Sign in Free first look

Trust centre

What a careful buyer asks us, in one place.

How SYNC treats the people it researches, where your data is stored, who can see it, and what we do not have yet. Where a fact is not confirmed yet, we say so.

GDPR, AVG in Dutch, DSGVO in German: what your privacy officer will ask is on this page.

Your mailbox, connected

01Microsoft or Google sign-inYou sign in on Microsoft's or Google's own screen.
02ComposioThe connection is held by Composio, our connection provider. SYNC never sees your password.
Your workspaceDossiers, drafts, sent messages and replies, in your own workspace, stored in the EU (Ireland).

Workspace data: Stored in the EU (Ireland)
Before anything is sent: A person approves every email
Security contact: innovate@isyncso.com
Certifications: None yet

The law

May I email these people?

Whether you may write depends on the law where the person is, and it can require their consent, even between businesses. SYNC does not decide that for you, and our terms leave it with you: have consent or another legal basis before you send. We make no statement about the rules until a lawyer has read them.

Commitments · five rules

Our commitments

The rules SYNC works by, written down so you can hold us to them. Each one describes what the product does today, not only what we intend.

Every account it could write to. Dark: the ones with a reason.

The ruleswhere each one is held

Never without a reason.

A message needs a dossier with a sourced case behind it. Accounts without one are left alone, and you can see which ones and why.

in the product: no case, no draft

Three messages a week, at most.

At most three messages to one person, and three to one account, in any seven days. Never twice to the same person within 48 hours. An answer to a reply is not held to them, and a message you write and send yourself is yours to time.

in the product: the limits on every message SYNC starts

A person approves every email.

Every email waits for a person to approve it, follow-ups included. Sending on its own comes next, earned over time.

in the product: the release desk

Your workspace data is stored in the EU.

Workspace data is stored in Ireland. Our AI model providers process data outside the EU, or in no fixed region, and the sub-processor list shows where. You sign in to your mailbox on Microsoft's or Google's own screen. The connection is held by Composio, our connection provider. SYNC never sees your password.

on this site: the sub-processors, and where each one is confirmed

You can see what it does.

What SYNC reads, writes, sends and stores is listed below, in plain words. If it changes, this page changes first.

in the product: every draft shows its reason and its source

Never without a reason.

The pace

What the pace looks like.

One account's week: at most three messages in any seven days, and at least 48 hours between two messages to the same person. In a contact plan, users hear first and buyers last. Blockers are never written to.

Mon
Office manager · sent
Tue
Office manager · held: under 48 hours since the last message to this person
Wed
Facility coordinator · sent
Thu
Office manager · sent
Fri
IT lead · held: three already sent in seven days
Sat
No message
Sun
No message

Tue · Office manager · held: under 48 hours since the last message to this personFri · IT lead · held: three already sent in seven daysmax 3 in any 7 days

Filled square: a message sent. Dashed ring: a message the limits held back. The bars count the messages sent in the last seven days; the dashed line is the limit. An illustration of the limits, not a fixed schedule.

Security & data

What SYNC reads, writes, sends and stores.

On one page, in plain words. If any of it changes, this page changes first.

Sources

What it reads.

Company facts come from public sources. Every signal and every score links to its source, with the date it was read. The business case is SYNC's reasoning from those facts.

SourceWhat SYNC takes from it

Careers pagesOpen roles, and how long they have been open.

The company's own siteWhat it sells, to whom, and what changed.

LinkedInCompany pages, and the public profiles of the people in the buying group.

The pressNews about the company.

Public register pagesRegistration and legal details, where a search turns up a register page.

A lookup providerEmail addresses and phone numbers.

How a signal is kept

signal[what was found]source[the page it was read on]read[the date it was read]

The shape of every signal in a dossier. The values here are placeholders, not a real record.

Yours, only through a connection you approve

Your mailboxYour threads with prospects, so replies land in the conversation.

Your CRMThrough a connection you approve.

Outputs

What it writes.

DossiersOne per account: the sourced facts and a business case.in the product: no case, no draft

ScoresEach account against up to twelve criteria, written from what SYNC learned about your company and from how you recognise a good prospect. You can edit them. Tier A to D: A and B are worked; C and D are left alone.A criterion without evidence is marked "could not establish". It is never guessed.

Contact plansThe buying group in seven roles. In a contact plan, users hear first and buyers last. Blockers are never written to.

DraftsOne message at a time: an observation, a claim, one question.in the product: every draft shows its reason and its source

Your CRMHubSpot contacts, both ways or one way, if you switch that on. Nothing else is synced: not companies, not deals, and nothing in Salesforce or Pipedrive.

Everything SYNC writes stays in your workspace until a person decides otherwise.

Sending

What it sends.

SYNC sends email. LinkedIn messages and calls are tasks for you. Nothing is sent until a person approves it. The limits below are enforced by the product, not left to guidelines.

01A person approves every email.Every email waits for a person to approve it, follow-ups included. Sending on its own comes next, earned over time.

02From your own mailbox.Outlook or Gmail. You sign in on Microsoft's or Google's own screen. The connection is held by Composio, our connection provider. SYNC never sees your password.

03Three messages a week, at most.Per person and per account, in any seven days.

04Never twice within 48 hours.SYNC never writes to the same person twice within 48 hours.

in the product: the release desk, and the limits on every send

Storage

What it stores, and where.

Your workspace lives in the EU.

WhatWhere and how long

Workspace dataDossiers, drafts, sent messages and replies, in your own workspace, stored in the EU (Ireland). Our AI model providers process data outside the EU, or in no fixed region, and so do some other sub-processors; the list below shows where each one is confirmed.

Mailbox accessYou sign in on Microsoft's or Google's own screen. The connection is held by Composio, our connection provider. SYNC never sees your password.

RetentionWorkspace data is kept while your contract runs. Ask us, and we export or delete your workspace data. We answer within one month.

DeletionA person SYNC has researched can ask what is held about them, or ask for it to be removed. We answer within one month.

Opting out

If someone asks to be left alone.

Anyone can ask not to be written to.

The address is blockedIn every workspace, not only the one that wrote. Messages queued to that address are cancelled.
A reply that says stopDoes the same.
How to askapp.isyncso.com/opt-out or innovate@isyncso.com

Access

Who can see it.

The people in your workspace. The person you write to sees only the message SYNC sent.

Your teamPeople you invite to your workspace, with the role you give them.

The people you write toOnly the message SYNC sent. Never the dossier, the score or the plan behind it.

iSyncSO staffWe cannot act in your workspace or change anything in it. Through an admin view, our staff can read items such as dossiers, to support you and keep the service running.

Other workspacesNo statement published yet, and no outside party has tested this. Ask us before you sign and we will put it in your contract.

AI models

AI models and your data.

SYNC uses language models to read sources and draft messages. We publish what we can verify, and nothing more.

Model providersAnthropic and Google, and Together AI and Groq, which host open models (among them OpenAI’s gpt-oss and Moonshot AI’s Kimi; no data goes to OpenAI or Moonshot AI), and DeepInfra, which hosts the embedding model. Which model handles a task depends on the task; all are reached through our own routing layer.Retention: not confirmed yet, provider by provider. Ask us before you sign and we will put it in your contract.

Training on your dataNot confirmed yet, provider by provider. Ask us before you sign and we will put it in your contract.

What a model decidesIt drafts; it does not decide on its own what is sent. Every draft shows its reason and its source, and every email waits for a person to release it. Sending on its own comes next, earned over time.

Sub-processors.

The companies that process personal data on our behalf to run SYNC: what each one does, and where. This is the same list as the sub-processor page, last updated 1 October 2026.

Workspace data is stored in the EU (Ireland). Where a location is not confirmed, the list says so.

Which model handles a task depends on the task; all are reached through our own routing layer.

Where your workspace data lives
Location confirmed
Not confirmed yet

The sub-processor page

Sub-processors, what each one does, and where it is
Sub-processor	Purpose	Location
Supabase	Database and storage	EU (Ireland)
Anthropic	AI models that read sources and draft text	United StatesData is stored in the US. By default a request may be processed in any region; Anthropic’s API has no EU option.
OpenAI	AI models that read sources and draft text	Via Groq and Together AISYNC runs OpenAI’s open models (gpt‑oss) on Groq and Together AI; no data goes to OpenAI.
Google	AI models that read sources and draft text	No fixed regionGoogle may process requests in any country where it has facilities. An EU region exists on Google Cloud (Vertex AI), which we do not use.
Moonshot AI (Kimi)	AI models that read sources and draft text	Via Together AIKimi runs on Together AI’s servers; no data goes to Moonshot AI.
Together AI (hosts open models)	AI models that read sources and draft text	No fixed regionTogether picks the data centre for each request. EU-only hosting needs a dedicated endpoint, which we do not use.
DeepInfra	Text embeddings: search by meaning over companies and the documents you upload	United StatesHosts the open embedding model SYNC uses (multilingual-e5-large-instruct). Retention terms not confirmed yet. Ask us before you sign and we will put them in your contract.
Vercel	Hosting of the app and site	United StatesFunctions run in Washington, D.C.; pages are served from the nearest edge. EU region available; not yet selected.
Resend	Email notifications, and the emails for a sign-up on this site	United StatesEmails are sent from the EU (Ireland). Resend stores account data, logs and email metadata in the US.
Bright Data	Web search and reading public pages, also for the company research after a sign-up	Not known. Ask us before you sign.Based in Israel. Bright Data does not publish where it hosts data.
Composio	Mailbox, calendar and CRM connections	Not known. Ask us before you sign.Composio does not publish where it hosts data.
BetterContact	Finding email addresses and phone numbers	EUServers in the EU; the company is based in France.
HubSpot	CRM for sign-ups on this site	Not confirmed yet. Ask us before you sign and we will put it in your contract.
Groq	AI models (open models) and transcription of calls	United StatesGroq may also process in other countries where it operates. An EU region is offered on its Enterprise plan only; not used.

Documents.

What your privacy officer will ask for before the first send.

Data processing agreementOn the web; a PDF follows Privacy noticeHow we use personal data TermsThe agreement for using SYNC Sub-processorsWho processes data, and where

Cold B2B email in the NetherlandsNot published yet

Privacy contactinnovate@isyncso.com

Reporting a security issue.

Found something that looks wrong? Write to us privately first.

Write to: innovate@isyncso.com
What to include: What you found and where, the steps to see it again, and how we can reach you.
When we answer: Not decided yet. Ask us before you sign and we will put it in your contract.
Disclosure policy: Write to innovate@isyncso.com before you share a finding anywhere else. A full disclosure policy is not published yet.

The legal pages are being finalised. Until they are, a fact nobody has confirmed stays in brackets there.

What we do not have yet.

Said plainly, so you do not have to find out later.

No SOC 2 or ISO 27001 certification.We hold neither today.

No self-service export or scheduled deletion.Both run on request. We answer within one month.

No published uptime figure.We do not publish one yet.

Research

The evidence behind this

perspective→What a human approval is worth research→Advice a model may skip is advice it does skip guide→What mailbox providers actually require

Free first look

See who should buy from you this quarter.

Leave your work email. SYNC reads your company’s website and sends you a first look: what you sell, who probably buys it, and up to five companies scored A to D, each with its source.