Privacy Policy

Scope of Information Collected

Syncrra follows the principle of data minimisation, collecting only information required to deliver services securely and effectively.

Personal and Account Information

We may collect:

• Name and professional contact details
• Business email address and phone number
• Company name, designation, and organisational role
• Authentication credentials and access identifiers

Customer and Operational Data

Syncrra processes customer-controlled operational data, including:

• Manufacturing, production, inventory, quality, and workflow data
• System-generated logs and reports
• User-submitted content within the platform

This data remains the property of the customer and is processed solely for service delivery.

Technical and System Data

Collected automatically for security and reliability:

• IP addresses and device identifiers
• Browser and operating system information
• Access timestamps and usage logs
• Platform interaction metadata

Cookies and Tracking

We use cookies and similar technologies to support platform functionality, performance monitoring, and security and fraud prevention. Cookie preferences can be managed through browser settings.

Purpose and Lawful Use of Data

Syncrra processes data strictly for legitimate business and operational purposes, including:

• Providing and maintaining platform functionality
• Enforcing access control and identity verification
• Delivering AI-driven insights and dashboards
• Monitoring platform performance and security
• Responding to support requests and service communications
• Meeting contractual, legal, and regulatory obligations

Syncrra does not sell personal data or use customer data for advertising purposes.

Information Security Controls

Syncrra maintains an information security program aligned with ISO 27001 and SOC 2 trust principles, covering:

• Logical access controls and role-based permissions
• Encryption of data in transit and at rest
• Secure authentication and credential management
• Audit logging and activity monitoring
• Vulnerability management and incident response procedures
• Change management and system monitoring

Security controls are reviewed regularly and updated to address evolving risks.

Access Control and Data Confidentiality

Access to personal and customer data is:

• Restricted to authorised personnel only
• Granted based on least-privilege principles
• Logged and monitored for unauthorised activity

All Apptware employees and contractors are bound by confidentiality obligations and security policies.

Data Sharing and Subprocessors

Data may be shared only with:

• Approved service providers supporting hosting, monitoring, analytics, or security
• Legal or regulatory authorities when required by law

All subprocessors are subject to:

• Due diligence and security review
• Contractual data protection obligations
• Use limitations aligned with service delivery

A current list of subprocessors can be provided upon request.

Data Retention and Disposal

Syncrra retains information only for the duration necessary to:

• Fulfil contractual commitments
• Support operational and audit requirements
• Comply with applicable laws

Secure deletion or anonymisation processes are applied when data is no longer required.

Incident Management and Breach Response

Syncrra maintains documented incident response procedures aligned with industry standards. In the event of a confirmed data security incident:

• Impact is assessed promptly
• Containment and remediation actions are initiated
• Customers are notified in accordance with contractual and legal requirements

Compliance With Global Data Protection Regulations

Syncrra supports compliance with applicable data protection frameworks, including:

• GDPR (where applicable)
• Indian Information Technology Act and related rules
• Contractual privacy and security commitments

Data processing is governed by contractual agreements where required.

User Rights and Data Requests

Depending on jurisdiction, individuals may have rights to:

• Access personal information
• Request correction or deletion
• Restrict or object to processing
• Request data portability

Requests can be submitted through the contact details below and will be handled in accordance with applicable laws.

International Data Processing

Data may be processed in regions where Apptware or approved service providers operate. Appropriate safeguards are implemented to ensure secure cross-border data transfers.

Children’s Data

Syncrra is intended for business use only and does not knowingly collect data from individuals under the age of 18.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in legal, regulatory, or operational requirements.

Updates will be published on this page with a revised effective date. Continued use of Syncrra constitutes acceptance of the updated policy.

Contact and Privacy Inquiries