Privacy & Cookie Policy
SyncroTask ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how long we keep it, and your rights under the General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Data Controller
The data controller responsible for your personal data is SyncroTask. You can contact us at contact@syncrotask.com for any privacy-related enquiries.
2. What Data We Collect
We collect data in the following situations:
- Account registration: name, email address, country, and password (stored as a secure hash).
- Subscription & billing: billing details processed securely by our payment provider. We do not store full card numbers.
- App usage: time logs, leave requests, project and team data you enter while using the platform.
- Contact form: name, email address, subject and message when you submit our contact form.
- Server logs: IP addresses and browser information may be temporarily logged by our hosting infrastructure for security and operational purposes.
- Analytics: we use Cloudflare Web Analytics by default, which collects anonymous, aggregated usage statistics. No cookies are set and no personal data is stored by this service. If you accept cookies via our consent banner, we also use Google Analytics to understand traffic and campaign performance in more detail. It is never active until you do.
3. Why We Collect It (Legal Basis)
- Contract performance: to provide the SyncroTask service you signed up for.
- Legitimate interest: to maintain the security and performance of our platform, and to respond to support enquiries.
- Legal obligation: to comply with applicable laws, including tax and financial regulations.
4. How Long We Keep Your Data
- Account data: retained for as long as your account is active. Deleted within 30 days of account closure upon request.
- Contact form submissions: retained for up to 12 months, then permanently deleted.
- Server logs: typically retained for up to 30 days for security monitoring.
- Analytics data: Cloudflare Web Analytics data is anonymised and aggregated, so no personally identifiable data is retained. Google Analytics data (only collected if you accept cookies) is retained according to Google's standard retention settings; see Google's own privacy policy for details.
5. Third-Party Services
We use a limited number of trusted third-party services to operate SyncroTask:
- Cloudflare: DNS, DDoS protection, and anonymous web analytics.
- Google Analytics: traffic and campaign analytics, only if you accept cookies via our consent banner. See Google's Privacy Policy.
- Email provider: used to send transactional emails (account confirmations, notifications, reports).
- Payment processor: handles subscription billing securely. We do not store payment card data on our servers.
These providers are bound by their own privacy policies and data processing agreements.
6. Cookies
SyncroTask uses only essential cookies required for authentication and session management on the application. We do not use advertising cookies. Cloudflare Web Analytics operates without setting any cookies at all.
With your consent, we also use Google Analytics on this website, which does set cookies. Google Analytics is never active by default. It only starts running after you click "Accept" on the cookie banner shown on your first visit. If you decline, or don't respond, only the cookieless Cloudflare analytics runs.
You can change your decision at any time: click to reopen the banner, or use the "Cookie preferences" link in the footer of any page.
7. Your Rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict certain processing activities.
- Request your data in a portable, machine-readable format.
To exercise any of these rights, please contact us at contact@syncrotask.com. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. These include encrypted connections (HTTPS), hashed passwords, two-factor authentication, and access controls.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of SyncroTask after changes are published constitutes acceptance of the updated policy.
10. Contact
For any questions or concerns about this Privacy Policy or how your data is handled, please contact us at contact@syncrotask.com.