HOW WE HANDLE
YOUR DATA

Last updated: January 2025

0.1 Introduction

This Privacy Policy describes how OffSyntax (“we”, “us”, or “our”) collects, uses, stores, and protects your personal and business data when you use our workflow automation services, visit our website, or otherwise interact with us. By using our services, you agree to the practices described in this policy.

0.2 Information we collect

• Account and contact data: When you sign up or contact us, we collect your name, email address, company name, and any other information you provide (e.g. via our contact form or discovery call scheduling).
• Workflow and usage data: We collect information necessary to operate your workflows: workflow definitions, trigger configurations, execution logs, connection metadata, and performance metrics. This data is used to run, debug, and improve the service.
• Data that passes through our systems: Your business data (e.g. emails, CRM records, orders) flows through our platform only to execute the workflows you have authorized. We do not use this data for marketing, analytics beyond service delivery, or any purpose other than providing the automation you requested.
• Technical data: We may collect IP addresses, browser type, device information, and usage patterns when you access our dashboard or website, for security and service improvement.

0.3 How we use your information

• To provide and operate our workflow automation services.
• To communicate with you about your account, support requests, and service updates.
• To improve our platform, fix errors, and develop new features.
• To comply with legal obligations and enforce our terms.

We do not sell your data to third parties. We do not use your business data for advertising or marketing to third parties.

0.4 Data retention

We retain your data only as long as necessary to provide our services, comply with legal obligations, and resolve disputes. Workflow execution logs and metadata are retained for a limited period (e.g. 90 days for detailed logs, longer for aggregated analytics where applicable). You may request deletion of your data subject to our retention obligations.

0.5 Data sharing and third parties

• Service providers: We may use trusted third-party providers (e.g. hosting, email, analytics) to operate our platform. These providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.
• Third-party integrations: Your workflows may connect to services such as Slack, Shopify, HubSpot, and Gmail. Data shared with those services is governed by their respective privacy policies. We do not control how those services use your data.
• Legal disclosure: We may disclose your information if required by law, court order, or to protect our rights, your safety, or the safety of others.

0.6 Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (subject to legal and operational constraints).
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, machine-readable format.

To exercise these rights, contact us via Contact. We will respond within a reasonable timeframe. If you are in the European Economic Area (EEA) or UK, you also have the right to lodge a complaint with your local data protection authority.

0.7 Cookies and tracking

Our website and dashboard may use cookies and similar technologies for essential functionality, security, and to improve user experience. We do not use third-party advertising cookies. You can manage cookie preferences in your browser settings.

0.8 International transfers

Our services may process data in countries outside your residence. When we transfer data internationally, we ensure appropriate safeguards (e.g. Standard Contractual Clauses, adequacy decisions) are in place to protect your information in line with applicable law.

0.9 Children's privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete it.

0.10 Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last updated” date. Continued use of our services after changes constitutes acceptance of the updated policy.

0.11 Contact

For questions about this Privacy Policy, your data, or to exercise your rights, contact us via Contact.