Privacy Policy
Synacl Labs ("Synacl", "we", "us", "our") operates the Synacl IoT platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. Please read it carefully.
1. Information We Collect
Account information: When you register, we collect your name, email address, and password (stored as a cryptographic hash).
Device and telemetry data: Data transmitted by your IoT devices and gateways through the Service, including sensor readings, status messages, and metadata such as device identifiers.
Payment information: When you purchase a paid plan, payment is processed by Razorpay. We receive transaction identifiers and order metadata but do not store your card details.
Usage and log data: IP addresses, browser/device type, pages visited, and approximate location (country-level) derived from your IP address at the time of account creation and login. This is used for security and analytics.
Cookies and local storage: We use browser cookies and localStorage to keep you signed in, remember preferences, and improve the Service. See Section 6.
2. How We Use Your Information
- To provide, operate, and maintain the Service.
- To process billing and manage your subscription.
- To send transactional emails (account verification, password reset, plan notifications).
- To detect and prevent fraud, abuse, or security incidents.
- To improve the Service through aggregate, anonymized usage analytics.
- To comply with legal obligations.
We do not sell your personal information or device data to third parties. We do not use your IoT telemetry data for purposes beyond providing the Service.
3. Data Storage and Security
Your data is stored in MongoDB and Redis on servers operated by Synacl Labs. We implement industry-standard security measures including TLS encryption in transit, hashed passwords (bcrypt), JWT-based authentication, and access control lists for MQTT brokers.
Telemetry data is retained according to your plan's event retention period. Account data is retained for as long as your account is active. After account deletion, we may retain anonymized analytics data.
4. Data Sharing
We strictly believe that your data belongs to you. We do not sell, rent, or trade your personal information or device data to any third party for commercial benefit — under any circumstances. The only situations in which we share your information are:
- Service providers: Payment processing (Razorpay), email delivery (Resend), and hosting infrastructure. These parties are bound by confidentiality agreements and may only use your data to perform services for us.
- Legal requirements: If compelled by law, court order, or a governmental authority where we have no legal alternative to comply. In such cases we will notify you to the extent permitted by law.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email or a prominent notice on the Service before that happens.
5. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and associated personal data.
- Portability: Request an export of your device and telemetry data.
To exercise any of these rights, contact us at privacy@synacl.com. We will respond within 30 days.
6. Cookies and Local Storage
We use the following categories of cookies and browser storage:
- Essential: Authentication tokens stored in localStorage to keep you signed in. These are necessary for the Service to function.
- Preference: Settings such as dashboard layout, theme preference, and onboarding state stored in localStorage.
We do not currently use third-party advertising or cross-site tracking cookies. You can clear browser localStorage at any time, which will sign you out of the Service.
7. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us at privacy@synacl.com.
8. International Users
Synacl Labs is incorporated in India. Our servers, however, are located in Frankfurt, Germany (European Union). Your data is stored and processed within the EU. If you access the Service from outside the EU, your data will be transferred to and stored on servers in Frankfurt, Germany. By using the Service, you consent to this transfer.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or by a notice within the Service. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes become effective constitutes your acceptance of the revised policy.
10. Contact Us
For privacy-related questions, contact: privacy@synacl.com