Legal
Privacy Policy
Effective date: August 5, 2026
Synoptic Data Ltd. (company no. 517379954) ("Synoptic," "we," "us") provides decision intelligence software for revenue teams. This policy explains how we handle personal data through synopticlabs.io, app.synopticlabs.io, and related services (the "Service").
1. Our role
For customer content connected to the Service, the customer usually decides why and how that data is processed. Synoptic acts as its processor or service provider. For account, website, product-usage, support, and business-contact data, Synoptic may act as the controller.
2. Data we collect
- Account data: name, work email, organization, role, authentication and session identifiers, workspace membership, and access-control information.
- Customer content: data a customer or user submits, uploads, or authorizes us to access from connected services. This may include messages, files, emails, calendar events, call transcripts, CRM records, support records, product-usage records, and related metadata.
- Website and product usage: IP address, browser and device information, page views, feature usage, timestamps, logs, and diagnostics. We use cookies and similar technologies for login, security, preferences, and analytics.
- Communications: questions, reports, alerts, support requests, feedback, business correspondence, early-access email, company name, and stated product interests.
- Connection data: encrypted OAuth credentials, connector settings, and synchronization status.
3. Google user data
When a user connects Google services, Synoptic requests separate read-only permissions for the feature the user chooses:
- Google Drive: file and folder content and metadata selected for use in Synoptic.
- Gmail: message content and metadata matching the search the user configures. Drafts and attachments are not indexed.
- Google Calendar: calendar and event details within the calendars and time window configured by the user.
We use this data only to sync authorized records, organize and analyze them, answer user questions, generate user-requested reports and outputs, provide citations, and maintain the Service. We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine-learning models.
Google-connected content remains personal to the connecting user unless the user or an authorized administrator deliberately changes its workspace access. Human access is limited to user-authorized support, security or abuse investigations, legal obligations, or permitted aggregate internal operations.
Synoptic's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use data
We use data to provide, secure, operate, support, and improve the Service; authenticate users; honor workspace permissions; answer questions and create requested outputs; monitor reliability and usage; communicate with users; prevent abuse; and comply with law. Where applicable, our legal bases include performing a contract, legitimate interests, consent, and legal obligations.
5. AI processing
The Service uses AI models to summarize, classify, analyze, and generate user-facing answers and outputs. We send service providers only the information reasonably needed for those functions and require them to process it on our behalf. Synoptic does not use customer content to train its own generalized models and does not permit service providers to use Google user data for generalized model training.
6. How we share data
We use service providers to operate the Service. Current categories and providers include:
- AWS: hosting, storage, databases, logs, email, and AI inference.
- Descope: authentication and workspace identity.
- Google AI, AWS Bedrock, OpenRouter, and routed model providers: requested AI features.
- PostHog US: pageviews and account-linked product analytics. Session recording is disabled.
- Cloudflare Turnstile: bot prevention on website forms.
Data may also be visible to the customer's authorized workspace users according to applicable permissions. We may disclose information to professional advisers, regulators, or authorities when reasonably necessary to protect rights, investigate abuse, or comply with law. We may transfer information to a successor in a merger, acquisition, financing, or sale, subject to applicable law. Google user data will be transferred in such a transaction only with prior explicit consent where required.
We do not sell personal data or customer content. We do not share it with data brokers or advertising networks.
7. Retention, disconnection, and deletion
We retain data while needed to provide the Service, satisfy the customer's instructions, protect the Service, and meet legal obligations. Retention may vary by data type, contract, and workspace configuration. Limited copies may remain temporarily in backups or security logs.
Disconnecting a source stops new access through that connection and removes its stored connector credential. It does not itself erase previously indexed content. Users may also revoke Google access in their Google Account settings. Customers may request export or deletion, including deletion of source and derived data, by contacting support@synopticlabs.io. We verify authority before deletion and apply contractual, legal, security, and backup exceptions.
Operational logs are generally retained for 30 days. Database backups are generally retained for 7 days.
8. Security
We use reasonable administrative, technical, and organizational safeguards, including access controls, tenant isolation, encryption in transit and at rest, credential protection, logging, and monitoring. No system is completely secure, so we cannot guarantee absolute security.
9. International transfers
Synoptic is based in Israel and uses service providers in Israel, the United States, and other countries. Where required, we use appropriate safeguards for international transfers.
10. Your rights
Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or port personal data, and to withdraw consent. Contact us to exercise these rights. If data is controlled by a Synoptic customer, we may direct the request to that customer. Individuals may also complain to their local data-protection authority.
11. Children
The Service is for businesses and is not directed to children under 18. We do not knowingly collect personal data from children.
12. Changes
We may update this policy as the Service or law changes. We will post the revised policy here, update its effective date, and provide additional notice when required.
13. Contact
Synoptic Data Ltd.
Israel
Company no. 517379954
support@synopticlabs.io