Privacy Policy

Effective date: October 24th, 2025

1. Introduction

Synqc (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over your data.


2. Data Controller

Pantzar Trading AB, Kyrkogatan 16B, 85231 Sundsvall, Sweden
Email: [email protected]


3. What We Collect

- Waitlist sign-up:
Email address
- Product usage (future): Aggregated, non-identifying analytics (e.g. pages visited, feature usage)
- Behavioral & device data via cookies and tracking pixels: We (and our advertising partners) use technologies like the Facebook/Meta Pixel to collect information about how you interact with our website (e.g. pages visited, buttons clicked, device type, browser).
- Connected CRM data: (e.g. email, phone number, name, lifecycle stage, custom properties, etc.): When you connect your HubSpot account, we collect selected lead and contact data in order to deliver it to Meta’s Conversions API. We only process this data temporarily in-memory and do not store it beyond the transmission process.


4. How We Use Your Data

To deliver our core service (syncing Hubspot data to Meta for ad performance)
We sync selected CRM data (e.g. email, phone etc.) from your connected HubSpot account to Meta via the Conversions API—on your behalf—to improve your ad performance, optimize targeting, and measure campaign results. All personal data is hashed before it is sent.

To measure ad performance & personalize advertising
- Legal basis: We rely on consent where required by law (e.g. EU users for marketing cookies), and legitimate interest for essential service operations (e.g. syncing data the customer explicitly configured).
- We—and Meta—use the data from our Pixel to see how effective our ads are, to retarget you with more relevant offers, and to optimize our campaigns.

To notify you of our launch & feature updates
- Legal basis: Consent
- We send emails only to the address you provide to keep you informed.

To send marketing & promotional offers
- Legal basis: Consent
- You may unsubscribe at any time if you no longer wish to receive these.

To improve our service & conduct analytics
- Legal basis: Legitimate interest
- We use aggregated, non-identifying data to understand usage patterns and enhance our platform.

To prevent fraud & maintain security
- Legal basis: Legitimate interest
- We keep logs and analyze them for abuse detection and to protect your data.


5. Data Sharing & Third Parties

We do not sell or rent your personal data. We may share it with:

- Meta Platforms, Inc., via the Conversions API, to receive hashed contact data for ad measurement and performance optimization
- Our cloud provider (Cloudflare Workers & KV) to host and protect your data
- Email delivery service (e.g. Mailgun, SendGrid) to send you updates
- Any legal authority if required by law

We currently do not use Cloudflare Web Analytics.

Each vendor is bound by contractual commitments to protect your data.


6. Cookies & Tracking

We use the following cookies and similar technologies on our website:

Essential cookies– Session cookies required to keep you logged in and secure.
Third-party tracking pixelsMeta Pixel from Facebook/Meta is used to measure ad performance and understand user behavior after clicking our ads.

Non-essential cookies (e.g., for analytics or marketing) are only set after you have given consent via our cookie banner.

Your choices:

Browser controls
You can disable or delete cookies via your browser’s privacy settings.

Meta Pixel opt-out
Visit your Facebook Ad Preferences page and toggle “Off-Facebook Activity” or “Ads based on data from partners” to stop Meta from using this data.

Do Not Sell or Share My Personal Information
If you are a California consumer, you can exercise these rights and opt-out of sale/sharing of your data by contacting us at [email protected].


7. Data Retention

We retain your waitlist email until you unsubscribe or request deletion.
Aggregated analytics are retained for up to 24 months.


8. Your Rights

Under GDPR (EU) and CCPA (California), you have the right to:

- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data (“right to be forgotten”)
- Portability: receive your data in a machine-readable formatRestrict or object to certain processing (e.g. marketing)

To exercise any right, email us at [email protected]. We will respond within 30 days.


9. Data Deletion

You have the right to have your personal data deleted at any time. We’ve made this simple:

To delete your data:

1. Go to synqc.io/data-deletion
2.
Enter the email address you signed up with
3. Click “Submit deletion request”

Once submitted, we will automatically:
- Permanently delete all your data from our system, including any data from HubSpot or Meta you connected through our service
- Remove your registration, account setup, and integration history
- Clear any saved configuration settings (e.g., pixel IDs, event mappings)
- Ask our third-party services (like email and analytics providers) to delete your data from their systems as well (this may take up to 60 days)

We do not store backups of personal data after deletion. In rare cases where we’re legally required to retain certain minimal records (e.g., for billing compliance), we keep them only in anonymized form with no way to link back to you.


10. Data Security

- TLS (HTTPS) for all in-transit data- Encryption at rest for sensitive fields (PII) in KVHMAC-verified webhooks and CSRF state tokens
- Secure secret storage (Cloudflare Secrets)


11. Children’s Privacy

Our service is not intended for and we do not knowingly collect personal data from:

- Children under 16 years of age in the European Economic Area, or
- Children under 13 years of age in the United States.

If you believe we have inadvertently collected data from a child in these age ranges, please contact us at [email protected] and we will promptly delete that information.


12. International Transfers

Your data may be transferred to–and stored in–servers located outside your country. By using our service, you consent to such transfers under GDPR’s standard contractual clauses.

This includes data sent to Meta via the Conversions API, which may be processed on servers outside your country under applicable standard contractual clauses.

Such transfers occur under the European Commission’s Standard Contractual Clauses (2021/914/EU), as implemented in our subprocessors’ Data Processing Agreements (DPAs).


13. Changes to This Policy
We may update this Privacy Policy at any time. The “Effective date” above will reflect the last revision. We’ll notify you by email or via a notice on our website.


14. Contact Us
If you have any questions or wish to exercise your rights, please contact:
559428-0926 (Pantzar Trading AB, Sweden)
Email: [email protected]