Legal
Privacy Policy
The short version
- Syncon One is a product of SynconAI. We collect what is needed to run your account and your workspace, and nothing for advertising.
- What your workspace holds (your conversations, customer records and files) belongs to your business. We process it to run the service for you.
- If you sign in with Google, we receive your name, email address and profile picture, and use them only to sign you in and show who you are in your workspace.
- We do not sell personal information, we do not show ads, and we do not use your workspace content or Google data to train AI models.
Who we are
Syncon One is built and run by SynconAI, 800 N King Street, Suite 304, Wilmington, Delaware 19801, United States. In this policy, "we" and "us" mean SynconAI.
This policy covers synconone.com, the Syncon One workspace you sign in to, the chat and voice widget businesses place on their websites, and the public demo.
Our two roles
For your account, your sign-in and our own website, we decide how personal information is used.
For what a workspace holds (conversations with a business's website visitors, its customer records, its files and settings), the business that owns the workspace decides, and we process that information on its behalf to provide the service.
If you talked to an agent on a business's website, that business is responsible for your conversation. Contact them about it, or write to us and we will pass your request on.
What we collect
- Your account: your name, email address and password. The password is stored only as a hash. If you turn on two-step sign-in, the authenticator secret and backup codes are stored encrypted.
- Sign in with Google: your name, email address, profile picture and whether Google has verified the email address. See "Google user data" below.
- Your workspace: the conversations your agents and team have with visitors, people, companies, leads, notes, bookings, uploaded files, the material your agent learns from (website pages and documents you point it to), and your settings.
- Connected services: if you connect a calendar or mailbox, the access tokens the provider gives us, stored encrypted, and the calendar or email data the feature you turned on needs. If you add your own AI provider key, it is stored encrypted.
- Billing: your plan, payment status and invoices. Card details are handled by Creem, our payment provider, and never reach us.
- Website visitors who talk to an agent: the messages, any details the visitor chooses to give (such as a name, email address or phone number), the page they are on, and an identifier kept in the browser's storage so the conversation can continue. In a voice call, what is said is sent to the AI provider so the agent can understand and answer, and the conversation is kept as text.
- Signed-in devices: the IP address and browser of each sign-in, used to keep sessions secure and listed for you in Settings → Security.
- Our own website: anonymous events, such as which page was viewed and which button was pressed, with no cookie and no identifier. Browsers that send Global Privacy Control or Do Not Track send nothing.
How we use it
- To provide Syncon One: sign you in, run your workspace, let your agents answer visitors and hand over to your team, and carry out the features you turn on.
- To keep the service secure: rate-limit sign-in attempts, detect abuse and investigate problems.
- To send the email the service needs: sign-in and password reset links, invitations, receipts, and reports you schedule.
- To take payment for paid plans and credit.
- To answer you when you contact us.
- To understand, in aggregate, how our own website is used, from the anonymous events above.
We do not sell personal information. We do not use it for advertising. We do not use your workspace content or Google user data to train AI models.
Google user data
When you choose "Continue with Google", Google shares your name, email address, profile picture and email verification status with us (the openid, email and profile scopes). We do not receive your Google password, and signing in does not give us access to your Gmail, Drive, Contacts, Calendar or any other Google data.
We use this information only to create your Syncon One account, sign you in, and show your name and picture to the people in your workspace. It is stored with your account and deleted when your account is deleted.
If you separately connect a Google calendar or mailbox to a workspace, you are asked for that access on Google's own screen, and the data is used only to provide the feature you connected, such as offering free times and booking meetings.
Syncon One's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We use Google user data only to provide and improve the features you can see and use.
- We do not transfer it to others except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you.
- We do not use it for advertising, and we do not sell it.
- No person at SynconAI reads it unless you ask us to, it is needed for security or to comply with the law, or it has been aggregated and anonymised.
You can disconnect Google at any time in Settings → Security, and remove Syncon One's access from your Google account at myaccount.google.com/permissions.
Where it is stored
The application and its database run on servers SynconAI operates, and the database is backed up daily. Files and exports are kept in private Cloudflare R2 storage. Your information may be processed in countries other than yours, including the United States, and we protect it the same way wherever it is.
How long we keep it
- Your account and workspace are kept while they are open.
- A workspace can remove closed conversations and uploaded files automatically after a period it chooses, in Settings → Data. Otherwise they are kept until removed.
- Workspace exports are deleted after seven days.
- A request to delete a person, a visitor, a conversation or a whole workspace is carried out after a 24-hour grace period, so a mistaken request can be withdrawn.
- Deleted information can remain in our daily database backups until those backups are replaced.
How we protect it
Everything travels over HTTPS. Passwords are hashed; access tokens, provider keys and other secrets are encrypted before they are stored; every request for workspace data is checked against the signed-in person's workspace and role. The full detail is on our Security & Trust page at synconone.com/enterprise/security.
Your choices and rights
- See and correct your account details in Settings.
- Export your workspace's records as CSV, on a paid plan.
- Ask us to delete your account, or ask your workspace's owner to delete the workspace.
- Disconnect Google or Microsoft sign-in in Settings → Security.
- Ask us for a copy of the personal information we hold about you, or object to how we use it.
Write to contact@synconai.com and a person will answer. Depending on where you live, you may also complain to your data protection authority.
Children
Syncon One is a service for businesses and is not meant for anyone under 16. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use your information in a meaningful way, we tell account holders by email or in the product before it takes effect.
Contact
SynconAI, 800 N King Street, Suite 304, Wilmington, Delaware 19801, United States.
Email: contact@synconai.com