GDPR Notice

1. Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the data controller is:

Synapl Inc.
Email: legal@synapl.com

2. What Personal Data We Process

We process personal data necessary to provide and improve our services, including:

• Identity and contact data, such as name, email address, and organization.
• Account and usage data, including login credentials, workspace activity, and preferences.
• Billing and payment data.
• Technical data, such as IP address, browser type, and device information.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Contract: Processing necessary to provide the services you have requested.
• Consent: Processing based on your consent, which you can withdraw at any time.
• Legal obligation: Processing required to comply with applicable laws.
• Legitimate interests: Processing for our legitimate business interests, such as improving security and service quality, provided your rights do not override those interests.

4. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data in certain circumstances.
• Right to restrict processing: Ask us to limit how we use your data.
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at legal@synapl.com. We will respond within the timeframe required by applicable law.

5. International Data Transfers

Synapl operates globally, and your personal data may be transferred outside the EEA to countries such as Canada, the United States, the Czech Republic, and Spain. Where required, we use appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data remains protected.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this notice, provide the services, comply with legal obligations, resolve disputes, and enforce agreements.

7. Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy. Where required by law, we obtain consent before placing non-essential cookies.

8. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the supervisory authority in your country of residence or where you believe a breach has occurred.

9. Contact Us

For questions about this GDPR Notice or to exercise your data protection rights, contact Synapl Inc. at legal@synapl.com.