Legal

Privacy Policy

Last updated: October 25, 2026

Who we are

This Privacy Policy explains how SynthoCore Automation Inc. (“SynthoCore,” “we,” “us,” or “our”) collects, uses, and protects information when you visit synthocore.ca (the “Site”), submit an inquiry through one of our forms, purchase a subscription, sign in to a SynthoCore account, or use SynthoDesk, SynthoFlow or SynthoOps. SynthoCore is an engineering-automation company. Our governed AI capabilities are in development and are labelled as such in each product.

Information we collect

When you submit our contact form, we collect the information you provide, which may include your name, email address, company, the type of inquiry (general, partnership, press, investor, or careers), and any message you share.

Sign-in accounts. Sign-in is federated through Microsoft or Google; SynthoCore stores no customer password of any kind. When you sign in or create a SynthoCore account, we store a minimal profile: a stable identifier, the identity provider you used (Microsoft or Google), and your email address.

Purchases. Direct purchases are processed by Paddle, which acts as merchant of record and calculates applicable sales tax or VAT. Card details and other payment instrument data are handled entirely by Paddle and are never received or stored by SynthoCore. From a completed Paddle transaction we receive a transaction record, a subscription record, and the email address associated with the purchase. We do not receive card numbers. Purchases made through Microsoft are billed by Microsoft; SynthoCore receives a corresponding licence activation record.

SynthoDesk service data. SynthoDesk uses a Cloudflare Worker at api.synthocore.ca, with D1 database and R2 object storage on Cloudflare’s global network. It stores tenant and profile records (including name, email hint, and contact fields you enter), governed content blocks and brand kits uploaded by tenant administrators, licensing and entitlement decisions, and privacy-safe operation diagnostics (counts, timings, and error codes, never document text).

Your documents, workbooks, presentations, and mail stay in Microsoft 365. SynthoDesk reads and writes the active Office item through Office.js; user-requested linked-table workflows also use Microsoft Graph with your consent and your own file permissions. SynthoDesk does not store copies of your document content or mail bodies. Workbook values are not stored beyond user-initiated linked snapshots. Content blocks and brand kits intentionally uploaded for reuse are stored separately as described above.

Optional SynthoDesk AI previews process only the text or structured data selected for the action through the SynthoCore gateway and Cloudflare Workers AI. SynthoCore does not retain prompt or response bodies; operational usage metadata is recorded.

SynthoFlow service data. SynthoFlow runs on Cloudflare Pages (the web app) and Microsoft Azure (the application service, a PostgreSQL database and storage for tenant exports). It stores your account and workspace records, projects, calculations and the templates you create, version history, review and approval records, and the project event log. Optional AI features are off by default; when a workspace turns them on, only the content selected for the action is processed through the SynthoCore AI gateway with Microsoft Azure AI services.

SynthoOps service data. SynthoOps runs on Cloudflare (Pages, Workers, a separate D1 database for each company and R2 storage for original documents and backups). It stores your company’s bookkeeping, costing, project, reporting and document-intake records and the documents you upload. Document intake reads uploaded documents automatically; a company may opt in to Microsoft Azure AI Document Intelligence for extraction. If you connect SharePoint, SynthoOps uses Microsoft Graph with the permissions you grant.

Licensing records. Our central licensing service keeps entitlement, seat and subscription records for every product, and the identity and company associations needed to decide access.

Trial and evaluation record. To enforce one trial per person and per company, our central licensing service keeps a record that a trial or evaluation was used: an internal person or company identifier, the product, start and end dates and the outcome. The record has no payment data — Paddle holds the card. It is kept after a subscription ends, so a cancelled customer cannot restart the same trial.

Like most websites, we may also automatically collect limited technical information, such as your IP address, browser type, and pages visited, through standard server logs and hosting infrastructure.

How we use your information

We use the information we collect to respond to your inquiry, to contact you about the product you asked about, to operate and secure your account, and to fulfil and manage your subscription. We do not sell, rent, or trade your personal information to third parties. We do not use your information for advertising profiling. We do not place third-party tracking or advertising scripts on this Site.

How form submissions are handled

Information submitted through our contact form is sent via an automated mailer (webform@synthocore.ca) to our team’s inbox (info@synthocore.ca) so we can respond to you. Submissions are not sold, shared with advertisers, or used for any purpose other than replying to and following up on your request. We take reasonable administrative and technical precautions to protect your information from unauthorized access, loss, or misuse. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Cookies

Our Site may use minimal cookies and local storage required for basic website functionality, including remembering your light/dark theme preference. We do not currently use advertising or third-party tracking cookies. If this changes, we will update this policy accordingly.

Third-party services

This Site is hosted on Cloudflare Pages. Our products use Microsoft and Google for sign-in; Microsoft for Office services (SynthoDesk) and Azure hosting and AI services (SynthoFlow, and opt-in extraction in SynthoOps); Cloudflare for hosting and storage (and optional Workers AI processing); SMTP2GO for transactional email; and Paddle for direct-subscription billing through SynthoCore’s central licensing service. SMTP2GO receives recipient addresses and the transactional email content needed for delivery. Microsoft-channel purchases are billed by Microsoft. See the subprocessor list for purposes and data-location information.

Cross-border data transfer

SynthoDesk and SynthoOps service data is processed on Cloudflare’s global network; SynthoFlow service data is processed on Microsoft Azure. Your Office files and mail remain in your Microsoft 365 environment; identity and Office operations also use Microsoft’s service infrastructure. Processing by these providers, SMTP2GO, and Paddle may take place outside your country. We do not promise a specific storage region on this page.

Data retention

We keep your product data while your subscription is active. Cancelling does not automatically delete it. To request deletion of your SynthoDesk, SynthoFlow or SynthoOps data, write to support@synthocore.ca. We complete deletion within 30 days of your written request and provide written confirmation. Deleting SynthoDesk data does not delete documents, workbooks, presentations or mail in your Microsoft 365 environment.

If you ask us to erase your personal information, we remove your identifiers from our licensing records, so the trial and evaluation record can no longer be linked to you. We keep the anonymised commercial and audit records that accounting and legal obligations require.

Your rights

Under Canadian privacy law (PIPEDA), you have the right to ask what personal information we hold about you, request corrections, or request that we delete it. To make a request, contact us using the details below.

Children’s privacy

Our Site and services are intended for business use and are not directed at children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices. The “Last updated” date at the top of this page indicates when it was last revised.

Contact us

If you have questions about this Privacy Policy or how we handle your information, please contact us at info@synthocore.ca.

SynthoCore Automation Inc. · Terms of Service · EULA · Refund Policy