Privacy Policy

1. Introduction

This Privacy Policy explains how Syncding.com ("we", "us", "our") collects, uses, shares, and protects your personal data. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller Information

3. Personal Data We Collect

3.1. Data You Provide Directly

• Account information (name, email, password)
• Billing information (processed by Stripe.com)
• Profile information
• Communication preferences
• Support requests and correspondence

3.2. Data Collected Automatically

• IP address
• Browser type and version
• Operating system
• Device information
• Usage data
• Cookies and similar technologies (see our Cookie Policy)

3.3. Data From Third Parties

• Payment processing information from Stripe.com
• Authentication data from third-party login providers

4. Legal Basis for Processing

We process your personal data under the following legal bases:

4.1. Contract Performance

• Account management
• Service provision
• Customer support
• Billing and payment processing

4.2. Legal Obligations

• Tax and accounting requirements
• Law enforcement requests
• Regulatory compliance

4.3. Legitimate Interests

• Service improvement
• Security measures
• Analytics
• Communication about service updates

4.4. Consent

• Marketing communications
• Cookie usage (non-essential)
• Processing of sensitive data (if any)

5. How We Use Your Data

We use your personal data to:

• Provide and maintain our services
• Process payments
• Send service notifications
• Provide customer support
• Improve our services
• Prevent fraud and abuse
• Comply with legal obligations

6. Data Sharing and Recipients

6.1. Third-Party Service Providers

• Payment processors (Stripe.com)

6.2. Legal Requirements

We may share data when required by law or to:

• Comply with legal obligations
• Protect our rights and safety
• Respond to law enforcement requests

7. International Data Transfers

7.1. Our Data Transfers

While we primarily process and store your data within the EU/EEA, some limited data transfers outside this region may occur through our use of third-party service providers.

7.2. Stripe.com Data Processing

As our payment processor, Stripe.com (Stripe, Inc.) may transfer and process your payment data internationally. Specifically:

• Stripe.com acts as a data processor for payment-related data
• They may process data in countries outside the EU/EEA
• Stripe.com ensures compliance with GDPR through:
  • EU Standard Contractual Clauses (SCCs)
  • Appropriate technical and organizational measures
  • Regular security audits and certifications

7.3. Data Transfer Safeguards

When any international transfers occur, we ensure appropriate safeguards through:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Binding Corporate Rules (where applicable)
• Data Processing Agreements with strict privacy and security requirements

7.4. Transfer Impact Assessments

We conduct regular transfer impact assessments to ensure that:

• Data recipients provide adequate levels of protection
• Appropriate technical measures are in place
• Data subject rights are enforceable
• Effective legal remedies are available

For more information about Stripe.com's privacy practices, you can refer to their privacy policy.

8. Data Retention

We retain your data for:

• Active accounts: Duration of service provision
• Closed accounts: 30 days after closure
• Legal requirements: As required by law
• Backup purposes: Up to 90 days

9. Your Rights Under GDPR

You have the right to:

• Access your data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
• Lodge a complaint with a supervisory authority

10. Data Security

We implement appropriate technical and organizational measures including:

• Encryption at rest and in transit
• Access controls
• Regular security assessments
• Employee training
• Incident response procedures

11. Children's Privacy

We do not knowingly collect or process data from children under 16. If we become aware of such data, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes through:

• Email notifications
• Website notices
• In-app notifications

13. Data Protection Officer

While we are not required to have a DPO, privacy-related inquiries can be directed to:

14. How to Contact Us

For any privacy-related questions or to exercise your rights:

15. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority. In Switzerland, this is: