Privacy.

The controller of your personal data is iSyncSO B.V., a Dutch private limited company (besloten vennootschap) based in Doorn, the Netherlands. Chamber of Commerce (KVK) number: [KVK number to publish]. Our postal address is Oude Woudenbergseweg 17, Doorn, the Netherlands.

Questions about this policy, and requests about your data, go to privacy@isyncso.com.

Information you provide

• Account details: name, email address, company name and sign-in details.
• Profile information: job title, department and preferences.
• Payment information: billing address and payment method details, processed by our payment provider.
• Communications: messages you send us, support requests and feedback.

Your workspace

• The settings and rules you give SYNC, including your writing rules and the send mode for each account.
• The messages SYNC drafts, what you approve, and the replies that land in the conversation.
• Your mailbox connection. You sign in on Microsoft’s or Google’s own screen. The connection is held by Composio, our connection provider. SYNC never sees your password.

Information collected automatically

• Usage data: pages visited, features used, timestamps and interaction patterns.
• Device data: browser type, operating system, IP address and device identifiers.
• Cookies and similar technologies (see “Cookies and local storage” below).

SYNC researches accounts from public sources: careers pages, the company’s own site, LinkedIn, the press and public register pages. Every signal and every score links to its source, with the date it was read. That is business information about companies and about the people who work at them, and it is stored in your workspace in the EU (Ireland). Email addresses and phone numbers come from a lookup provider.

Roles under data protection law (controller or processor) for this data: [to confirm]. Legal basis: [to confirm].

If SYNC has researched you and you want to know what it holds, or want it removed, write to privacy@isyncso.com. We answer within one month. The rights in “Your rights” apply to you too.

What we store

• Your email address.
• If you give them: your name, your company, its website and the plan you have in mind.
• The consent record: the version of the notice you saw and when, whether you ticked the monthly update and when, and a hashed form of your IP address and browser, used only to stop abuse of the form.

The research on your company

Once you confirm your address, SYNC researches your company from the domain of your email address: its website and other public pages, the same way it does when you open an account. It reads company data only. It does not look up people, you included. The result is your first look, a private page that stays online for 90 days.

Why, and on what basis

We use your details to confirm your sign-up, to send you your first look, to write to you when we open, and to open your account with the research already in place. We do this because you asked for it. The monthly update is sent only if you tick the box for it: that is your consent, and you can withdraw it at any time. You can also ask for it later, with the link in your first look email.

How long we keep it

• A sign-up that is never confirmed is deleted after 30 days.
• Any other sign-up, with its first look, is kept 12 months after you signed up, or until 3 months after we open, whichever is later.

Stopping updates and deleting your sign-up

Every update has a link to unsubscribe. To have your sign-up and your first look deleted, write to privacy@isyncso.com. We answer, and carry it out, within one month. The providers involved (hosting, email, research and our CRM) are on the sub-processors page.

• To provide, operate and maintain the Service: to research accounts, draft messages, and send the ones a person has approved from your own mailbox.
• To process transactions and send related information.
• To communicate with you, including service announcements and support.
• To analyse usage patterns and improve the Service’s performance, features and security.
• To comply with legal obligations and enforce our terms.

We do not sell your personal data. We may share information with:

• Sub-processors who help us operate the Service, such as hosting and AI models. The list is on the sub-processors page.
• Legal authorities when required by law or to protect our rights.
• Business transfers in connection with a merger, acquisition or sale of assets.

The agreement each provider has with us on handling your data: [to confirm per provider].

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) gives you these rights:

• Access: ask for a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your personal data.
• Restriction: limit how we process your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing rests on consent, withdraw it at any time.

To use any of these rights, write to privacy@isyncso.com. We answer within one month.

We keep workspace data while your contract runs. Ask us, and we export or delete your workspace data. We answer within one month. Data the law requires us to keep is the exception. A person SYNC has researched can ask what is held about them, or ask for it to be removed, and we answer within one month.

Workspace data is stored in the EU (Ireland). Some sub-processors, including AI model providers, process data outside the EU; the sub-processor list shows where each one is confirmed.

Where data is processed outside the EEA, the transfer needs a safeguard, such as the Standard Contractual Clauses approved by the European Commission. The safeguard for each sub-processor: [to confirm per sub-processor].

This site keeps your choice of light or dark theme in your browser’s local storage. It stays on your device.

Other cookies, analytics and the cookie choices we offer: [to confirm].

The Service is not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.

We may update this policy from time to time. We post the updated policy on this page and change the “Last updated” date. Continuing to use the Service after a change means you accept it.