legal · privadesa
Privacy Policy
1. Who we are
Syrakon is the data controller for the personal data we process directly: your account, billing, and support correspondence. When you use the Service to process data about your own end users, you are the controller and Syrakon is the processor — that relationship is governed by the DPA available from legal@syrakon.com.
2. What we collect
Account data: email, name if provided, organisation membership.
Billing data: handled by Paddle as merchant of record. We see transaction metadata, not card details.
Service data: what you store using the Service. Encrypted in transit, and encrypted at rest where the underlying storage supports it.
Support correspondence: emails and tickets you send us.
Operational logs: request metadata such as IP, timestamp and endpoint, kept for security and debugging. Retained 90 days.
3. Why we process it
To provide the Service (contractual basis).
To bill you (contractual basis, legitimate interest).
To respond to support requests (contractual basis).
To secure the Service (legitimate interest).
To comply with legal obligations, such as tax and fraud prevention.
4. Where it lives
Customer data is hosted in the European Union. Application servers and databases run in Gravelines, France, on OVH infrastructure. No data is transferred outside the EU or EEA without a valid transfer mechanism, and we avoid such transfers wherever possible.
5. Subprocessors
We use a small set of subprocessors:
OVH — application and database hosting, Gravelines, France.
Paddle — merchant of record, billing.
Brevo — transactional email.
An updated subprocessor list is available on request, and any change material to your contract is notified in advance.
6. Retention
We keep your account data while you have an active account, plus the period required by tax and accounting law, typically five to seven years. Operational logs are kept 90 days. Support tickets are kept three years for institutional memory.
7. Your rights
You can request access, rectification, deletion, restriction, portability or objection at legal@syrakon.com. We respond within 30 days. You also have the right to lodge a complaint with your supervisory authority.
8. Cookies
This site uses only the strictly necessary cookies required for a dashboard session. No analytics cookies, no ad cookies, no third-party trackers.
9. Changes
Material changes are notified by email at least 30 days in advance. Trivial changes such as typos and clarifications are reflected here without notice — see the "last updated" date above.
10. Contact
Privacy questions: legal@syrakon.com.