Privacy grounded in customer control, explicit boundaries, and limited telemetry use.

This policy explains how Syncratic handles information for the portal, APIs, and connected workflows. Syncratic is designed so customer documents, knowledge intelligence, audit records, and workspace content remain under customer control within the customer's own environment.

Effective date: April 8, 2026

Customer-controlled data

Customer workspace content remains customer-controlled. Syncratic does not claim possession or operational control of customer documents, knowledge intelligence, or audit records.

Boundary-respecting architecture

Syncratic is designed for tenant isolation, governed ingestion, and scoped retrieval so the platform enforces clear operational boundaries around customer-owned data.

Limited telemetry for improvement

Syncratic may collect operational telemetry, performance metrics, and model-behavior signals to improve reliability and support model enhancement and tuning without taking possession of customer workspace content.

Information we collect

We may collect account, authentication, deployment, API, connector, usage, and operational telemetry needed to provide and improve Syncratic. This can include profile information, tenant membership data, API activity, support communications, performance metrics, model tuning signals, and connector configuration metadata.

How we use information

We use collected information to provision accounts, authenticate users, secure the platform, investigate incidents, improve reliability, measure product behavior, support model enhancement and tuning, and meet legal obligations.

Customer content and connector data

Customer documents, knowledge intelligence, audit records, and synchronized connector content are intended to remain under customer control in the customer's environment. Syncratic does not claim possession or operational control of that workspace content. Connector credentials are intended to be encrypted at rest, and connector workflows remain subject to customer-configured ingestion scope and policy controls.

Sharing and subprocessors

We may use infrastructure, hosting, authentication, logging, and model-serving providers to operate the platform and telemetry systems. We do not sell customer personal information. We share information only as needed to deliver the service, comply with law, or protect rights and security.

Retention and deletion

We retain collected account and telemetry information only as long as needed to operate the service, maintain security and auditability, improve system quality, comply with law, and enforce agreements. Customer-controlled workspace content remains governed by the customer's own deployment and retention choices.

Security

We apply administrative, technical, and organizational safeguards intended to protect platform systems, credentials, and collected telemetry from unauthorized access, alteration, disclosure, or destruction. No system can guarantee absolute security, so customers should use strong access controls and report suspected incidents promptly.

Your choices

Customers may manage connectors, API credentials, deployment choices, and account information through the product or by contacting Syncratic. Depending on jurisdiction, individuals may have rights to access, correct, delete, or restrict certain personal information collected by Syncratic.

Contact

For privacy questions, data requests, or security concerns, contact Syncratic through the official support or company channels listed on the portal.