace.

Additional US state disclosures

In the preceding 12 months, we may have collected the categories described above: identifiers and contact information; commercial information; internet, network, and electronic activity; professional or employment-related information; approximate geolocation derived from IP address; and inferences drawn from account and usage information. We collect these categories from you, your organization, connected services, your device, public sources, and service providers, and use and disclose them for the purposes described in this policy.

We do not use or disclose sensitive personal information to infer characteristics about a person. We do not knowingly sell or share the personal information of anyone under 18. We retain each category only as long as reasonably necessary under the factors described in “Retention and security.”

International data transfers

Synkro is based in the United States. Information may be processed here or in other countries where we or our service providers operate, with different data-protection laws. Where required, we use safeguards for international transfers. Contact team@synkro.sh for information about applicable safeguards and how to obtain a copy.

If you are in the European Economic Area, United Kingdom, or Switzerland, you may also have the right to lodge a complaint with your local data-protection authority. We encourage you to contact us first so we can try to address your concern.

Children’s privacy

The Services are intended for business users and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information to us, please contact us so we can take appropriate action.

Changes to this policy

We will post updates here with a revised date. For material changes, we will provide appropriate notice and obtain consent where required by law before applying the changes.

Contact us

Synkro Labs Inc is responsible for the personal information described in this policy when it acts as a controller. Questions and privacy requests may be emailed to team@synkro.sh.