Trust
Privacy Policy
This policy explains what personal data SynOS Labs LLP (“SynOS”, “we”) collects, why, and what you can do about it. It covers the synos.in website and the SynOS platform where we operate it. It does not cover self-hosted deployments running inside a customer's own infrastructure. There, the customer is the data controller and their own policy applies.
The short version
We collect business contact details you give us, and standard website analytics. If you use a SynOS environment that we host, we process the workspace data you connect to it, on your instructions.
We do not sell personal data. We do not run advertising profiles. We do not use customer content to train models.
Our default product deployment is self-hosted, in which case your operational data never reaches us at all.
1. Who we are
SynOS Labs LLP, Varthur, Gunjur, Bengaluru, Karnataka 560087, India. Contact: privacy@synos.in.
For the synos.in website and our own sales and marketing activity, we are the data controller (a “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023). For data inside a customer's SynOS workspace, the customer is the controller and we act only as a processor on their instructions.
2. What we collect
a. Website visitors
- Usage analytics via Google Analytics 4, covering pages viewed, referrer, coarse location (country and city), device and browser type, and interaction events such as which call-to-action was clicked. Google Analytics 4 does not log or store IP addresses: the IP is used momentarily to derive coarse location and is then discarded.
- Cookies and similar storage set by Google Analytics for the above. No advertising or cross-site tracking cookies are set by us.
b. When you contact us or request access
- Details you submit through the early-access form or the scorecard, typically name, work email, company and your answers. These are delivered to us by email through Web3Forms.
- Details you provide when booking a demo through our Google Calendar booking link.
- Correspondence you send us by email, and notes we take about our conversations for the purpose of the commercial relationship.
c. Customers using a SynOS environment we host
- Account and workspace identifiers, user names and work email addresses of the people the customer provisions.
- Content the customer connects or uploads, and the context derived from it. This may contain personal data; what it contains is determined by the customer, not by us.
- Operational telemetry (agent runs, tool calls, errors, latency and cost), used to operate the service and support the customer.
d. What we do not collect
- We do not knowingly collect special-category or sensitive personal data through this website.
- We do not collect payment card details on this website; invoicing is handled directly under contract.
- In self-hosted deployments we collect none of the data in section (c). It stays in the customer's infrastructure.
3. Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Responding to enquiries and running a sales conversation | Business contact details, correspondence | Your request; our legitimate interest in operating a business |
| Understanding which content and pages are useful | Website analytics | Our legitimate interest in measuring and improving the site. You can opt out at any time. See Cookies. |
| Providing, operating and supporting a hosted SynOS environment | Account data, workspace content, telemetry | Performance of the contract with the customer; processed on the customer's instructions |
| Security, abuse prevention and debugging | Logs, telemetry | Legitimate interest in keeping the service secure |
| Meeting legal, tax and accounting obligations | Contact and transaction records | Legal obligation |
4. What we never do
- We do not sell personal data, and we do not share it with data brokers.
- We do not use customer content to train machine-learning models, our own or anyone else's.
- We do not use customer content from one customer to improve the service for another.
- We do not run behavioural advertising and we do not embed advertising trackers.
5. Who we share it with
We share personal data only with the service providers we rely on to run the business and, where applicable, the hosted platform. Every one of them is listed, with what it is used for, on our Subprocessors page.
We may also disclose data where we are legally required to, or to establish or defend legal claims, or in connection with a merger or acquisition, in which case we will say so before your data becomes subject to a different policy.
6. International transfers
We are based in India. Some of the service providers listed on the Subprocessors page process data outside India, including in the United States and the European Union. Where that happens we rely on the provider's contractual data-protection commitments, including standard contractual clauses where applicable. Customers who require data residency in a specific jurisdiction should deploy self-hosted, where residency is entirely under their control.
7. How long we keep it
- Website analytics: retained by Google Analytics for the retention period configured on our property. The longest period Google Analytics 4 offers for user-level and event-level data is 14 months; aggregate reporting data is retained beyond that by Google.
- Enquiries and business contacts: for as long as the relationship is active, and for up to 24 months after the last meaningful contact, unless you ask us to delete sooner.
- Hosted customer data: for the term of the agreement. Deleted on written request or on termination, subject to the retention period agreed in the contract.
- Records we must keep by law: for the statutory period, typically eight years for accounting records in India.
8. Security
Our technical and organisational measures are set out in detail on our Security page.
9. Your rights
Depending on where you are, you may have the right to access the personal data we hold about you, correct it, have it erased, restrict or object to processing, withdraw consent, receive it in a portable form, and complain to a supervisory authority. Under India's DPDP Act, 2023 you additionally have the right to nominate another person to exercise your rights in the event of death or incapacity.
To exercise any of these, email privacy@synos.in. We acknowledge requests within 72 hours and aim to resolve them within 7 working days, and in any event within the period required by applicable law. We may need to verify your identity first. Exercising these rights costs you nothing.
Withdrawing consent. Where we rely on your consent, you can withdraw it at any time by emailing privacy@synos.in, or by using the unsubscribe link in any newsletter. Withdrawal is as easy as giving consent, and does not affect processing carried out before you withdrew.
If your data sits inside a customer's SynOS workspace, direct your request to that customer; we will support them in answering it.
10. Grievance redressal
If you are unhappy with how we have handled your personal data, contact our grievance officer:
Anoop Jawahar
SynOS Labs LLP, Varthur, Gunjur, Bengaluru, Karnataka 560087, India
privacy@synos.in
If we do not resolve your complaint, you may escalate to the Data Protection Board of India, or to your local supervisory authority if you are outside India.
11. Cookies
We use only the cookies and local storage set by Google Analytics 4 (measurement ID G-MXVRX5VMJR) to measure site usage. We set no advertising, retargeting or cross-site tracking cookies. You can block or delete them through your browser settings, use a private window, or install Google's opt-out browser add-on. The site works fully either way.
12. Children
SynOS is a business product. This website and the platform are not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.
13. Changes to this policy
We will update this page when our practices change and revise the effective date at the top. For material changes affecting contracted customers, we give notice through the contact channel in the agreement.
Contact
SynOS Labs LLP
Varthur, Gunjur, Bengaluru, Karnataka 560087, India
privacy@synos.in