Privacy Policy — SyncGaze

1. Information We Collect

Account information: Name, email address, phone number (optional), and organisation details provided during registration.

Usage data: Pages visited, features used, device type, browser, and IP address for analytics and security.

Email content: Emails sent and received through SyncGaze Mail are stored on our servers to provide the email service. We do not read, scan, or analyse your email content for advertising.

Payment data: Billing information is processed by Razorpay. We do not store your full card details on our servers.

2. How We Use Your Information

To provide, maintain, and improve our services.
To process payments and manage your subscription.
To send transactional emails (password resets, billing receipts, service alerts).
To protect against fraud, abuse, and security threats.
To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

3. Data Storage & Security

Your data is stored on servers located in India.
All data in transit is encrypted using TLS/SSL.
We implement DKIM, SPF, and DMARC for email security.
Access to production systems is restricted to authorised personnel only.
We conduct regular security reviews of our infrastructure.

4. Data Sharing

We share your data only in the following circumstances:

Service providers: Payment processing (Razorpay), infrastructure hosting, and email delivery — only as necessary to provide the service.
Legal requirements: When required by law, court order, or government regulation.
Business transfers: In the event of a merger, acquisition, or sale of assets, with prior notice.

5. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable laws, you have the right to:

Access your personal data we hold.
Correct inaccurate or incomplete data.
Delete your account and associated data.
Withdraw consent for optional data processing.
Nominate another person to exercise your rights in case of death or incapacity.

To exercise these rights, contact us at privacy@syncgaze.in.

6. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (Google Analytics) to understand usage patterns. No third-party advertising cookies are used.

7. Data Retention

We retain your data for as long as your account is active. After account deletion, data is permanently removed within 30 days unless legally required to retain it. Backups containing your data are purged within 90 days of deletion.

8. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or in-app notice at least 15 days before they take effect.

10. Grievance Officer

In accordance with the DPDP Act, our Grievance Officer can be contacted at:

Email: privacy@syncgaze.in
We will acknowledge your complaint within 48 hours and resolve it within 30 days.