Privacy Policy
Effective Date: September 12, 2026 Last Updated: September 12, 2026
RSYNQ Corporation ("RSYNQ," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit rsynq.com and any related subdomains (the "Site"), use the Semantic Intent Protocol ("SIP") platform, developer tools, APIs, dashboards, and related services (collectively, the "Services"), or otherwise interact with us.
This Policy applies to individuals worldwide and includes specific disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), other U.S. state privacy laws, and the EU and UK General Data Protection Regulation ("GDPR").
If you do not agree with this Policy, please do not use the Site or the Services.
1. Notice at Collection (Summary)
Who we are
RSYNQ Corporation, a Delaware corporation, 3858 W. Carson Street, Suite 220, Torrance, CA 90503, USA
What we collect
Identifiers, contact and professional details, account credentials, commercial and billing information, internet and device activity, approximate location, product and device telemetry, communications, and inferences
Why we collect it
To provide and secure the Services, operate our business, communicate with you, comply with law, and improve our products
Do we sell personal information?
No. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Do we use sensitive personal information?
Only as necessary to provide the Services and for security. We do not use or disclose it for purposes requiring an opt-out right under the CCPA
How long we keep it
As described in Section 9
Your rightsSee Sections 11-13
Contact privacy@rsynq.ai
2. Personal Information We Collect
We collect the categories of personal information described below. The category labels in brackets correspond to the statutory categories under the CCPA.
a. Information you provide directly
Identifiers and contact data — name, email address, postal address, telephone number, employer, job title, and account username.
Account and credential data — password hashes, API keys, multi-factor authentication settings, and organizational role.
Commercial and transaction data — subscription tier, purchase history, SIP token consumption, licensing terms, invoices, and payment status. Payment card details are collected and processed directly by our payment processor; we do not store full payment card numbers.
Business and investor communications — information you submit through contact forms, partnership inquiries, demo requests, non-disclosure agreements, and investor or diligence correspondence.
Recruiting data — where you apply for a role with us: resume, work history, education, references, work authorization status, and any other information you choose to submit.
Support and correspondence — the content of emails, tickets, chat messages, and call notes.
b. Information collected automatically
Device and connection data — IP address, browser type and version, operating system, device identifiers, language settings, and referring and exit URLs.
Usage data — pages viewed, features used, API calls, session duration, timestamps, error and diagnostic logs, and click and scroll interactions.
Approximate location — inferred from IP address at the city or region level. We do not collect precise geolocation from the Site.
Cookies and similar technologies — see Section 6.
c. Platform, device, and telemetry data
Where you or your organization deploy SIP with robotic systems, edge computers, or connected devices, our Services process operational data such as intent requests and responses, task and execution logs, device state, sensor readings, fleet identifiers, error conditions, and performance metrics.
This data is generally about machines rather than people. It becomes personal information only where it can reasonably be linked to an identifiable individual — for example, an operator's account identifier attached to a command, or imagery captured by a device-mounted camera. Where telemetry includes audio, video, or images that may depict individuals, that content is treated as personal information and, where applicable, as sensitive personal information. [
d. Information from other sources
Your employer or the customer organization that provisioned your account
Channel partners, OEMs, system integrators, and resellers
Publicly available sources and professional networking platforms, for business development
Service providers that supply analytics, fraud prevention, identity verification, and enrichment data
Referrals, event registrations, and conference organizers
e. Inferences
We may derive inferences from the above — for example, product interest, likely use case, or account risk level — to tailor our communications and protect the Services.
f. Sensitive personal information
We do not seek to collect sensitive personal information as a routine matter. To the extent we process account log-in credentials, precise geolocation supplied by a customer deployment, government identification collected for contracting or export-control screening, or biometric identifiers contained in device imagery, we use and disclose that information only for the purposes permitted under CCPA § 1798.121(d) — performing the Services, ensuring security and integrity, and complying with law. We do not use it to infer characteristics about you.
3. How We Use Personal Information
We use personal information to:
Create, authenticate, and administer accounts, including developer, startup, professional, and enterprise tiers
Provide, operate, maintain, and improve the Site, the SIP platform, APIs, and related tools
Meter usage, calculate token consumption, bill customers, and administer licensing and revenue-share arrangements
Provide technical support, respond to inquiries, and communicate about service changes, outages, and releases
Monitor, investigate, and prevent fraud, abuse, unauthorized access, and security incidents, and to enforce our terms
Conduct research, analytics, benchmarking, debugging, and product development, including improving model and orchestration performance
Market our products to business contacts, subject to the consent and opt-out requirements of applicable law
Evaluate job applicants and manage recruiting
Conduct corporate transactions, including financings, diligence, and any merger, acquisition, reorganization, or asset sale
Comply with legal obligations, including tax, export control, sanctions screening, foreign-investment review, accounting, and lawful requests from public authorities, and to establish, exercise, or defend legal claims
We do not use personal information for purposes materially different from those disclosed here without providing notice and, where required, obtaining consent.
4. Legal Bases for Processing (EEA, UK, and Switzerland)
Where the GDPR applies, we rely on the following legal bases:
PurposeLegal basisProviding the Services and performing a contract with you or your organizationArticle 6(1)(b) — contractual necessityBilling, collections, and account administrationArticle 6(1)(b) and 6(1)(c)Security, fraud prevention, network integrity, and abuse monitoringArticle 6(1)(f) — legitimate interestsProduct analytics, improvement, and researchArticle 6(1)(f) — legitimate interestsBusiness development and B2B marketing communicationsArticle 6(1)(f), or Article 6(1)(a) — consent, where requiredNon-essential cookies and similar technologiesArticle 6(1)(a) — consentRecruiting and pre-employment evaluationArticle 6(1)(b), 6(1)(f), and 6(1)(c)Legal, tax, regulatory, export-control, and accounting complianceArticle 6(1)(c) — legal obligationCorporate transactions and diligenceArticle 6(1)(f) — legitimate interestsEstablishing, exercising, or defending legal claimsArticle 6(1)(f) and Article 9(2)(f)
Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms. You may request a summary of that assessment by contacting us. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
5. How We Disclose Personal Information
We disclose personal information to the following categories of recipients:
Service providers and processors — cloud hosting and infrastructure, content delivery, data storage and backup, analytics, error monitoring, customer support and ticketing, email and communications, payment processing, accounting, identity and access management, and security vendors. These parties are contractually bound to process personal information only on our instructions and for the purposes we specify.
Affiliates and subsidiaries — for the purposes described in this Policy.
Customer organizations — if your account was provisioned by your employer or another customer, that organization's administrators can access your account information and usage activity.
Channel partners, OEMs, and integrators — where necessary to deliver, support, or license the Services in connection with their hardware or deployments.
Professional advisors — lawyers, auditors, insurers, bankers, and consultants, under duties of confidentiality.
Investors and counterparties — in connection with financing, diligence, or a proposed or completed merger, acquisition, reorganization, financing, or sale of assets, subject to confidentiality protections. If personal information is transferred in such a transaction, we will provide notice as required by law.
Government authorities and third parties — where we believe disclosure is required by law, subpoena, court order, or other legal process, or is reasonably necessary to protect the rights, property, or safety of RSYNQ, our users, or the public.
We do not disclose personal information to third parties for their own independent marketing purposes.
No sale or sharing. We have not sold personal information and have not shared personal information for cross-context behavioral advertising in the preceding twelve (12) months, and we do not do so today. We do not knowingly sell or share the personal information of consumers under 16 years of age.
6. Cookies, Analytics, and Tracking Technologies
We use cookies, local storage, pixels, and similar technologies for the following purposes:
Strictly necessary — authentication, session management, load balancing, and security. These cannot be disabled without breaking the Services.
Functional — remembering preferences such as language, region, and interface settings.
Analytics and performance — understanding how the Site and Services are used so that we can improve them.
Where required by the ePrivacy Directive and GDPR, we place non-essential cookies only after obtaining your consent through our cookie banner. You can withdraw or change your consent at any time through the cookie preferences link in the Site footer. You can also configure your browser to refuse cookies, though some features may not function properly as a result.
Global Privacy Control and Do Not Track. We recognize the Global Privacy Control ("GPC") signal and treat it as a valid opt-out request under the CCPA and other applicable U.S. state privacy laws for the browser and device from which it is received. Because there is no common industry standard for interpreting "Do Not Track" browser signals, we do not currently respond to them separately.
A current list of the cookies we set, their purposes, and their durations is available at [LINK TO COOKIE TABLE].
7. International Data Transfers
RSYNQ is headquartered in the United States, and our infrastructure and personnel are located in the United States and in other countries, including Japan, Germany, France, India, Chile, the United Kingdom. If you are located in the EEA, the UK, or Switzerland, your personal information may be transferred to and processed in countries that have not received an adequacy decision.
Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on one or more of the following safeguards:
The European Commission's Standard Contractual Clauses (Decision 2021/914), together with the UK International Data Transfer Addendum or the UK IDTA, and the Swiss addendum where applicable
An adequacy decision covering the recipient country
Derogations under Article 49, where applicable and appropriate
We conduct transfer impact assessments where required and apply supplementary technical and organizational measures, including encryption in transit and at rest. You may request a copy of the relevant transfer mechanism by contacting privacy@rsynq.com.
8. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit and at rest, access controls and least-privilege provisioning, multi-factor authentication, network segmentation, logging and monitoring, vendor security review, and incident response procedures.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you are responsible for safeguarding your account credentials and API keys. If you believe your account has been compromised, contact security@rsynq.com immediately.
9. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Our criteria for determining retention periods include:
The duration of your account or your organization's contractual relationship with us
Whether the information is needed to provide, secure, or bill for the Services
Applicable legal, tax, accounting, audit, and export-control retention requirements
Whether the information is needed to establish, exercise, or defend legal claims
Whether retention is necessary to prevent fraud or abuse
Indicative periods:
Category Retention Account and profile data: For the life of the account, then 24 months
Billing, invoicing, and tax records: 7 years from the transaction
Platform and telemetry logs 12 months, unless a customer contract specifies otherwise
Security and access logs: 24 months
Marketing contact data: Until you opt out, then suppression-list retention only
Recruiting data: 36 months from application, unless you ask us to delete it sooner
Support: correspondence 36 months
When retention is no longer necessary, we delete, anonymize, or aggregate the information.
10. Automated Decision-Making
We do not make decisions producing legal or similarly significant effects concerning you based solely on automated processing, including profiling. We use automated systems for security screening, fraud and abuse detection, and rate limiting; where such a system restricts access to an account, a human reviews the decision on request. If this changes, we will update this Policy and provide the disclosures required under GDPR Articles 13(2)(f) and 22 and applicable U.S. state law.
11. Your Rights — EEA, UK, and Switzerland
Subject to conditions and exemptions under applicable law, you have the right to:
Access — obtain confirmation of whether we process your personal information and receive a copy of it
Rectification — have inaccurate personal information corrected and incomplete information completed
Erasure — request deletion of your personal information in certain circumstances
Restriction — request that we limit processing in certain circumstances
Portability — receive personal information you provided in a structured, commonly used, machine-readable format and transmit it to another controller
Object — object to processing based on our legitimate interests, and object at any time to processing for direct marketing
Withdraw consent — where processing is based on consent
Lodge a complaint — with your local supervisory authority. You may also complain to the supervisory authority of our EU representative's establishment, or, in the UK, to the Information Commissioner's Office
To exercise these rights, contact privacy@rsynq.ai. We will respond within one month, which may be extended by two further months for complex or numerous requests, and we will notify you if an extension is needed. We may request information reasonably necessary to verify your identity.
EU Representative (GDPR Article 27):
UK Representative (UK GDPR Article 27):
Data Protection Officer:
Where RSYNQ processes personal information on behalf of a customer as a processor — for example, operational data generated within a customer's SIP deployment — the customer is the controller. Please direct your request to that organization; we will assist them in responding as required by our data processing agreement.
12. Your Rights — California
If you are a California resident, the CCPA gives you the following rights:
Right to know — request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, the categories of third parties to whom we disclose it, and the categories disclosed for a business purpose
Right to delete — request deletion of personal information we collected from you, subject to statutory exceptions
Right to correct — request correction of inaccurate personal information
Right to opt out of sale or sharing — we do not sell or share personal information, so no opt-out mechanism is required; if this changes, we will post a "Do Not Sell or Share My Personal Information" link and honor GPC signals
Right to limit use of sensitive personal information — we use sensitive personal information only for purposes that do not trigger this right; if this changes, we will post a "Limit the Use of My Sensitive Personal Information" link
Right to non-discrimination — we will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised your rights
Right to no retaliation — if you are an employee, applicant, or contractor, we will not retaliate against you for exercising your rights
How to submit a request. Email privacy@rsynq.ai
Verification. We will verify your identity by matching the information in your request against information in our records, which may include your email address, account identifier, and recent account activity. For requests seeking specific pieces of personal information, we apply a higher standard of verification.
Authorized agents. You may designate an authorized agent to submit a request on your behalf. The agent must provide proof of your written permission, and we may require you to verify your own identity directly with us and confirm that you authorized the agent, unless the agent provides a valid power of attorney under California Probate Code §§ 4000–4465.
Timing. We will acknowledge receipt within 10 business days and respond substantively within 45 calendar days, with one 45-day extension where reasonably necessary and with notice to you.
Retention notice. We do not retain personal information for longer than reasonably necessary for the disclosed purposes, as set out in Section 9.
Shine the Light. California Civil Code § 1798.83 permits residents to request information about disclosures of personal information to third parties for those parties' direct marketing purposes. We do not make such disclosures. You may send inquiries to privacy@rsynq.ai.
Notice to California job applicants, employees, and contractors. We collect the categories of personal information described in Sections 2(a) and 2(f) for recruiting, employment administration, benefits, payroll, compliance, and security purposes, and retain it as described in Section 9. California residents in these categories have the rights described above.
13. Your Rights — Other U.S. States
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island — may have rights to confirm whether we process their personal data, access and obtain a copy of it, correct inaccuracies, delete it, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling. We do not engage in targeted advertising, sale of personal data, or profiling in furtherance of decisions producing legal or similarly significant effects.
Where required, we obtain consent before processing sensitive data as defined by those laws.
To exercise these rights, contact privacy@rsynq.ai. We honor GPC as an opt-out preference signal in the states that require it. If we deny your request, you may appeal by replying to our response or emailing privacy@rsynq.ai with the subject line "Privacy Appeal." We will respond to appeals within 45 days (or 60 days in states permitting that period) and will explain our reasoning. If your appeal is denied, you may contact your state Attorney General.
Nevada. Nevada residents may submit a verified request directing us not to sell certain covered information. We do not sell covered information as defined under Nevada law.
14. Children's Privacy
The Site and Services are intended for businesses and professional users and are not directed to children. We do not knowingly collect personal information from anyone under 16, and we do not knowingly sell or share the personal information of anyone under 16. If we learn that we have collected personal information from a child under 13 in violation of the Children's Online Privacy Protection Act, or from a minor under 16 without required consent, we will delete it promptly.
Contact privacy@rsynq.ai if you believe a child has provided us personal information.
15. Third-Party Sites and Services
The Site and Services may link to or interoperate with third-party websites, platforms, hardware, and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Review their privacy policies before providing personal information to them.
16. Marketing Communications
You may opt out of marketing emails at any time by using the unsubscribe link in the message or by emailing privacy@rsynq.ai. We will continue to send transactional and service-related messages — billing notices, security alerts, outage notifications, and changes to terms — which are not subject to opt-out. Where required by law, we obtain consent before sending marketing communications to individuals in the EEA, the UK, Japan, and other jurisdictions with opt-in requirements.
17. Accessibility
If you have a disability and need this Policy in an alternative format, contact privacy@rsynq.ai and we will provide it.
18. Changes to This Policy
We may update this Policy from time to time. We will revise the "Last Updated" date above and, where changes are material, provide additional notice by email or through a prominent notice on the Site before the changes take effect. Your continued use of the Site or Services after the effective date constitutes acceptance of the updated Policy.
19. Contact Us
RSYNQ Corporation 3858 W. Carson Street, Suite 220 Torrance, CA 90503, USA
Privacy inquiries: privacy@rsynq.ai Security reports: security@rsynq.ai General: info@rsynq.ai
For GDPR purposes, RSYNQ Corporation is the controller of personal information described in this Policy, except where we act as a processor on behalf of a customer as described in Section 11.