SyndflowPrivacy Policy
Last updated: October 21, 2026
Syndflow Inc. ("Syndflow", "we", "us") provides AI teammates: software agents that you message like coworkers, that work on their own computer, use the apps you connect, and report back to you. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to syndflow.com and the Syndflow app (the "Service").
Who is responsible: Syndflow Inc., 2711 Centerville Road, Suite 400, Wilmington, DE 19808, United States. Contact: hello@syndflow.com.
1. Information we collect
- Account information: your name, email address and a securely hashed password, or the identity details provided when you sign in with Google.
- Content you give us: messages, files and images you send to your agents, instructions, routines, and the results your agents produce (for example documents, reports and web pages).
- Agent memory: notes and facts your agents save so they can help you over time. You can ask an agent to forget something or clear its memory.
- Connected apps: when you connect an app such as Gmail, Google Calendar or Google Drive, you authorize access through that provider's sign-in screen. We receive an access token and, while an agent is working for you, the data it needs from that app. We do not see your password for that app.
- Voice: if you use voice input or spoken replies, audio is processed to convert speech to text and text to speech.
- Phone calls: if you use the calling feature, we process the phone number, call audio, a recording and a transcript for each call.
- Payments: plan, credit balance and billing status. Card details are collected and stored by our payment processor, Stripe; we never see or store your full card number.
- Technical data: IP address, browser and device type, pages and features used, timestamps, and error logs, which we use to run and secure the Service.
- Cookies: we use only essential cookies to keep you signed in and protect your account. We do not use advertising or cross-site tracking cookies.
2. How we use information
- To provide the Service: run your agents, connect your apps, store your conversations and files, and show you results.
- To process payments, meter credits and send account and security messages such as password resets.
- To keep the Service safe, prevent abuse and fraud, and fix problems.
- To improve the reliability and quality of the Service, using aggregated or de-identified information where possible.
- To comply with legal obligations.
We do not sell your personal information. We do not use your content to train AI models, and we do not allow our AI model providers to use it for training. Model providers process your content only to return a response to you.
3. Information from Google
Syndflow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features you ask for, such as reading your inbox to summarize it or adding an event to your calendar when you tell an agent to. We do not use Google data for advertising, we do not sell it, and humans do not read it except with your consent, to investigate abuse, or as required by law.
4. Who we share information with
We share information only with service providers that help us run the Service, under written agreements that restrict how they may use it and require them to protect it. These providers fall into the following categories. A current list of providers is available on request at hello@syndflow.com.
| Category of recipient | Purpose |
|---|---|
| Cloud hosting and storage providers | Running the Service and storing data securely |
| AI model providers | Processing your requests to produce a response |
| Payment processors | Payment processing, invoices and fraud prevention |
| App-connection providers | Connecting your agents to the apps you authorize |
| Speech providers | Speech-to-text and text-to-speech |
| Telephony providers and carriers | Placing and receiving calls, call recording and transcripts |
| Memory and search providers | Storing and retrieving the notes your agents keep |
| Email delivery providers | Sending account and password-reset emails |
The apps you connect (for example Google) receive the actions your agents take on your behalf, under their own terms and privacy policies. We may also disclose information if required by law, to protect rights and safety, or in a merger or sale of the business, in which case we will notify you.
5. How long we keep information
- We keep your account and content while your account is active.
- If you delete your account, we delete or de-identify your personal information within 30 days, except where we must keep it by law (for example billing records). Encrypted backups are overwritten within 90 days.
- Call recordings and transcripts are kept until you delete them or your account is deleted.
- Security and error logs are kept for a limited period, normally no more than 90 days.
6. Your choices and rights
You can access, correct, export and delete your information, and withdraw access for any connected app at any time in the app's settings or by revoking access with the app provider. You can delete your account in the app, or email us at hello@syndflow.com and we will help.
- European Economic Area, United Kingdom and Switzerland: see section 7 (GDPR) below.
- California and other US states: you may request to know, delete or correct the personal information we hold about you. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising your rights.
- India: you may request access, correction and erasure of your personal data and nominate a representative, in line with applicable law.
To exercise a right, email hello@syndflow.com. We may need to verify your identity and will respond within the time the law requires.
7. GDPR: users in the EEA, United Kingdom and Switzerland
If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR), the UK GDPR and similar laws apply to how we handle your personal data. Syndflow Inc. is the data controller of your account information and of the content you provide when you use the Service. We have not appointed a data protection officer; you can reach us about any privacy question at hello@syndflow.com.
Legal bases. We process your personal data only where we have a lawful basis:
| Purpose | Legal basis |
|---|---|
| Creating and running your account, running your agents, connecting your apps, storing your content and agent memory, voice and call features | Performance of our contract with you (Art. 6(1)(b)) |
| Payments, billing records and tax obligations | Contract and legal obligation (Art. 6(1)(b) and (c)) |
| Security, abuse and fraud prevention, reliability and fixing errors | Our legitimate interests in running and protecting the Service (Art. 6(1)(f)) |
| Access to your connected apps, recording of calls, and optional features that need your agreement | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Responding to legal requests and defending legal claims | Legal obligation and legitimate interests |
Your rights. You have the right to:
- be informed about how we use your data (this policy);
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data erased ("right to be forgotten") where the law applies;
- restrict or object to processing, including processing based on our legitimate interests;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time, without affecting processing that happened before;
- not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you. Our agents act on your instructions; we do not make such decisions about you.
To use any of these rights, email hello@syndflow.com from the address on your account. We will respond within one month, and may extend that by up to two further months for complex requests, telling you why. We do not charge a fee unless a request is clearly unfounded or excessive. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office); we would appreciate the chance to resolve your concern first.
International transfers. Syndflow is operated from the United States, and our service providers may process data in the United States and in other countries. When we transfer personal data out of the EEA, the United Kingdom or Switzerland, we use approved safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional technical and organizational measures. You can ask us for a copy of the safeguards we rely on.
Retention and security. We keep personal data only as long as described in section 5, and protect it as described in section 9. If a personal data breach is likely to put your rights at risk, we will notify the relevant authority within 72 hours where required, and tell you without undue delay where the risk is high.
Business customers. If you use Syndflow for your organization and need a data processing agreement, email hello@syndflow.com and we will provide one.
8. International transfers (all users)
Syndflow is operated from the United States, so information you provide may be transferred to, stored and processed in the United States and other countries where our service providers operate. Those countries may have data protection laws different from yours. We protect transferred information as described in this policy and, for users in the EEA, the United Kingdom and Switzerland, with the safeguards described in section 7.
9. Security
We use encryption in transit, access controls, isolated computers for each agent, rate limiting and monitoring to protect your information. No system is perfectly secure. If we learn of a breach that affects your information we will notify you as the law requires.
10. Children
The Service is for people 18 and older. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy. If the changes are significant we will tell you by email or in the app before they take effect. The date at the top shows when it was last updated.
12. Contact us
Syndflow Inc.
2711 Centerville Road, Suite 400
Wilmington, DE 19808, United States
hello@syndflow.com