Privacy Policy

Last updated: April 2025

SyncroTask ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how long we keep it, and your rights under the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is SyncroTask. You can contact us at contact@syncrotask.com for any privacy-related enquiries.

2. What Data We Collect

We collect data in the following situations:

Account registration: name, email address, country, and password (stored as a secure hash).
Subscription & billing: billing details processed securely by our payment provider. We do not store full card numbers.
App usage: time logs, leave requests, project and team data you enter while using the platform.
Contact form: name, email address, subject and message when you submit our contact form.
Server logs: IP addresses and browser information may be temporarily logged by our hosting infrastructure for security and operational purposes.
Analytics: we use Cloudflare Web Analytics, which collects anonymous, aggregated usage statistics. No cookies are set and no personal data is stored by this service.

3. Why We Collect It (Legal Basis)

Contract performance: to provide the SyncroTask service you signed up for.
Legitimate interest: to maintain the security and performance of our platform, and to respond to support enquiries.
Legal obligation: to comply with applicable laws, including tax and financial regulations.

4. How Long We Keep Your Data

Account data: retained for as long as your account is active. Deleted within 30 days of account closure upon request.
Contact form submissions: retained for up to 12 months, then permanently deleted.
Server logs: typically retained for up to 30 days for security monitoring.
Analytics data: Cloudflare Web Analytics data is anonymised and aggregated — no personally identifiable data is retained.

5. Third-Party Services

We use a limited number of trusted third-party services to operate SyncroTask:

Cloudflare: DNS, DDoS protection, and anonymous web analytics.
Email provider: used to send transactional emails (account confirmations, notifications, reports).
Payment processor: handles subscription billing securely. We do not store payment card data on our servers.

These providers are bound by their own privacy policies and data processing agreements.

6. Cookies

SyncroTask uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Cloudflare Web Analytics operates without setting any cookies.

7. Your Rights

Under GDPR you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing activities.
Data portability — receive your data in a machine-readable format.

To exercise any of these rights, please contact us at contact@syncrotask.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. These include encrypted connections (HTTPS), hashed passwords, two-factor authentication, and access controls.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of SyncroTask after changes are published constitutes acceptance of the updated policy.

10. Contact

For any questions or concerns about this Privacy Policy or how your data is handled, please contact us at contact@syncrotask.com.