Sign in Try SYNC

Security & data

What SYNC reads, writes, sends and stores.

On one page, in plain words. If any of it changes, this page changes first. Where a fact is not confirmed yet, it stays in brackets until it is.

01

What it reads.

Company facts come from public sources. Every signal and every score links to its source, with the date it was read. The business case is SYNC's reasoning from those facts.

SourceWhat SYNC takes from it

Careers pagesOpen roles, and how long they have been open.

The company's own siteWhat it sells, to whom, and what changed.

LinkedInCompany pages, and the public profiles of the people in the buying group.

The pressNews about the company.

Public register pagesRegistration and legal details, where a search turns up a register page.

A lookup providerEmail addresses and phone numbers.

How a signal is kept

signal[what was found]source[the page it was read on]read[the date it was read]

The shape of every signal in a dossier. The values here are placeholders, not a real record.

Yours, only through a connection you approve

Your mailboxYour threads with prospects, so replies land in the conversation.

Your CRMThrough a connection you approve.

02

What it writes.

Everything SYNC writes stays in your workspace until a person decides otherwise.

DossiersOne per account: the sourced facts and a business case.in the product: no case, no draft

ScoresEach account against up to twelve criteria, written from what SYNC learned about your company and from how you recognise a good prospect. You can edit them. Tier A to D: A and B are worked; C and D are left alone.A criterion without evidence is marked "could not establish". It is never guessed.

Contact plansThe buying group in seven roles. In a contact plan, users hear first and buyers last. Blockers are never written to.

DraftsOne message at a time: an observation, a claim, one question, written to your writing rules.in the product: every draft shows its reason and its source

Your CRMHubSpot contacts, both ways or one way, if you switch that on. Nothing else is synced: not companies, not deals, and nothing in Salesforce or Pipedrive.

03

What it sends.

SYNC sends email. LinkedIn messages and calls are tasks for you. By default, nothing is sent until a person approves it. The limits below are enforced by the product, not left to guidelines.

01A person approves, by default.Every account starts with approval on each send, follow-ups included. You can relax that per account.

02From your own mailbox.Outlook or Gmail. You sign in on Microsoft's or Google's own screen. The connection is held by Composio, our connection provider. SYNC never sees your password.

03Three messages a week, at most.SYNC sends at most three messages to one person, and three to one account, in any seven days.

04Never twice within 48 hours.SYNC never writes to the same person twice within 48 hours. A contact plan spaces people out: one new person at a time.

in the product: the send mode, per account, and the limits on every send

04

What it stores, and where.

Your workspace lives in the EU.

WhatWhere and how long

Workspace dataDossiers, drafts, sent messages and replies, in your own workspace, stored in the EU (Ireland). Some AI model providers process data outside the EU; see the sub-processors.

Mailbox accessYou sign in on Microsoft's or Google's own screen. The connection is held by Composio, our connection provider. SYNC never sees your password.

RetentionWorkspace data is kept while your contract runs. Ask us, and we export or delete your workspace data. We answer within one month.

DeletionA person SYNC has researched can ask what is held about them, or ask for it to be removed. We answer within one month.

05

If someone asks to be left alone.

Anyone can ask not to be written to.

The address is blockedIn every workspace, not only the one that wrote. Messages queued to that address are cancelled.

A reply that says stopDoes the same.

How to askinnovate@isyncso.com

06

Who can see it.

The people in your workspace. The person you write to sees only the message SYNC sent.

Your teamPeople you invite to your workspace, with the role you give them.

The people you write toOnly the message SYNC sent. Never the dossier, the score or the plan behind it.

iSyncSO staffWe cannot work in your workspace and cannot change anything in it. Through an admin view, our staff can look at items such as dossiers, to support you and keep the service running.

Other workspaces[Workspace isolation statement to publish]

07

AI models and your data.

SYNC uses language models to read sources and draft messages. We publish what we can verify, and nothing more.

Model providersAnthropic and Google, and Together AI, Groq and DeepInfra, which host open models (among them OpenAI’s gpt-oss and Moonshot AI’s Kimi; no data goes to OpenAI or Moonshot AI). Which model handles a task depends on the task; all are reached through our own routing layer.[Provider retention terms to publish]

Training on your data[Provider training terms to publish]

What a model decidesIt drafts; it does not decide on its own what is sent. Every draft shows its reason and its source, and every account starts with a person approving each message before it is sent. You can relax that per account.

08

For your privacy officer.

The documents they will ask for before the first send.

Sub-processorsWho processes data, and where Data processing agreementOn the web; a PDF follows Privacy noticeHow we use personal data Terms of serviceThe agreement for using SYNC The rules SYNC works byWhat SYNC will and will not do Trust centreAll of this on one page

09

Report a security issue.

Found something that looks wrong? Write to us privately first. For anything else, use contact.

Security contactsecurity@isyncso.com

Disclosure policyWrite to security@isyncso.com before you share a finding anywhere else. A full disclosure policy is not published yet.

See who should buy from you this quarter.

Leave your work email. SYNC reads your company’s website and sends you a first look: what you sell, who probably buys it, and up to five companies scored A to D, each with its source.