1. Introduction
Syntro Inc. ("Syntro," "we," "our," or "us") provides an AI-native procurement operating system that helps hardware manufacturers streamline sourcing, supplier coordination, and purchasing workflows (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website at usesyntro.com or use our Service.
This policy applies to information about individuals—such as employees and authorized users of our business customers ("Customers")—who interact with our website or Service. It does not govern the Customer Data (defined below) that our Customers submit to the Service, which is subject to our agreement with that Customer.
By signing a Purchase Order Agreement ("PO") that references this Privacy Policy, or by using our website or Service, you agree to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly to us, including when you:
- Create an account or request a demo (name, work email address, job title, company name, phone number)
- Communicate with us via email, chat, or support channels
- Sign agreements or purchase orders
- Respond to surveys or participate in research
2.2 Information Collected Automatically
When you use our website or Service, we automatically collect:
- Log data: IP address, browser type, operating system, pages visited, timestamps, and referring URLs
- Usage data: features accessed, actions taken within the Service, session duration, and performance metrics
- Device information: device type, unique device identifiers, and network information
- Cookies and similar tracking technologies (see Section 8)
2.3 Customer Data
Our Customers upload or connect business data to the Service—such as purchase orders, supplier information, bills of materials, pricing, and procurement workflows ("Customer Data"). Syntro processes Customer Data on behalf of and under the instructions of the Customer. Our use of Customer Data is governed by our agreement with the Customer, not this Privacy Policy. If you are an end user of a Customer's Syntro account and have questions about how your information is handled, please contact that Customer directly.
2.4 Information from Third Parties
We may receive information about you from third-party sources, such as:
- Integration partners and connected business systems (e.g., ERP systems, email platforms) that Customers authorize to connect to the Service
- Publicly available sources such as LinkedIn or company websites, used for sales and marketing purposes
3. How We Use Information
We use the information we collect to:
- Provide, operate, maintain, and improve the Service
- Create and manage your account and respond to your requests
- Process transactions and send related notices (invoices, receipts, payment confirmations)
- Send product updates, security alerts, and administrative messages
- Send marketing and promotional communications (where permitted by law and subject to your opt-out rights)
- Monitor and analyze usage trends to improve user experience and product features
- Detect, investigate, and prevent security incidents, fraud, and abuse
- Comply with legal obligations
We do not use Customer Data to train, fine-tune, or improve any AI or machine learning model, except in aggregated and de-identified form that cannot reasonably be associated with or used to identify a Customer or individual.
4. How We Share Information
We do not sell your personal information. We may share your information as follows:
4.1 Service Providers
We share information with third-party vendors and service providers that perform services on our behalf, including cloud infrastructure, data hosting, analytics, customer support, and payment processing. These providers are contractually required to handle information only as directed by us and in accordance with this Privacy Policy.
4.2 Sub-processors
In providing the Service, we may engage sub-processors—including AI and machine learning service providers—to process Customer Data on our behalf. A current list of sub-processors is available to Customers upon written request. All sub-processors are subject to data protection obligations no less protective than those we apply.
4.3 Business Transfers
If Syntro is involved in a merger, acquisition, financing, reorganization, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will provide notice before your information is subject to a materially different privacy policy.
4.4 Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal process (such as a subpoena, court order, or government request), or to protect the rights, property, or safety of Syntro, our Customers, or others.
4.5 With Your Consent
We may share your information for other purposes with your prior consent.
5. Data Retention
We retain personal information for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, and comply with our legal obligations. When a Customer terminates their agreement with us, we make Customer Data available for export for a period of at least sixty (60) days, after which we delete it from our systems except as required by law or our standard backup retention policies.
6. Security
We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction, consistent with industry standards for products of similar type, complexity, and stage of development. Such safeguards may include encryption in transit and at rest, access controls, audit logging, secure credential handling, and other measures reasonably designed to protect your information.
No method of transmission over the internet or method of electronic storage is completely secure. If you believe your information has been compromised, please contact us immediately at privacy@usesyntro.com.
In the event of a confirmed security incident involving personal information, we will notify affected Customers without undue delay and in accordance with applicable law.
7. Your Rights and Choices
7.1 Access and Correction
You may request access to or correction of your personal information by contacting us at privacy@usesyntro.com. We will respond to your request within a reasonable timeframe.
7.2 Deletion
You may request deletion of your personal information, subject to certain exceptions (such as information we are required to retain by law or for legitimate business purposes). If you are an end user of a Customer's account, please direct deletion requests to that Customer.
7.3 Marketing Opt-Out
You may opt out of receiving marketing emails from us by clicking the "unsubscribe" link in any marketing email or by contacting us at privacy@usesyntro.com. You will continue to receive transactional and account-related communications.
7.4 California Residents
California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your California privacy rights, contact us at privacy@usesyntro.com.
8. Cookies and Tracking Technologies
We use cookies and similar technologies (such as web beacons and pixel tags) on our website to:
- Keep you logged in and remember your preferences
- Understand how visitors use our website (analytics)
- Measure the effectiveness of our marketing campaigns
You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our website. We do not currently respond to "Do Not Track" signals.
9. Third-Party Links
Our website and Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.
10. Google User Data and Limited Use
When a Customer connects a Google account (Gmail) to the Service, Syntro accesses Google user data only to provide user-facing procurement features: reading inbound supplier email—including message bodies and attachments—to extract and normalize quotes and purchase-order confirmations, matching supplier replies to the correct request, reading the connected account's signature and address, and sending the user's own requests for quote, purchase orders, and follow-ups from the user's mailbox at the user's direction.
Syntro's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing procurement features described above.
- We do not transfer Google user data except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition, and only with your consent where required.
- We do not use Google user data for serving advertising, including retargeting, personalized, or interest-based advertising.
- We do not allow humans to read Google user data unless we have your affirmative consent to view specific messages, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized for internal operations. We do not use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on our website and updating the "Last Updated" date above. Where required by law, we will provide additional notice (such as via email). Your continued use of the Service after any update constitutes your acceptance of the revised policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
Syntro Inc.
Attn: Privacy
28 Geary St, Suite 650 #317
San Francisco, CA 94108
privacy@usesyntro.com