Legal document
Privacy Notice
- Document key
- privacy
- Version
- 1.0.0-draft.1
- Status
- draft
- Proposed effective date
- 2026-09-04
- Content hash
- sha256:13015918bde6d7407728546b41465cc87501ef2a2327a5ccc93bfd53ed80768c
Review draft — not effective. Required company facts and legal clauses remain unresolved. This version cannot be accepted or used to unlock workspace access.
A review draft mapping the categories of personal data Synquestra is designed to process.
Draft status and operator
Synquestra is a product of Cyclotron Technologies. This notice is a review draft, not an effective privacy notice. Verified company identity, privacy contact, legal bases, international-transfer terms, retention criteria and the production subprocessor list must be supplied and approved before publication.
Account, workspace and support data
The implemented service may process account identifiers, verified email, profile information, signup metadata, invitations, memberships, roles, workspace and brand details, legal-acceptance evidence, support communications, security events, device or usage logs, trial status and entitlement state. These data support authentication, workspace administration, service delivery, security, support and auditability.
Content, media and workflow evidence
Synquestra may process drafts, campaigns, media and metadata, comments, approvals, schedules, publication attempts, Publication Receipts, provider responses, webhook evidence, CMS entries, redirects, search submissions, Handle Scout activity, Brand Claim evidence and analytics. Access is intended to follow workspace, brand and role boundaries.
Connected platforms and credentials
If a provider connection is later enabled, Synquestra may process platform identifiers, profiles, pages, business accounts, channels, authorised scopes, credential references, token status, expiry and provider-derived results. Social-platform passwords are not requested. No claim about a particular encryption system or immediate deletion of every provider-derived record is made until that implementation and its retention behaviour are verified.
Analytics, cookies, AI and payments
No non-essential cookie or analytics provider is identified as approved in this draft. If one is enabled, the Cookie Notice and consent controls must be updated first. AI-provider use, training treatment, payment processing and named recipients must be described only after the actual providers, contracts, data flows and controls are verified. Razorpay payment activation remains pending.
Purposes, legal bases and recipientsLegal review required
LEGAL REVIEW REQUIRED: the service purposes include delivering requested functionality, securing accounts, enforcing permissions, preserving publication evidence, supporting users and meeting legal obligations. The applicable legal bases, controller or processor roles, recipient categories and any customer instructions must be confirmed for each operating jurisdiction before this notice becomes effective.
Transfers, retention and securityLegal review required
LEGAL REVIEW REQUIRED: no data-residency country, fixed retention period or international-transfer mechanism is asserted. Retention criteria must account for active service needs, customer instructions, audit and security evidence, backups, disputes and legal obligations. Implemented controls include authenticated access, database policies and private media storage, but no certification is claimed.
Rights and requests
Subject to the published notice and applicable law, people may request access, correction, export, deletion, restriction or objection through the public support route. Some immutable security, approval, legal-acceptance and publication evidence may need to be preserved where lawfully required. Identity and authority must be verified before acting on a request.
Change history
- 1.0.0-draft.1 — Initial implementation-mapped privacy draft; not effective.