In short
- Synazur runs inside your company’s own infrastructure. Business data your organisation connects to Synazur stays under your organisation’s control. We only see it if your organisation asks us for support and approves our access.
- We collect very little about website visitors. Our website does not use cookies, analytics, advertising trackers or third-party fonts.
- We never sell personal data, and we do not use it to train AI models offered to anyone else.
- You can ask us to access, correct or erase your personal data by writing to kaustubh@synazur.com.
1Who we are and what this policy covers
Synazur is a product of Envirovexa (OPC) Private Limited, a company incorporated in India under the Companies Act, 2013 (CIN U62011PN2026OPC260382), with its registered office at [registered office address] (“we”, “us” or “our”).
- visitors to synazur.com;
- people who email us, request a demo, or otherwise contact us;
- business contacts at our prospective and existing customers, partners and vendors; and
- administrators and users at customer organisations, in relation to licences, accounts, billing and support.
2If your organisation uses Synazur
Synazur is installed in infrastructure that our customer controls, such as its own servers or its own cloud account. Each customer decides which systems to connect (for example its CRM, ERP, ticketing tools, Slack or Microsoft Teams), which data to include or exclude, and who can see the results.
For personal data processed inside a customer’s Synazur deployment, the customer organisation is the Data Fiduciary, and its own privacy notices apply. If you are an employee, customer or contact of an organisation that uses Synazur, please direct privacy questions and requests about that data to that organisation.
We act only as a Data Processor for that customer, under a written agreement, and only in limited situations: when the customer asks us for support and approves our access, or shares files with us to fix a problem. We do not copy customer data out of the customer’s environment for our own purposes. If you contact us about data held in a customer’s deployment, we will pass your request to that customer.
If a customer chooses to connect a third-party service, such as a messaging platform, email provider or AI model, data is exchanged between the customer’s environment and that service under the customer’s own agreement with that provider.
3Personal data we collect
Data you give us
- Contact details: your name, work email address, phone number, company and job title, when you email us, request a demo or meet with us.
- Your messages: the content of emails and notes from calls or meetings with you.
- Contract and billing details: names and contact details of signatories, billing and technical contacts, and related records.
- Support requests: your contact details and the description of the issue. Any files or screenshots that a customer shares to fix a problem are handled as described in Section 2.
Data collected automatically
- Website logs: when you visit synazur.com, our website hosting provider’s servers record standard technical information, such as your IP address, browser type, the page requested, the referring page, and the date and time.
- Licence and product information: licence keys, deployment identifiers, software version and usage counts needed to manage licences. This does not include the content of customer data. Additional technical telemetry is off unless the customer turns it on.
Data from other sources
We may receive business contact details from people who introduce us, or collect them from public professional sources such as company websites, to contact businesses that may be interested in Synazur.
We do not ask website visitors or business contacts for sensitive information such as financial account details, health information, biometric data or passwords. Please do not send it to us.
4How we use personal data and why
| What we do | Data used | Legal ground |
|---|---|---|
| Reply to enquiries, arrange demos and discuss pilots | Contact details, messages | You gave us the data for this purpose, or your consent |
| Deliver pilots, licences, implementation and support under our contracts | Contract, billing and support details; licence information | You or your organisation gave us the data for this purpose |
| Invoicing, tax filings, accounting and statutory records | Contract and billing details | Compliance with law |
| Keep our website and systems secure and investigate incidents | Website logs, access records | Compliance with law, including security and log-retention requirements |
| Send occasional business emails about Synazur | Name and work email | Your consent, or you gave us your details for this purpose; you can opt out at any time |
| Establish, exercise or defend legal claims and respond to lawful requests from authorities | Any relevant data | Compliance with law |
Where we rely on consent, you can withdraw it at any time by writing to us, and withdrawal is as easy as giving consent. Withdrawal does not affect processing that happened before it.
We do not sell personal data. We do not use it for advertising, and we do not use personal data to train AI models made available to anyone else.
7Sub-processors for customer engagements
A sub-processor is a third party we engage to process personal data on behalf of our customers. Customers are notified of new sub-processors in advance, as set out in their agreement with us.
| Sub-processor | Purpose | Location |
|---|---|---|
| Namecheap, Inc. (Private Email) | Business email hosting, including support requests and troubleshooting files that customers send us by email | United States |
| Google Workspace | For business needs and internal team communication | United States |
Third-party services that a customer chooses to connect to Synazur under its own account are not our sub-processors.
8Transfers outside India
We are based in India, and we aim to keep personal data within India wherever practical. Some of our service providers process data on servers outside India. In particular, our business email is hosted by Namecheap, Inc. in the United States, so emails you send us, including any files attached to support requests, are stored there. We transfer personal data outside India only as permitted under Indian law.
9How long we keep personal data
We keep personal data only as long as needed for the purpose it was collected for, or as long as the law requires.
| Type of data | How long we keep it |
|---|---|
| Enquiries and demo requests that don’t lead to a contract | 24 months after our last interaction with you |
| Contract, billing and account records | For the duration of the relationship, then for the periods required under tax, accounting and company law (generally up to eight years) |
| Support request records | For the duration of the customer contract, plus one year |
| Files shared by customers for troubleshooting | Deleted within 30 days after the support request is closed, unless the customer agrees otherwise |
| Website and security logs | At least one year, or longer if the law requires it |
| Business email list | Until you opt out |
When data is no longer needed, we delete it or make it anonymous.
10How we protect personal data
We take reasonable steps to protect the personal data we hold against unauthorised access, disclosure, alteration, loss and destruction. Access is limited to people who need it and who are bound by confidentiality, and files shared with us for support are deleted after the issue is resolved.
For Synazur deployments, the software runs in the customer’s own infrastructure, so the customer’s IT and security team secures, tests and monitors it. If they find a security issue in Synazur, they report it to us at kaustubh@synazur.com and we fix it.
No method of transmission or storage is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.
11Your rights
For personal data we hold as Data Fiduciary, you have the right to:
- Access a summary of the personal data we process about you, how we process it, and who we have shared it with;
- Correct, complete or update inaccurate or incomplete personal data;
- Erase personal data we no longer need or no longer have a lawful ground to keep, unless the law requires us to retain it;
- Withdraw consent where we rely on it;
- Nominate another person to exercise your rights if you die or become unable to do so;
- Raise a grievance with our Grievance Officer (Section 14); and
- Complain to the Data Protection Board of India if you are not satisfied with our response to your grievance.
To use any of these rights, email kaustubh@synazur.com. We may need to verify your identity before acting on your request. We aim to respond within 30 days, and in any case within the period required by law.
To stop receiving business emails from us, reply “unsubscribe” or write to us at the same address.
If your request concerns data held in a customer’s Synazur deployment, please contact that organisation (Section 2).
12Children
Synazur is a business product, and our website is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
13Changes to this policy
We may update this policy as our services or the law change. We will post the updated version on this page with a new “Last updated” date. If a change is significant, we will take reasonable steps to let affected customers and contacts know.
14Grievance Officer and contact
For questions, requests or complaints about this policy or your personal data, please contact our Grievance Officer:
We acknowledge grievances promptly and aim to resolve them within 30 days.