Synergos Privacy Policy and Data Protection Guidelines
This Privacy Policy explains how Synergos Experiences Limited ("Synergos," "we," "us," or "our") collects, uses, and protects your personal information. By using our services, you agree to the collection and use of information in accordance with this policy. This policy was last updated to reflect our use of Stripe for payment processing, our commitment to maintaining PCI-DSS compliance through our payment processor, our use of Daily.co for video conferencing, and to clarify our handling of administrator and attendee information.
Information We Collect
We collect different types of information depending on your role and interaction with our services:
- Basic account information (name and contact details)
- Account credentials
- Usage data and preferences
- Transaction and billing information (excluding payment card details)
- Video conferencing data (through Daily.co)
The specific information collected varies based on whether you are an administrator or an experience attendee. Please see the relevant sections below for details.
Video Conferencing and Recording
Our platform uses Daily.co ("Daily") for video conferencing services. When participating in video experiences:
- Video conferencing is provided through Daily's secure platform
- Your use of video features is subject to Daily's privacy guarantees and security measures
- Experiences may be recorded for quality assurance purposes
- Access to recordings is strictly limited to authorized personnel
For more information about Daily's privacy practices, you can visit Daily's Privacy Policy. Daily's Privacy Policy
Recording Policy:
- Recordings are used solely for quality assurance and service improvement
- Recordings are stored securely with restricted access
- Recordings are retained only for the period necessary for these purposes
- Participants have the right to object to recording, subject to experience requirements
Experience Attendee Information
For participants attending experiences through our platform, we collect and store only essential information needed to facilitate the experience:
- Full name
- Email address
- Video conferencing participation data
This minimal data collection ensures:
- Proper identification during experiences
- Essential communication about the experience
- Delivery of experience-related materials
- Smooth operation of video conferencing features
We limit attendee data collection to these essential elements to protect privacy while maintaining service quality.
Administrator Information
For company administrators, we collect and store additional information necessary for account management and service delivery:
- Full legal name
- Phone number
- Company details, including:
- Company name
- Company address
- Company phone number
This information is collected and stored for:
- Account verification and security
- Service-related communications
- Legal compliance and contractual obligations
- Customer support and account management
Administrator information is stored securely and accessed only by authorized personnel for legitimate business purposes.
Payment Processing
Our payment processing services are provided by Stripe, Inc. ("Stripe"), a third-party payment processor. When you make a payment on our platform:
- All payment card information is collected, processed, and stored directly by Stripe in accordance with the Payment Card Industry Data Security Standards (PCI-DSS)
- Synergos does not collect, store, or process any credit card numbers or related sensitive payment data
- We may receive and store certain non-sensitive payment information (such as the last four digits of your payment card, expiration date, and billing address) to facilitate future transactions and provide customer support
- Stripe's collection and use of your payment information is governed by their privacy policy and terms of service
For more information about Stripe's security practices and privacy policy, please visit https://stripe.com/privacy. https://stripe.com/privacy
How We Use Your Information
We use the information we collect to:
- Provide and maintain our services
- Process your transactions
- Send you important updates and notifications
- Improve our services and user experience
- Verify administrator accounts and maintain security
- Communicate with company administrators regarding service updates, account management, and support
- Facilitate experience participation and communication
- Ensure proper experience delivery to attendees
- Maintain quality standards through session recording review
- Analyze and improve our video conferencing services
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Using industry-standard encryption protocols for data transmission
- Maintaining physical, electronic, and procedural safeguards
- Regular security assessments and updates
- Partnering with PCI-DSS compliant service providers for payment processing
- Restricting access to administrator information to authorized personnel only
- Implementing role-based access controls for sensitive data
- Securing attendee information with appropriate access controls
- Protecting video recordings with enterprise-grade security measures
- Using Daily.co's secure video conferencing infrastructure
However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to data processing
- Request a copy of your stored information
- Update your profile information
- Be informed about session recording
- Object to session recording (subject to experience requirements)
These rights apply to both administrators and experience attendees. You can exercise these rights by contacting our support team or through your account settings where available.
Last updated: July 2024