Privacy policy
1. Scope
This privacy policy explains how personal data is processed in connection with:
- the website at synchra.app;
- launch-price reservations and the referral programme;
- product updates and newsletters;
- customer support and service communications related to the above.
Synchra is currently intended for users in the European Union and European Economic Area.
The Synchra mobile applications, wall display, household accounts, third-party integrations, and AI-assisted product features are not yet generally available through this website. When those features become available, this privacy policy will be updated to describe the related processing, or a supplementary notice will be provided.
2. Controller
The controller is:
Space Individuals OG
Geusaugasse 10
1030 Vienna, Austria
Company register number: FN 498426 f
VAT ID: ATU73694601
Email: founders@synchra.app
We are not currently required to appoint a Data Protection Officer.
3. Data we process
3.1 Launch-price reservation and referral programme
When you reserve a launch price we may process:
- name and email address;
- preferred language;
- sign-up source;
- marketing consent status and timestamp;
- referral code, inviter code, confirmed referrals, and reserved price;
- verification and login timestamps;
- browser and device information;
- a one-way hash of the IP address for abuse prevention and rate limiting.
3.2 Verification and login
For email verification and reservation-area login we may process:
- email address;
- hashed one-time code;
- verification attempts;
- expiry time;
- a one-way hash of the IP address;
- session and security information.
One-time codes expire after ten minutes and are single-use.
3.3 Product updates and newsletters
If you subscribe to product updates we may process:
- email address;
- name, if provided;
- language;
- sign-up source and date;
- consent records;
- delivery, opening, and link-interaction data where enabled by our email provider.
Users can unsubscribe through the link in every marketing email.
3.4 Technical and security data
Our hosting provider processes standard request data needed to deliver the website and APIs, such as IP address, requested URL, timestamp, referrer, and user agent. Analytics data is collected only if you accept analytics cookies.
3.5 Future product features
When Synchra account, household, wall-display, integration, or AI-assisted features become available, we may process additional categories of data needed to provide those features — for example account and profile details, household membership information, user-created content, connected-service data you choose to link, and inputs you submit to AI-assisted tools. Those categories will be described in an updated privacy policy before or when the features launch.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Website and reservation-area features | Art. 6(1)(b) GDPR |
| Launch-price reservation and referral benefits | Art. 6(1)(b) GDPR |
| Verification and security | Art. 6(1)(b) and Art. 6(1)(f) GDPR |
| Marketing emails | Art. 6(1)(a) GDPR |
| Non-essential analytics and cookies | Art. 6(1)(a) GDPR |
| Fraud prevention and service protection | Art. 6(1)(f) GDPR |
| Customer support | Art. 6(1)(b) or Art. 6(1)(f) GDPR |
| Accounting and legal obligations | Art. 6(1)(c) GDPR |
| Legal claims | Art. 6(1)(f) GDPR |
Where we rely on consent, you can withdraw it at any time with effect for the future. Where we rely on legitimate interests, you can object at any time under Article 21 GDPR.
5. Cookies and local storage
Strictly necessary storage may include:
- synchra_waitlist_session — signed login session for the reservation area;
- synchra_reserved — remembers that you already reserved;
- synchra_referral — remembers the invite code you arrived with;
- cookieConsent — stores your analytics cookie choice in local storage.
With consent, Synchra may use Google Analytics 4. Analytics scripts do not load before you accept analytics cookies. Analytics data in Google Analytics is configured to be retained for no longer than 14 months.
You can accept analytics, reject analytics, or later change or withdraw a previous choice through the persistent Cookie settings link in the website footer. You do not need to clear your browser storage to withdraw analytics consent. When consent is withdrawn, Synchra stops loading Google Analytics on future page views, updates the stored consent choice, and removes Google Analytics cookies set for this site where technically possible.
6. Processors and recipients
We use service providers that process personal data on our instructions. We do not sell personal data or share it for third-party behavioural advertising.
| Provider | Purpose | Data |
|---|---|---|
| Vercel Inc. | Website and API hosting | Request, technical, and service data |
| Database / key-value storage | Waitlist, referral, and newsletter records | Account and programme data described in section 3 |
| Resend | Transactional email | Email and message metadata |
| Brevo | Marketing email | Name, email, language, engagement |
| Google Ireland Limited | Analytics (only with consent) | Analytics data |
We may also disclose data where we are legally required to do so, or to establish, exercise or defend legal claims.
7. International transfers
Some providers may process data outside the European Economic Area. Where that happens, we rely on an applicable adequacy decision, the EU–US Data Privacy Framework where valid and applicable, Standard Contractual Clauses, and supplementary safeguards where appropriate.
You can request more information about the safeguards we use by writing to founders@synchra.app.
8. Retention
| Data | Retention |
|---|---|
| Reservation and referral records | Until programme administration and related claims end, or you ask us to delete them |
| Marketing subscription | Until unsubscribe; a minimal suppression record may remain |
| Verification codes | Ten minutes, then deleted shortly afterwards |
| Analytics | Up to 14 months in Google Analytics, if you consented |
| Tax and accounting records | Required statutory period |
9. Security
For the website and waitlist we use measures appropriate to the processing, including encryption in transit, signed reservation-area sessions, hashed one-time codes, hashed IP addresses where stated, and rate limiting on verification endpoints. No method of transmission or storage is completely secure.
10. Children
- Users must be at least 16 to create their own reservation or account on this service.
- Synchra does not knowingly create independent accounts for children under 16.
- Children’s data is not used for behavioural advertising.
11. User rights
Users may have rights to:
- access;
- correction;
- deletion;
- restriction;
- data portability;
- objection;
- withdrawal of consent;
- objection to direct marketing;
- complaint to a supervisory authority.
Contact: founders@synchra.app
Austrian supervisory authority:
12. Deletion requests
You may ask us to delete your launch-price reservation, referral records, or newsletter subscription by contacting founders@synchra.app. You can also unsubscribe from marketing emails using the link in every message.
To delete a Synchra app account and related data, use the instructions on synchra.app/delete-account (in-app deletion or email request).
13. Changes
Material changes should be communicated through email, the website, or another suitable channel before they take effect where required. The current version is always published on this page with its effective date.