Privacy Policy
Effective Date: May 16, 2026
Last Updated: May 16, 2026
SynapticFlow respects your privacy and is committed to protecting the personal information and business data you share with us. This Privacy Policy explains how SynapticFlow collects, uses, stores, protects, and shares information when you access our website, use our platform, request a demo, communicate with us, or interact with any of our services.
SynapticFlow is a strategy execution and performance management platform designed to help organizations align goals, manage initiatives, track KPIs, monitor performance, improve visibility, and support execution through structured planning and intelligent insights.
By using SynapticFlow, you agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you should not use our website, platform, or services.
1. Information We Collect
We collect information to provide, improve, secure, and personalize our services. The type of information we collect depends on how you interact with SynapticFlow.
1.1 Information You Provide Directly
You may provide personal information when you:
- Request a demo
- Contact our team
- Create an account
- Subscribe to updates
- Fill out a form on our website
- Use the SynapticFlow platform
- Communicate with support or sales
- Participate in surveys, feedback sessions, or onboarding calls
This information may include:
- Full name
- Business email address
- Phone number
- Company name
- Job title
- Department or role
- Login credentials
- Billing or subscription details
- Support messages
- Demo request details
- Any other information you choose to provide
1.2 Account and Workspace Information
When an organization uses SynapticFlow, we may collect information related to its account, users, teams, and workspace activity.
This may include:
- User profile information
- Organization name
- Team or department names
- User roles and permissions
- Strategic objectives
- KPIs and performance indicators
- Projects, initiatives, and action plans
- Progress updates
- Comments, notes, and internal discussions
- Reports, dashboards, and planning inputs
- Catchball process activity
- X-Matrix planning data
- Performance tracking information
Some of this data may contain confidential business information. We treat this data with care and use it only as described in this Privacy Policy and any applicable agreement with your organization.
1.3 Usage and Technical Information
When you visit our website or use the platform, we may automatically collect technical and usage information.
This may include:
- IP address
- Browser type
- Device type
- Operating system
- Referring URLs
- Pages visited
- Time spent on pages
- Clicks and interactions
- Login activity
- Session duration
- Feature usage
- Error logs
- System performance data
- Approximate location based on IP address
This information helps us understand how users interact with SynapticFlow, improve platform performance, detect technical issues, and protect against unauthorized access.
1.4 Cookies and Similar Technologies
We may use cookies, pixels, scripts, tags, and similar technologies to improve your experience, analyze website performance, remember preferences, and support security.
Cookies may help us:
- Keep you logged in
- Remember user preferences
- Understand website traffic
- Analyze product usage
- Improve functionality
- Detect fraud or abuse
- Support marketing and remarketing activities
You can control cookies through your browser settings. However, disabling some cookies may affect how certain parts of the website or platform work.
1.5 Information from Third Parties
We may receive information from third-party services, integrations, partners, analytics providers, or your organization’s administrators.
This may include:
- Business contact information
- Authentication information from single sign-on providers
- Integration data from connected business tools
- Payment confirmation details
- Marketing or lead information
- Data provided by your employer or organization
We only use this information for the purposes described in this Privacy Policy.
2. How We Use Your Information
We use collected information to operate, provide, improve, secure, and promote SynapticFlow.
We may use your information to:
- Provide access to the platform
- Create and manage user accounts
- Respond to demo requests
- Communicate with you
- Provide customer support
- Process subscriptions or payments
- Improve website and platform performance
- Personalize user experience
- Analyze feature usage
- Develop new features
- Maintain platform security
- Detect fraud, abuse, or unauthorized access
- Send product updates or administrative notices
- Provide onboarding and training support
- Generate reports and analytics
- Comply with legal obligations
- Enforce our terms, contracts, and policies
We may also use aggregated or anonymized data to understand trends, improve our services, and create business insights. Aggregated or anonymized data does not directly identify you.
3. How We Use AI and Automated Features
SynapticFlow may use artificial intelligence, automation, or data-driven features to support planning, forecasting, performance analysis, recommendations, reporting, and workflow improvements.
These features may help users:
- Analyze strategic goals
- Review KPI trends
- Forecast potential performance outcomes
- Identify risks or gaps
- Improve visibility across teams
- Support decision-making
- Generate summaries or insights
- Organize project or performance data
We do not use your business data to make legally binding decisions about individuals. AI-generated insights are intended to support human decision-making, not replace it.
Your organization remains responsible for reviewing, validating, and acting on any recommendations, forecasts, reports, or insights generated through the platform.
Where possible, we aim to use reasonable safeguards to protect customer data processed by AI-related features.
4. Legal Bases for Processing
Depending on your location, we may rely on one or more legal bases to process your personal information.
These may include:
- Consent: When you voluntarily provide information or agree to receive communications.
- Contractual necessity: When processing is needed to provide our services.
- Legitimate interests: When processing helps us improve, secure, and operate our business.
- Legal obligation: When we are required to comply with applicable laws.
- Business operations: When processing is necessary for support, analytics, billing, security, or administration.
If you are located in a jurisdiction that requires a specific legal basis for processing, we will process your information according to applicable law.
5. How We Share Information
We do not sell your personal information.
We may share information only when necessary to operate SynapticFlow, comply with law, protect rights, or support business operations.
5.1 Service Providers
We may share information with trusted third-party service providers that help us operate our website, platform, and business.
These may include providers for:
- Cloud hosting
- Data storage
- Security monitoring
- Analytics
- Email delivery
- Customer support
- Payment processing
- CRM systems
- Marketing tools
- Authentication
- Error tracking
- Product usage analytics
These providers are authorized to use information only as needed to provide services to us.
5.2 Organization Administrators
If you use SynapticFlow through your employer or organization, your account may be managed by your organization’s administrators.
Administrators may be able to:
- Add or remove users
- View user activity
- Manage permissions
- Access workspace data
- Export reports
- Review project or KPI activity
- Control integrations
- Manage subscription settings
Your use of SynapticFlow through an organization may also be subject to that organization’s own policies.
5.3 Business Transfers
If SynapticFlow is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, information may be transferred as part of that transaction.
If this happens, we will take reasonable steps to ensure your information remains protected.
5.4 Legal and Safety Reasons
We may disclose information if we believe it is necessary to:
- Comply with applicable law
- Respond to legal requests
- Protect our rights or property
- Enforce our agreements
- Prevent fraud or abuse
- Protect users, customers, or the public
- Investigate security incidents
- Comply with regulatory obligations
6. Data Security
We take reasonable technical, administrative, and organizational measures to protect information from unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
- Encryption where appropriate
- Secure authentication
- Access controls
- Role-based permissions
- System monitoring
- Secure cloud infrastructure
- Backup procedures
- Logging and audit controls
- Internal security practices
- Vendor review processes
However, no online service, software platform, or data transmission method can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you believe your account has been compromised.
7. Data Retention
We retain personal information and business data for as long as necessary to provide our services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business needs.
Retention periods may depend on:
- The type of information
- The purpose of collection
- Contractual requirements
- Legal or regulatory obligations
- Customer account status
- Security and audit needs
- Backup and disaster recovery requirements
When information is no longer needed, we may delete, anonymize, or securely archive it according to our data retention practices.
8. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information.
These rights may include the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of information
- Object to certain processing
- Restrict processing
- Request data portability
- Withdraw consent
- Opt out of marketing emails
- Request information about how your data is used
To exercise these rights, you may contact us using the details provided in the “Contact Us” section.
We may need to verify your identity before completing your request. Some requests may be limited by legal, contractual, security, or operational requirements.
9. Marketing Communications
We may send you marketing communications about SynapticFlow, including product updates, educational content, event invitations, offers, and company news.
You can opt out of marketing emails at any time by using the unsubscribe link in the email or contacting us directly.
Even if you opt out of marketing emails, we may still send important non-marketing messages, such as account notices, security alerts, billing updates, service changes, or legal notices.
10. Cookies and Tracking Preferences
You may control cookies through your browser settings. Most browsers allow you to block, delete, or manage cookies.
Please note that some cookies are necessary for the website or platform to function properly. If you disable cookies, certain features may not work as intended.
We may also use analytics tools to understand website visits, page performance, and user behavior. These tools help us improve SynapticFlow and provide a better experience.
Where required by law, we will request consent before using non-essential cookies.
11. International Data Transfers
SynapticFlow may process and store information in countries other than the country where you are located. These countries may have data protection laws that differ from those in your region.
When we transfer personal information internationally, we take reasonable steps to protect it according to applicable privacy and data protection laws.
By using SynapticFlow, you understand that your information may be processed outside your country of residence.
12. Customer Data and Business Confidentiality
SynapticFlow may process customer-provided business data, including strategic plans, KPIs, initiatives, project details, team structures, performance updates, and internal reports.
We understand that this information may be sensitive or confidential. We do not claim ownership of customer business data entered into the platform.
Customers retain ownership of the data they submit to SynapticFlow. We process such data only to provide, maintain, secure, and improve the platform, or as otherwise permitted by agreement.
We do not publicly disclose customer workspace data unless authorized by the customer or required by law.
13. Integrations with Third-Party Services
SynapticFlow may allow users to connect third-party tools, platforms, or services.
When you connect an integration, SynapticFlow may access, receive, process, or transmit information between systems as needed to provide the integration.
Third-party services have their own privacy policies and terms. We are not responsible for the privacy practices of third-party services that you choose to connect with SynapticFlow.
You should review the privacy policies of any third-party services before enabling integrations.
14. Payment and Billing Information
If SynapticFlow offers paid subscriptions or billing through the platform, payment information may be processed by third-party payment providers.
We may collect limited billing-related information, such as:
- Billing name
- Business email
- Company name
- Billing address, where required
- Subscription plan
- Payment status
- Invoice details
- Transaction records
We do not store full credit card numbers unless specifically stated and handled through secure, compliant payment systems.
Payment providers may process your payment information according to their own privacy policies and security practices.
15. Children’s Privacy
SynapticFlow is intended for business and professional use. It is not intended for children.
We do not knowingly collect personal information from children under the age of 13, or under the minimum age required by applicable law.
If we learn that we have collected personal information from a child without proper consent, we will take steps to delete it.
16. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
These rights may include:
- The right to know what personal information we collect
- The right to know how we use and share personal information
- The right to request deletion
- The right to correct inaccurate information
- The right to opt out of certain data sharing
- The right to limit use of sensitive personal information, where applicable
- The right not to be discriminated against for exercising privacy rights
SynapticFlow does not sell personal information.
To exercise California privacy rights, please contact us using the details in the “Contact Us” section.
17. European and UK Privacy Rights
If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data protection laws, including the GDPR or UK GDPR.
These rights may include:
- Access to your personal data
- Correction of inaccurate data
- Deletion of personal data
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of consent
- Lodging a complaint with a supervisory authority
Where we process personal data on behalf of an organization using SynapticFlow, that organization may be the data controller, and SynapticFlow may act as a data processor. In such cases, privacy requests may need to be directed to your organization.
18. Data Processing Roles
In some cases, SynapticFlow acts as a data controller, such as when we collect information from website visitors, demo requests, sales inquiries, or our own marketing activities.
In other cases, SynapticFlow acts as a data processor, such as when we process customer workspace data on behalf of an organization using the platform.
The exact role may depend on the situation, the type of data involved, and the agreement between SynapticFlow and the customer.
19. Account Deletion and Data Removal
You may request deletion of your account or certain personal information by contacting us.
If you use SynapticFlow through an organization, account deletion requests may need to be handled by your organization’s administrator.
Some information may be retained where necessary for:
- Legal compliance
- Security
- Fraud prevention
- Billing records
- Backup systems
- Dispute resolution
- Enforcement of agreements
- Legitimate business operations
Once data is deleted, it may not be recoverable.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices, legal requirements, or technology.
When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page.
If changes are significant, we may provide additional notice, such as through the website, platform, or email.
Your continued use of SynapticFlow after an updated Privacy Policy becomes effective means you accept the updated policy.
21. Contact Us
If you have questions, concerns, or requests about this Privacy Policy or how SynapticFlow handles information, you may contact us at:
Email: info@synapticflow.ai
Website: https://synapticflow.ai
22. Summary
SynapticFlow collects and uses information to provide a secure, reliable, and useful strategy execution platform. We use information to operate the service, support users, improve performance, protect accounts, and deliver better planning and execution tools.
We do not sell personal information. We take reasonable steps to protect user and customer data. We also provide users with privacy choices and rights based on applicable law.