Privacy

Account data: your name, email, and password hash. We store a hash of your password, never the password itself. Workspace data: the contacts, conversations, messages, calls, and settings your team creates in the product.

We record high value actions in an audit log, and we record sign-in events for security. We do not sell your data, and we do not use it for advertising.

Syncodial connects to your own Twilio account using a scoped Standard API key that you create. We never store your Twilio Auth Token. Stored Twilio credentials are encrypted at rest, and inbound webhooks are authenticated with a secret URL token and an HMAC signature.

When your team sends and receives messages and calls, that content passes through Twilio, your telecom provider, and is stored in your Syncodial workspace so your team can work it. You control this data. You can export it and request deletion at any time.

We use Twilio for telecom, Paddle as our payment provider and merchant of record, an email provider for transactional email, and standard cloud infrastructure to run the service. Each processes data only to provide its part of the service.

Operational data is kept while your workspace is active. When a workspace is deleted, its data is purged after a short recovery window. Audit records are retained for a longer compliance period. Sign-in and webhook logs are pruned on a rolling schedule.

You can export your workspace data as a single file, and you can request workspace deletion, from inside the product. For any other request about your personal data, contact us at hello@syncodial.com.

Questions about privacy can go to hello@syncodial.com.