This Privacy Policy explains how Eco-Sync (“we”, “us”) collects, uses, shares, and protects personal data when you use our website, API, and widget (the “Services”).
Eco-Sync is currently a mission-driven startup initiative. We are building the Services iteratively and transparently. If any part of this Policy changes as we grow, we will update the effective date above.
1. Data we process
Depending on how you use the Services, we may process:
- Contact information (e.g., email address when you contact support or request a license key delivery).
- Account / access data (e.g., API key identifiers, allowed domain, status, expiry).
- Usage and technical data (e.g., IP address, user agent, request metadata, timestamps, error logs).
- Calculation inputs you send to the API (e.g., origin/destination text, weight, transport settings) and resulting outputs.
2. Purposes of processing
- Provide and operate the Services (including security, authentication, and abuse prevention).
- Respond to support requests and deliver transactional emails (e.g., license key delivery).
- Maintain, debug, and improve reliability and performance.
- Prevent misuse and unauthorized access.
3. Legal bases (GDPR)
- Performance of a contract (providing the Services you request).
- Legitimate interests (security, fraud prevention, service improvement).
- Consent (only where required for specific cookies/analytics).
- Compliance with legal obligations (where applicable).
4. Sharing
We may share data with service providers strictly to operate the Services (e.g., hosting, email delivery). We do not sell personal data.
5. International transfers
If data is transferred outside the EEA, we use appropriate safeguards (such as standard contractual clauses) where required.
6. Retention
We retain personal data only as long as needed for the purposes described above, unless a longer retention period is required by law.
7. Your rights
Subject to applicable law, you may have the right to:
- Access, correct, or delete your personal data.
- Object to or restrict processing.
- Data portability.
- Withdraw consent (where processing is based on consent).
- Lodge a complaint with a supervisory authority.
8. Contact
For privacy questions or requests, contact: [email protected].