Privacy Policy

Last updated 5 July 2026

This Privacy Policy explains how Sync BV (“Sync”, “we”, “us”) collects, uses, and protects your personal data when you visit heysync.co, buy a Sync device, or use the Sync app. We comply with the EU General Data Protection Regulation (GDPR) and applicable Dutch law.

1. Data controller

The controller of your personal data is Sync BV, Keizersgracht 123, 1015 CJ Amsterdam, Netherlands. For any privacy request, contact us at privacy@heysync.ai.

2. What we collect

• Account & contact data — your name, email, and password (stored hashed) when you create an account or subscribe to the newsletter.
• Order & billing data — shipping and billing address and order history. Card details are entered directly with our payment processor and are never stored by us.
• Product data (Sync app) — the audio recordings, transcripts, summaries, and notes you create with a Sync device. This content is encrypted and treated as strictly confidential (see §6).
• Technical & usage data — IP address, device and browser type, and pages viewed, together with the essential cookies described in our Cookie Policy.
• Support data — the messages you send us and their contents.

3. Why we use it, and our legal basis

Purpose	Legal basis (GDPR Art. 6)
Process and deliver your order	Performance of a contract
Provide and operate the Sync app and its features	Performance of a contract
Customer support	Contract / legitimate interest
Newsletter and marketing emails	Consent (withdraw at any time)
Keep the service secure and prevent fraud	Legitimate interest
Accounting and legal obligations	Legal obligation

4. Who we share it with

We share data only with the processors that help us run the service, under contract and strictly as needed:

• Stripe — payment processing.
• Vercel — website hosting and content delivery.
• Where applicable, our email/newsletter and customer-support providers, acting on our instructions.

We never sell your personal data or your recordings, and we never share your recordings for advertising.

5. International transfers

We store and process personal data primarily within the EU/EEA. Some providers (such as Stripe and Vercel) may process limited data outside the EEA; where they do, transfers are protected by an EU adequacy decision or EU Standard Contractual Clauses.

6. Your recordings and confidentiality

Content you capture with a Sync device (audio, transcripts, summaries, notes) is encrypted in transit and at rest, stored in the European Union, and never sold or shared. You can export or delete it at any time from the app. You are responsible for recording lawfully and for informing the people you record where the law requires it.

7. How long we keep it

• Account data: for as long as your account is active, then deleted or anonymised.
• Order and accounting records: for the statutory retention period (seven years under Dutch tax law).
• Recordings and app content: until you delete them or close your account.
• Newsletter data: until you unsubscribe.

8. Your rights

Under the GDPR you may: access your data; have it corrected or erased; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time. To exercise a right, email privacy@heysync.ai. You also have the right to lodge a complaint with the Dutch data-protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the supervisory authority in your country of residence.

9. Cookies

We use only essential and functional cookies, as described in our Cookie Policy. Any non-essential cookies would be set only with your consent.

10. Children

This service is not directed to children under 16, and we do not knowingly collect their personal data.

11. Changes

We may update this policy; the “last updated” date above reflects the current version, and we will communicate material changes where required.

12. Contact

Questions about your privacy: privacy@heysync.ai.