Last updated: May 24, 2026
Privacy Policy
This is the initial version of our Privacy Policy. We may revise it as the product evolves and will note material changes here.
1. Who we are
SynQUS (the “Service”) is operated from Canada. References to “we,” “us,” and “our” in this Policy refer to the operators of SynQUS. For privacy questions or requests, contact us at privacy@synqus.ca.
2. Information we collect
We collect information in three categories:
- Account information. Your name, email address, and the authentication identifier from whichever sign-in method you choose (Google, Microsoft, Apple, or email + password). If you set up an organization, we also store the organization name and the roles you assign to your teammates.
- Calendar and scheduling data. When you connect a calendar, we read event metadata (start, end, attendees, location, title, description) so we can find availability, coordinate meetings, and write the events you ask us to create. We retrieve only what's needed to provide the service.
- Usage and product data. Pages you visit, features you use, scheduling preferences our system infers from your activity, and standard server logs (IP address, browser type, timestamps) for security, debugging, and abuse prevention.
3. How we use it
We use the information above to:
- Provide the scheduling features you sign up for.
- Send transactional emails — booking confirmations, account changes, password resets, billing receipts.
- Maintain the security and integrity of the service (rate limiting, fraud prevention, debugging errors).
- Improve the product over time, including anonymized or aggregated usage analysis.
- Comply with legal obligations.
4. Sharing with third parties
We do not sell your personal information to advertisers. We share information only with the service providers we need to operate SynQUS, and only for that purpose:
- Calendar providers (Google, Microsoft, Apple) when you connect those calendars — they receive only the events we create on your behalf.
- Payment processor (Stripe) for paid plans — Stripe handles your payment method directly; we receive only billing status and the last four digits of your card.
- Email infrastructure (Resend) for transactional emails sent to you and to people you invite to meetings.
- Hosting and operational services (Railway, Cloudflare) that we use to run the application.
- Authorities if compelled by law (subpoena, court order, or similar). We will push back against requests we believe are overbroad.
5. Where data is stored and retained
Our primary database is operated through our hosting provider and may be located in data centers in North America. Connected calendar data is fetched on demand and cached only as long as needed to provide the relevant scheduling feature.
We retain account information for as long as your account is active, and for a reasonable period after cancellation in case you reactivate or we have legal/financial recordkeeping obligations. You can delete your account at any time (see Section 7).
6. Security
We use standard industry safeguards including HTTPS everywhere, encrypted credentials at rest, server-side rate limiting, CSRF protection, and access controls on the database. No system is perfectly secure; if you discover a vulnerability please report it to security@synqus.ca.
7. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that's inaccurate.
- Delete your account and associated data.
- Object to or restrict certain uses.
- Export your data in a machine-readable format.
To exercise any of these rights, email privacy@synqus.ca. We'll respond within a reasonable time and may need to verify your identity before acting.
8. Cookies and similar technologies
We use a small number of strictly-necessary cookies (session authentication, CSRF protection, theme preference). For product analytics we use Plausible — a privacy-first tool that is cookieless, collects no personal data, and never profiles or tracks individuals across the web; it records only aggregate, anonymous usage (such as which pages and features are popular). We don't run advertising trackers.
9. Children
SynQUS is not intended for use by anyone under the age of 16, and we don't knowingly collect data from children.
10. Changes to this policy
We may update this Policy from time to time. Material changes will be reflected in the “Last updated” date at the top of this page. Continued use of the service after a change constitutes acceptance of the updated Policy.
11. Contact
Questions, concerns, or requests? Email privacy@synqus.ca. For general support, see hello@synqus.ca.