Privacy Policy

1. Overview and Data Controller

Scynro Global Inc. ("Scynro", "we", "us") is a global IT and AI integration firm. This Privacy Policy applies to our website (scynro.com) and the data we process in the course of providing consulting and integration services. For the purposes of the General Data Protection Regulation (GDPR) and other applicable laws, Scynro acts as a Data Processor for client data and a Data Controller for website visitor data and prospective client inquiries.

2. Information We Collect

We collect information necessary to provide enterprise services:

• Contact Information: Name, work email, company name, job title, and phone number provided via demo requests, newsletter subscriptions, or direct communication.
• Technical Infrastructure Data: When engaged in a project, we may access logs, database schemas, code repositories, and cloud configurations required for integration. This access is strictly governed by the Master Services Agreement (MSA) and our SOC 2 controls.
• Website Usage Data: IP address, browser type, and pages visited, used purely for site optimization and security monitoring.

3. How We Use Data

We use your data to respond to sales inquiries, deliver contracted IT and AI services, send requested newsletters, and maintain the security of our platform. We do not sell your personal data. We do not use client data to train public AI models.

4. AI and Machine Learning Processing

When we deploy AI models (including LLMs, vector databases, and RAG pipelines) for your enterprise, we architect isolated environments. Your proprietary data remains within your VPC or a dedicated, encrypted tenant. Data processed for your AI workflows is retained only as long as necessary for the operation of the system or as defined in your Statement of Work (SOW). We do not use your prompts or outputs to fine-tune models outside your tenant.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned and the specific context in which we collect it:

• Contractual Necessity: To fulfill our obligations under an SOW or MSA.
• Legitimate Interests: To improve our services, respond to inquiries, and maintain security.
• Consent: For marketing communications (like our newsletter), which you may withdraw at any time.

6. Data Security and Compliance

We implement zero-trust architecture, end-to-end encryption (TLS 1.3 in transit, AES-256 at rest), and role-based access controls. Our infrastructure is designed to meet SOC 2 Type II, ISO 27001, and HIPAA compliance standards where applicable. We undergo annual third-party security audits.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. For client project data, retention is defined in the applicable MSA.

8. Third-Party Sub-Processors

We use vetted sub-processors (e.g., AWS, Google Cloud, Azure) to provide infrastructure. A current list of sub-processors is available upon request. We do not share your data with advertising networks or data brokers.

9. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to access, correct, delete, restrict, or port your personal data. For data processed on behalf of a client, please contact that client directly, as they are the data controller. For website data inquiries, contact us using the details below.

10. Contact Us

For privacy inquiries, contact our Data Protection Officer at privacy@scynro.com.