Privacy Policy

This Privacy Policy explains how Syncestro ("Syncestro", "we", "us") collects, uses, shares, and protects information when you use the Syncestro web application and related services (the "Service"). It applies to workspace users, administrators, and visitors to our public pages.

Syncestro processes business records (such as customer, vendor, and order data) on behalf of the organization that operates your workspace. That organization controls that data and is responsible for its own privacy obligations to its customers and contacts.

We collect the following categories of information:

• Account information. Your name, email address, profile image, role, and organization, provided when you accept an invitation or sign in through a supported identity provider such as Google.
• Customer Data. Business records your organization enters or imports into the Service, including inventory, sales orders, work orders, purchase orders, customers, vendors, and financial subledger entries. This may include personal information about your organization's customers and contacts.
• Integration data. Orders, products, inventory levels, customers, and accounting records synced from third-party platforms you connect, such as Shopify or QuickBooks Online, along with the access tokens needed to maintain those connections.
• Usage and activity data. Records of actions taken in the Service (activity logs), device and browser information, IP address, and timestamps, used for security, auditing, and troubleshooting.
• Support and feedback. Information you provide when you report a bug, request help, or submit feedback.

We use the information we collect to:

• Provide, operate, maintain, and improve the Service.
• Authenticate users and enforce role-based permissions.
• Sync data with third-party integrations you have enabled.
• Generate reports, notifications, and AI-assisted insights within your workspace.
• Maintain audit trails and detect, prevent, and respond to security incidents or misuse.
• Respond to support requests and communicate about service changes.
• Comply with legal obligations and enforce our agreements.

The Service includes AI-assisted features that analyze your workspace data to surface trends, anomalies, and recommendations. To provide these features, relevant portions of your Customer Data may be sent to a third-party AI model provider for processing. We do not permit these providers to use your data to train their models. AI outputs are informational and should be reviewed before acting on them.

We do not sell personal information. We share information only in the following circumstances:

• Within your organization. Other users in your workspace can see information according to the permissions your administrators configure.
• Service providers. Hosting, database, email, authentication, and AI providers that process data on our behalf under contractual confidentiality obligations.
• Integrations you enable. Third-party platforms such as Shopify and QuickBooks Online receive and send data as required by the integration you configured.
• Legal requirements. When required by law, subpoena, or governmental request, or to protect the rights, property, or safety of Syncestro, our users, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising or tracking cookies. Your browser may allow you to block cookies, but the Service will not function without session cookies.

We retain account information and Customer Data for as long as your organization's workspace is active. Activity logs and financial subledger entries are retained as immutable audit records for the life of the workspace, or longer where required by law. After a workspace is closed, we delete or anonymize its data within a reasonable period, except where retention is required for legal, accounting, or security purposes.

We use industry-standard measures to protect information, including encryption in transit, access controls, role-based permissions, and monitored infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please notify us immediately if you believe your account has been compromised.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can update your profile information within the Service. For other requests, contact us using the details below, or contact your workspace administrator if the request concerns Customer Data your organization controls.

We will respond to verified requests within the timeframe required by applicable law.

The Service is hosted in the United States. If you access it from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Policy from time to time. The effective date at the top of this page shows when it was last revised. Material changes will be communicated through the Service or by email where practical. Continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

Privacy questions or requests can be sent to legal@syncestro.com. Terms governing use of the Service are in our End User License Agreement.