This Privacy Policy explains how Syn2C ("Syn2C", "we", "us" or "our") collects, uses, shares and protects personal information when you visit syn2c.com, apply for the private beta or use Syn2C services. It also explains the cookies we set, the analytics and AI providers we rely on, and the choices and rights available to you.
1. Information we collect
Information you provide to us may include your name, work email address, company or store URL, ecommerce platform, monthly campaign frequency, monthly campaign budget, campaign or competitor references, and the content of messages you send us.
If you participate in the Syn2C beta, we may process account details and commerce data you choose to connect or provide, such as product, price, inventory, cost, market, order and campaign information. We do not ask you to provide customer payment-card details through the marketing website.
Our hosting and security providers automatically process technical information such as IP address, browser type, device information, timestamps, requested pages and diagnostic logs. We may also receive referral or campaign parameters included in a URL.
Where analytics is enabled under your cookie choice or the rules applicable to your location, we and our analytics provider collect information about how you use the website: pages viewed, the referring website, approximate location derived from your IP address, device and browser characteristics, session duration, and the pseudonymous identifiers described in section 3. We do not use this information to identify you personally.
2. How we use information
- Respond to enquiries and manage beta applications or waitlist requests
- Provide, operate, secure and support the Syn2C service
- Connect and process authorized commerce data for requested product functionality
- Research market signals and model campaign options, as described in section 5
- Measure website traffic and content performance, where analytics is enabled under your choice or applicable law
- Understand product usage and improve the website, product and customer experience
- Communicate service information and, where permitted, relevant product updates
- Prevent misuse, investigate security events and comply with legal obligations
4. Analytics and measurement
We use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors find and use the website. Google acts as our processor for this purpose under the Google Ads Data Processing Terms.
Google Analytics assigns your browser a pseudonymous identifier and records events such as page views and session activity. It uses your IP address to derive an approximate location and, in Google Analytics 4, does not retain the IP address itself. We do not combine analytics data with your name or email address, and we do not attempt to re-identify individual visitors.
We use Google consent mode. In locations that require prior consent, analytics tags stay in a denied state and are not loaded until you accept. Elsewhere, analytics may be enabled by default where permitted, and the footer Cookie settings provide a persistent way to opt out.
Analytics data is retained in Google Analytics for 14 months, after which Google deletes it on a rolling basis. Aggregated reports that contain no identifiers may be kept longer.
Besides declining analytics cookies on this website, you can install Google's browser add-on to opt out of Google Analytics across all websites.
5. AI and automated processing
Syn2C uses artificial intelligence to research market and competitor signals and to model campaign options. This means that business context you connect or provide — such as commercial goals, product, price, cost, inventory and campaign history — may be sent to frontier model providers, listed in section 7, for processing on our behalf.
Platform access tokens, API keys and other credentials are not included in AI prompts. Customer payment-card details are never processed by Syn2C.
We access these providers through their APIs. Under the API terms of the providers we use, the data we send is not used to train their general-purpose models. A provider may retain it briefly to monitor for abuse before deleting it.
Syn2C does not make decisions about you by automated means alone that would produce legal effects or similarly significant effects. Campaign proposals are recommendations: a person at your organization reviews and approves a proposal before anything is published. You can ask us for information about the logic involved in how proposals are generated.
6. Legal bases for processing
Where applicable data-protection law requires a legal basis, we rely on the following:
- Responding to enquiries and handling beta or waitlist applications — performance of a contract, or steps taken at your request before entering into one
- Providing, securing and supporting the Syn2C service, including AI processing of connected commerce data — performance of a contract, and our legitimate interests in operating and protecting the service
- Analytics cookies and the information they collect — your consent where required; otherwise our legitimate interests in understanding website performance where permitted, subject to your right to opt out
- Product and marketing emails — your consent, or our legitimate interests where permitted for existing business contacts
- Investigating misuse, keeping security records and meeting statutory obligations — compliance with a legal obligation, and our legitimate interests
You may withdraw consent at any time where processing depends on consent. Withdrawal does not affect processing already carried out.
8. Data retention
We retain personal information only for as long as needed for the purposes described in this policy. Our current periods are:
- Beta applications, waitlist entries and enquiries — 24 months after our last contact with you
- Customer account and connected commerce data — for the term of the service, then deleted or anonymized within 90 days
- Analytics data — up to 14 months in Google Analytics, as described in section 4
- Security, access and diagnostic logs — 12 months
- Records we must keep for legal, tax or accounting reasons — for the period the relevant law requires
Where information is no longer needed but cannot yet be deleted, we restrict access to it until deletion is possible.
9. Security
We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse or alteration. These include encryption of traffic in transit, access controls on a need-to-know basis, separation of platform credentials from AI prompts, and logging of administrative access.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where required, within 72 hours, and will inform affected individuals where the law requires it.
No system or transmission method is completely secure, so we cannot guarantee absolute security.
10. International data transfers
Syn2C and its service providers may process information in countries other than the country where you live, including the United States.
For transfers of personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision where one covers the recipient, and otherwise on the European Commission's Standard Contractual Clauses together with a transfer risk assessment and additional safeguards where needed. Analytics data shared with Google may be transferred to Google LLC in the United States on this basis.
You can request a copy of the safeguards that apply to a specific transfer by contacting privacy@syn2c.com.
11. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information; to restrict or object to certain processing; to withdraw consent; and to complain to a data-protection authority.
If you are in the European Economic Area, the United Kingdom or Switzerland, you can exercise the rights above and lodge a complaint with the supervisory authority for your country.
If you are a California resident, you may request to know, delete or correct the personal information we hold, and you may not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by California law. You may use an authorized agent to submit a request on your behalf.
To exercise any of these rights, email privacy@syn2c.com. We may need to verify your identity before completing a request. We respond within 30 days, or within 45 days for requests under California law, and will tell you if we need longer.
You can opt out of non-essential marketing messages using the unsubscribe option in the message, and change your cookie choices through the cookie settings link in the footer. Service and security communications may still be sent when necessary.
12. Children
Syn2C is a business service and is not directed to children. We do not knowingly collect personal information from children under 16 through the website or beta application process.
13. Changes to this policy
We may update this Privacy Policy as Syn2C develops or legal requirements change. We will post the updated version on this page and revise the effective date. Where a change is material — for example a new category of cookie, a new analytics or AI provider, or a new purpose — we will provide additional notice and, where the law requires it, ask for your consent again.
14. Contact us
For privacy questions or requests, contact privacy@syn2c.com. We may need to verify your identity before completing certain requests.