SyncTIDY Privacy Policy

This Privacy Policy explains how Prydly LLC, doing business as SyncTIDY ("SyncTIDY," "we," "us"), accesses, uses, stores, shares, and protects your information when you use the SyncTIDY service and its industry-specific products (collectively, the "Service"). It applies to all SyncTIDY products and sub-domains.

1. Who we are and how to reach us

The Service is operated by Prydly LLC (d/b/a SyncTIDY). For any privacy question, data-access request, or deletion request, contact us at support@synctidy.com.

2. Information we access

• Google account data (with your permission). When you connect your Google account, SyncTIDY requests read-only access to your Gmail using the gmail.readonly scope. We read the content of email messages and their attachments in order to identify and extract the details relevant to your records. We do not send, modify, delete, label, or otherwise change your mail.
• Account and contact data. The email address and basic profile associated with the Google account you connect, used to identify your account and communicate with you.
• Service and technical data. Standard operational data such as log records and timestamps needed to run and secure the Service.

3. How we use your information

• To read your incoming and historical emails and attachments and extract their details into the structured records that are the core, user-facing feature of the Service.
• To display, organize, and let you search and manage those records.
• To operate, secure, troubleshoot, and improve the user-facing features of the Service.

We do not use your Google user data for advertising, and we do not sell it.

4. Google API Services User Data Policy -- Limited Use

SyncTIDY's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features that are prominent in the SyncTIDY interface.
• We transfer Google user data only as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition (with notice to you).
• We do not use or transfer Google user data for serving advertising.
• We do not use or transfer Google user data to determine creditworthiness or for lending purposes.
• We do not allow humans to read your Google user data unless: (a) you give specific consent for specific messages; (b) it is necessary for security purposes or to comply with applicable law; or (c) the data has been aggregated and anonymized for internal operations.
• We do not use Google user data to develop, train, or improve generalized or non-personalized artificial-intelligence or machine-learning models.

5. Automated processing and service providers

To extract structured details from your emails and attachments, SyncTIDY sends relevant message content to trusted service providers that process it only on our behalf and only to deliver the Service:

• AI classification. Message and attachment content is sent to Anthropic's Claude API to identify and extract the details for your records. This content is processed only to generate your results; under Anthropic's commercial API terms it is not used to train Anthropic's models and is deleted from Anthropic's systems within 30 days.
• Text/image recognition (OCR). Text is read from attached documents and images using Google's Cloud Vision API.
• Hosting. The Service and your data are hosted on an OVH virtual private server located in Oregon, USA.

We do not sell your data or share it with third parties for their own purposes.

6. Storage, security, and retention

• Storage. Your records and the data extracted from your email are stored on our hosted infrastructure described above.
• Security. We protect your data using [CONFIRM: security measures -- e.g., encryption in transit (TLS), encryption at rest, access controls].
• Retention. We retain your data for as long as your account is active, and delete it within 30 days of your account closure or a deletion request, except where we must retain it to comply with law.

7. Your choices and rights

• Disconnect at any time. You can revoke SyncTIDY's access at any time from your email provider's account settings (for Google, your Google Account permissions) -- you always maintain direct control. Revoking access stops all further reading of your mail.
• Access and deletion. You may request a copy of your data, or its deletion, by emailing support@synctidy.com.
• California (CCPA/CPRA). If you are a California resident, you have the right to know what personal information we collect and how it is used, to access or delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell or share your personal information. Submit requests to support@synctidy.com.
• EU / EEA / UK (GDPR). If you are in the EU, EEA, or UK, you have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Our legal bases are performing the service you request and our legitimate interest in operating and securing it. Contact support@synctidy.com to exercise these rights or raise a concern.

8. Children

SyncTIDY is a business tool not directed to children and is not intended for use by anyone under 18.

9. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated effective date, and where appropriate we will notify you.

10. Contact

Prydly LLC, d/b/a SyncTIDY -- support@synctidy.com.