Privacy Policy

1. Information We Collect

1.1 Account Information

• Name
• Email
• Password (hashed)
• Project names
• API keys and metadata

1.2 Usage Data

• IP addresses
• Browser/device information
• Activity logs in the Dashboard
• API request logs
• Error logs

1.3 Event and Attendee Data

Developers may send event data to us through API calls, including:

• Event titles, times, locations
• Attendee names and email addresses
• RSVP statuses
• ICS/ACE payloads
• Webhook URLs and delivery logs

We act as a processor for this data. Developers are the controllers responsible for lawful collection and consent.

1.4 Cookies

We use minimal cookies for:

• Authentication
• Session management
• Security

We do not use third-party advertising or tracking cookies.

2. How We Use Your Data

We use information to:

• Provide and operate the Service
• Deliver event invites and updates
• Secure accounts and detect abuse
• Improve platform performance
• Diagnose errors and deliver support
• Process payments (via Stripe)

We do not sell user or attendee data. We do not use attendee emails for marketing.

3. Data Sharing

We share data only with essential service providers, such as:

• Email delivery providers (e.g., Postmark)
• Cloud hosting providers
• Database and monitoring systems
• Payment processors (Stripe)

These partners are contractually required to follow privacy and security standards.

4. Data Retention

• Logs and webhooks: retained for a limited period
• Account information: retained while your account is active
• Deleted projects: removed or anonymised after a reasonable period

You may request deletion of your account at any time.

5. International Data Transfers

Your data may be processed outside your country, including in regions where hosting providers operate. We use industry-standard safeguards (such as EU Standard Contractual Clauses where required).

6. Security

We use technical and organisational measures to protect your data, including:

• Encryption at rest and in transit
• Rate limiting
• API key isolation
• Role-based access
• Strict database access controls

No online service is 100% secure, but we take reasonable steps to protect your data.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your data
• Correct inaccurate data
• Request deletion
• Object to processing
• Export your data

Requests can be made via support@synara.events.

Attendees should contact the developer who created the event, not Synara, as developers control their data.

8. Children

Synara is not intended for children under 16. We do not knowingly collect information from minors.

9. Changes to this Policy

We may update this Privacy Policy. Significant changes will be posted on the website or emailed to account holders.

10. Contact

For privacy questions:

• support@synara.email