Privacy Policy | SupportSyndicate

1. Data Controller

Support Syndicate LLC ("we", "us", "our"), operating as SupportSyndicate, is the data controller responsible for your personal data collected through our platform.

2. Information We Collect

Account Information: Name, email address, company name when you sign up
Chat Data: Conversations between your chatbot and your customers
Knowledge Base: Content you upload to train your chatbot (documents, URLs, text)
Usage Data: Analytics about how you use the platform, including device identifiers, IP address, and browser information
Login Credentials: Encrypted passwords and authentication tokens
Support Messages: Any communications you send to our support team

3. How We Use Your Data

To provide the service (legal basis: contract performance) — account creation, chatbot functionality, and delivering features within your plan
To respond to support requests (legal basis: contract performance) — resolving issues and answering questions
To improve the service (legal basis: legitimate interest) — analysing usage patterns, fixing bugs, and developing new features
Security and fraud prevention (legal basis: legitimate interest) — detecting and preventing unauthorised access or abuse
To send service updates (legal basis: legitimate interest) — important product changes and security notices
Marketing communications (legal basis: consent) — product news and tips, only when you opt in

4. Data Storage and Security

We use industry-standard security measures to protect your data. All data is encrypted in transit (TLS) and at rest. We use secure cloud infrastructure with regular security audits and access controls to limit data access to authorised personnel only.

5. Data Sharing

We share your personal data only with the following categories of recipients:

Paddle.com — our Merchant of Record, which handles payment processing, subscription management, tax compliance, and invoicing on our behalf
AI providers — for generating chatbot responses (data is processed according to our data processing agreements)
Cloud hosting providers — for secure data storage and infrastructure
Analytics tools — for service improvement and usage analysis
Professional advisers — legal and accounting advisers where required
Authorities — where required by law or to protect our legal rights

6. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your personal data
Restriction: Request that we restrict processing of your data
Portability: Export your data in a standard, machine-readable format
Objection: Object to processing based on legitimate interest
Withdraw consent: Where processing is based on consent, you may withdraw it at any time
Complaint: Lodge a complaint with your local data protection supervisory authority

We will respond to all rights requests within one month.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide the service. Upon account deletion, we remove or anonymise your data within 30 days, except where we are required by law to retain it for longer.

8. Cookies

We use cookies and similar technologies to provide essential functionality, analyse usage, and personalise your experience. For full details, see our Cookie Policy. You can manage your cookie preferences through your browser settings or our cookie consent banner.

9. International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses or adequacy decisions, to protect your data.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or through the platform.

11. Contact

For privacy inquiries, contact Support Syndicate LLC at privacy@supportsyndicate.com.