Data processing.

For the data you put into your workspace, you are the controller and Isyncso Limited, trading as iSyncSO, is the processor. We process it on your documented instructions, which are your use of SYNC and its settings.

Where the two of us are controllers of our own data (your account and billing details), the Privacy policy applies.

Categories of data

• Your users’ account details.
• Business information about companies and the people who work at them, read from public sources and kept with its source and the date it was read.
• The messages SYNC drafts for you, your approvals and the replies that land in the conversation.

Purpose and duration

To provide SYNC to you, for as long as your account is active. When it ends, we delete or return the data within [period to publish].

• Process personal data only on your documented instructions.
• Make sure everyone who handles it is bound by confidentiality.
• Keep the technical and organisational security measures listed in the signed DPA: [to publish].
• Help you answer requests from the people whose data it is, and help you meet your own obligations under the GDPR.
• Tell you about a personal data breach without undue delay, and within [hours to publish].
• Delete or return the data when the service ends, at your choice, unless the law requires us to keep it.
• Give you the information needed to show we comply, and allow audits as set out in the signed DPA.

We use sub-processors and bind each one to the same data protection duties. The list, with what each one does and where it is, is on the sub-processors page. How we tell you about a change: [notice period and method to publish].

Workspace data is stored in the EU (Ireland). Your mailbox connects through Microsoft’s and Google’s own sign-in, and SYNC never sees your password.

Transfer mechanism for any processing outside the EEA: [to publish].