Privacy Policy

Preface

This privacy policy (“Policy”) applies to the Service operated by Servably, Inc. (“Syncro” “we” or “us”) with mobile applications and a website located at www.syncromsp.com (the “Service”). The Policy is designed to tell you how we collect and use personally identifying information (“PII”) (as defined below) so you can make an informed decision about using our Service. Please read this statement before using our Service or submitting any PII to us. By using our Service, you represent that you are 14 years old or older and you consent to the information collection and use practices described herein. We reserve the right to change the provisions of this privacy policy at any time by posting a revised privacy policy on the Site and indicating on the privacy policy the date it was last updated. Your use of the Service following the posting of such changes or revised statement shall constitute your acceptance of any such changes. We encourage you to review our privacy policy whenever you use our Service to determine if any changes have been made and to make sure that you understand how any PII you provide will be used.

What is “PII”?

As used herein, the term “PII” generally means information that specifically identifies an individual (such as user’s name, address, telephone number, e-mail address, credit card or other account number or geophysical location) or that is associated with an identifiable person (such as demographic information or information about a person’s activities when such information is linked to personally identifying information). PII does not include “aggregate” information, which is data we collect about the use of the Service or categories of Service users, from which any PII has been removed. For example, information that forty-six percent of the Service’s registered users identify themselves as male, is aggregate information. We collect aggregate data for a number of purposes, including to help us understand trends and user needs. This policy in no way limits or restricts our collection of aggregate information.

What PII do we collect?

We do not collect any PII from mere visitors to the Site or Service. Your email address may be collected when you send us an email. If you register (as defined in the Syncro User Access and License Agreement), we will collect your email address, name, organization information, address and credit card and/or other account information and possibly photos.

What other information do we collect?

When you visit our Site, some information is also automatically collected through the use of log files, such as your computer’s Internet Protocol (IP) address, your computer’s operating system, the browser type, hashed identifiers derived from email addresses for the purposes of cross-device tracking for targeting advertising, the address of a referring web Service and your activity on the Service. We use this information for purposes such as analyzing trends, administering the Service, improving customer service, diagnosing problems with our servers, tracking user movement, and gathering broad demographic information for aggregate use. We may also automatically collect certain information through the use of “cookies.” Cookies are small data files that are stored on a user’s hard drive at the request of a Web Service to enable the Service to recognize users who have previously visited them and retain certain information such as customer preferences and history. If we combine cookies with or link them to any of the PII, we would treat this information as PII. If you wish to block, erase, or be warned of cookies, please refer to your browser instructions or help screen to learn about these functions. However, if your browser is set not to accept cookies or if a user rejects a cookie, you will not be able to sign in to your Syncro account and will not be able to access certain Service features or Services.

We may also use third parties to provide certain functionalities or to collect, track and analyze non-personally identifiable usage and statistical information from users, such as the user’s browser type, operating system, browsing behavior and demographic information. These third parties may collect PII from you in connection with the Services they provide and may place cookies, web beacons or other devices on your computer to collect nonpersonal information which may be used, among other things, to deliver advertising targeted to your interests and to better understand the usage and visitation of our Service and the other Services tracked by these third parties. We are not responsible for, and do not control, any actions or policies of any third party service providers.

Usage and Disclosure

We do not sell information to third parties. Syncro only uses your PII to send you the communications noted below and as necessary to provide the Services, as described below.

PII may be used in one or more of the following ways:

• To publicly display information in a manner selected by our customers to their customers.
• To register a customer and process payments. Credit card processing is performed by a PCI compliant third party processor and such information is not processed or retained by Syncro.
• To have a record of who posted content to the Service.
• To send periodic emails: The email address you provide may be used to send you information and updates pertaining to the Services, and, if you do not “opt out”, to send you occasional company news, updates, or related product or service information.

We do not sell, share, or rent any PII to others in ways different from what is disclosed in this Policy without first obtaining your consent, although we may provide aggregate information or other non-personal information to third parties without your authorization. We may share your contact information with third parties if you have indicated to us that you wish to receive information from such parties. In the event that we engage or partner with third party vendors, consultants or other service providers in connection with the operation of our business (“Service Providers”), we may share PII with such Service Providers who need access to such information to carry out their work for us. You should also note that information that you provide to us for posting to the Service will be posted for display in the manner you select. Your posting of such information to our Service constitutes your consent to display such information in such manner. We also may disclose personal information when we are required to or we believe it is appropriate to comply with the law (e.g., a lawful subpoena, warrant or court order); to enforce or apply this privacy policy or our other policies or agreements; to initiate, render, bill, and collect for amounts owed to us; to protect our or our customers’ rights, property or safety; to protect our customers from fraudulent, abusive, or unlawful use of our Service or Service; or if we believe that an emergency involving the danger of death or serious physical injury to any person requires disclosure of communications or justifies disclosure of personal information. In addition, information about our customers, including personal information, may be disclosed as part of any merger, acquisition, debt financing, sale of Syncro assets, as well as in the event of an insolvency, bankruptcy or receivership in which personally identifiable information could be transferred to third parties as one of the business assets of the Syncro.

Please note: The Service may contain links to other Services. Please be aware that although we may participate in or utilize such other Services, we are not responsible for the privacy practices of such other Services. We encourage you to be aware when you leave our Service and to read the privacy policies of any Web Service that collects personally identifiable information. Similarly, if you entered this Service through another Web Service, we are also not responsible for the privacy practices of that Service, and you should review the privacy policy of the originating Service before providing any personal information to that Service. This privacy policy applies solely to information collected by us.

Google. Our Services use Google Analytics to help analyze how users use the Services. The tool uses “cookies,” which are text files placed on mobile device, to collect standard Internet log information and visitor behavior information in an anonymous form. The information generated by the cookie about your use of the Services (including IP address) is transmitted to Google. This information is then used to evaluate visitors’ use of the Services and to compile statistical reports for Syncro.

What steps do we take to protect your information online?

Syncro endeavors to secure your personal information from unauthorized access, use or disclosure by putting into place physical, electronic and managerial procedures to safeguard the information we collect through this Service. Credit card information is encrypted during transmission and payment processing is performed by a PCI compliant third party processor and such information is not processed or retained by Syncro. Other account information is accessible online only through the use of a password and data fields calling for personally identifying information are encrypted when in storage and in transmission. Please be aware, however, that despite our efforts, no security measures are perfect or impenetrable. To protect the confidentiality of your personal information, you must keep your password confidential and not disclose it to any other person. You are responsible for all uses of the Service by any person using your password. Please advise us immediately by emailing us at help@syncromsp.com if you believe your password has been misused. You should also note that email is not secure, and you should not send any confidential or sensitive information to us via an unsecured email.

Data Privacy for California Residents

This section applies solely to visitors and users of our Site and services who reside in the State of California. We have adopted this notice to comply with the California Consumer Privacy Act of 2018 (the “CCPA”) and the California Online Privacy Protection Act (“CalOPPA”), and any terms defined in the CCPA or CalOPPA have the same meaning when used in this notice.

For the purposes of this section “California Data Subject” shall mean: (1) an individual who is in the State of California for other than a temporary or transitory purpose, and (2) an individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.

Information We Collect

Syncro collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California Data Subject or device (“personal information”). In particular, Syncro has collected the following categories of personal information from California Data Subjects within the last twelve (12) months:

Sources of Personal Information

Syncro obtains the personal information listed above from the following sources:

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

1. To fulfill the purpose for which you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may use personal information you provide us to provide technical support. In addition, we may use the above information:
2. To provide, support, personalize, and develop our websites, products, and/or services;
3. To create, maintain, customize, and secure your account with us;
4. To process your requests, purchases, transactions, and payments and prevent transactional fraud;
5. To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses;
6. To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business;
7. To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations; and
8. As described to you when collecting your personal information or as otherwise set forth in the CCPA.

Syncro will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

International Transfer

Your information, including personal information, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside United States and choose to provide information to us, please note that we transfer and process the data, including your personal information, outside the EEA/UK and Canada. Your consent to this Policy followed by your submission of such information represents your agreement to that transfer.

We will take all the steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Policy and no transfer of your personal information will take place to an organization or a country unless there are adequate controls in place including the security of personal information.

Your Rights and Choices

This section describes your CCPA rights and explains how to exercise those rights.

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and verify your request, we will disclose to you:

1. The categories of personal information we collected about you;
2. The categories of sources for the personal information we collected about you;
3. Our business or commercial purpose for collecting or selling that personal information;
4. The categories of third parties with whom we share that personal information;
5. The specific pieces of personal information we collected about you (also called a data portability request);
6. If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
   1. sales, identifying the personal information categories that each category of recipient purchased; and
   2. disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.We may deny your deletion request if retaining the information is necessary for us or our service providers to:Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
7. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
8. Debug products to identify and repair errors that impair existing intended functionality;
9. Exercise free speech, ensure the right of another California Data Subject to exercise their free speech rights, or exercise another right provided for by law;
10. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.);
11. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
12. Enable solely internal uses that are reasonably aligned with California Data Subject expectations based on your relationship with us;
13. Comply with a legal obligation; and
14. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

To exercise the access, data portability, and deletion rights described above, please submit a verifiable California Data Subject request to us by sending us an email at help@syncromsp.com or calling us at +1 856-579-6276.

Only you or a person registered with the California Secretary of State, that you authorize to act on your behalf, may make a verifiable California Data Subject request related to your personal information. You may also make a verifiable California Data Subject request on behalf of your minor child.

You may only make a verifiable California Data Subject request for access or data portability twice within a twelve (12) month period. The verifiable California Data Subject request must:

1. Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
2. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable California Data Subject request does not require you to create an account with us. We will only use personal information provided in a verifiable California Data Subject request to verify the requestor’s identity or authority to make the request.

We aspire to respond to a verifiable California Data Subject request within forty five (45) days of receipt of the request. If we require more time (up to ninety (90) days) we will inform you of the reason(s) why an extension is needed and how long we anticipate the period to be. Any disclosure we provide will only cover the twelve (12) month period preceding the receipt of your request. If applicable, the response may provide the reasons why we cannot comply with your request. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable California Data Subject request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We reserve the right to refuse to respond to verifiable California Data Subject requests that are excessive, repetitive, or manifestly unfounded.

Right of Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not take any of the following actions against you in response to an exercise of your rights:

1. Deny you goods or services.
2. Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
3. Provide you a different level or quality of goods or services.
4. Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

California Do-Not-Track Disclosures

Syncro does not track its customers over time and across third party websites to provide targeted advertising and therefore does not respond to Do Not Track (DNT) signals. Third parties that have content embedded on Syncro’s websites, software, or mobile applications (e.g. social features) may set cookies on a user’s browser and/or obtain information about the fact that a web browser visited a specific Syncro website from a certain IP address. Third parties cannot collect any other personal identifiable information from Syncro’s websites unless you provide it to them directly.

Privacy Notice for EU Residents

This Section governs personal data, information relating to an identified or identifiable natural person, gathered from data subjects located in the EU only.