Privacy Policy

1. Who processes the data

SyncWork is software for service companies. Each customer company works in its own isolated workspace (tenant) and decides what information about its clients and jobs to put there.

For the data a company enters about its own clients and staff, the company is the data controller and SyncWork acts as a processor on its instructions. For service accounts, technical logs and the forms on this website, SyncWork is the controller.

2. What we process

Account data, required for the application to work:

• first and last name, email address, phone number;
• role and access rights within the company;
• interface language and notification settings.

Operational data entered by the company:

• service tasks, statuses, comments, change history;
• the company’s clients, contacts and service addresses;
• equipment, materials, warehouses, documents and invoices;
• photos of completed work and customer signatures.

Technical data:

• crash reports and diagnostics (Sentry), performance telemetry of the web app (Azure Application Insights);
• a device identifier used to deliver push notifications;
• an audit log of user actions — who changed what;
• your IP address and browser signals during the human-or-bot check (Cloudflare Turnstile) on sign-up, password reset and website forms.

We do not collect location, phone contacts, audio recordings or users’ payment details. The mobile app requests camera access for one purpose only: attaching a photo to a service task.

3. Forms on this website

Through the “Request a quote” and “Contacts” forms you send us your name, email address, phone number, company name, industry, team size and a message. This is emailed to our mailbox so we can reply; it is not stored in the application database. The email is kept while the conversation about your request lasts and deleted at your request.

The website is hosted on Cloudflare, which as the hosting provider processes visitors’ IP addresses to serve pages and protect against attacks.

4. Why we process it

• delivering the service itself: authentication, task synchronisation, notifications;
• offline use of the mobile app — task data is stored on the device so a technician can work without a network;
• user support and investigation of failures;
• security: detecting unauthorised access, bot protection, keeping an audit trail;
• replying to requests sent through the website forms.

We do not sell data, do not share it with advertising networks, and do not use it for profiling or automated decisions about individuals.

5. Legal grounds

We process data to perform our contract with the customer company, on the basis of our legitimate interest (service security, troubleshooting, replying to your request), and to meet statutory record-keeping obligations.

6. Who we share data with

We rely on the following providers to run the service:

• Microsoft Azure — application hosting, file storage, telemetry and transactional email; Poland Central region (EU);
• Neon — managed database; Frankfurt region (EU);
• Cloudflare — hosting of this website and the bot check (Turnstile) on sign-up, password reset and website forms;
• Sentry — crash reporting for the mobile and web apps; servers in the United States;
• Expo — push notification delivery for the mobile app: it receives the device identifier and the notification text and hands them to Google Firebase Cloud Messaging for delivery on Android; servers in the United States.

Only if the company itself enables the relevant module:

• Telegram — task messages for technicians who have linked their Telegram account, and customer messaging through the bot;
• a language-model provider (Anthropic or an OpenAI-compatible service) — the AI assistant module sends it task and message text to prepare a draft; financial data is never sent, and every action is confirmed by an operator;
• the company’s bank — the banking integration receives statements at the company’s decision.

7. Where data is stored, and for how long

Primary data — the database and files — is stored in the European Union (Azure Poland Central, Neon in Frankfurt). Crash reports (Sentry) and push notification delivery (Expo) are handled by providers whose servers are in the United States.

Operational data is retained while the company uses the service. Crash reports are kept for up to 90 days. When an account is deleted, personal data is anonymised immediately; records of completed work stay with the company as its business records — see the “Data deletion” page for details. Copies in database backups are overwritten within 30 days at most. Documents we are legally required to keep are retained for the statutory periods.

8. Security

All traffic between the applications and the server uses an encrypted connection (HTTPS). Passwords are stored as cryptographic hashes and cannot be read back. Access tokens on a mobile device are kept in the operating system’s secure storage. Access to data inside a company is limited by roles and permissions.

9. Your rights

• access your data and obtain a copy;
• correct inaccurate data;
• delete your account and associated data;
• restrict or object to processing;
• lodge a complaint with a supervisory authority.

You can delete your account yourself in the web application — the procedure is described on the “Data deletion” page. For other data your company entered about you, contact your company administrator first — the company manages that data. We will help if that is not possible.

10. Account deletion

Accounts and their data can be deleted; the procedure is described on the separate “Data deletion” page. A request can be made without installing the app.

11. Children

The service is intended for companies and their staff and is not directed at children under 16.

12. Changes to this policy

If we make material changes, we will update the date at the top of this page and notify customer companies. Continued use of the service after a change means acceptance of the updated version.

13. Contact

For privacy questions write to tymofiisyncwork2026@outlook.com. We respond within 30 days.