This Data Processing Agreement Summary ("DPA Summary") outlines the terms under which Syntropy AI Global Inc. ("Processor" / "Service Provider") processes personal data on behalf of our business customers ("Controller" / "Business").
1. Role of the Parties & Processing Instructions
Under the CCPA/CPRA and similar laws (and GDPR Article 28 where it applies), Customer is the Controller (or Business) and Syntropy AI Global Inc. is the Processor (or Service Provider). We process Customer Personal Data solely on Customer's documented instructions, including to provide, maintain, secure, and support the subscribed Services, and we never sell Customer Personal Data or share it for cross-context behavioral advertising.
2. Details of Data Processing
Our DPA includes the following processing details:
| DPA Element | Specification |
|---|---|
| Subject matter & duration | Provision of Syntropy AI Global SaaS and custom software services for the duration of the subscription or Order Form, plus the post-cancellation data export period. |
| Nature & purpose of processing | Cloud hosting, data synchronization, inventory and sales reconciliation, reporting, CRM lead intake and routing, business messaging through connected platforms such as WhatsApp, consent-based remote support sessions, custom software services under a SOW, and customer technical support. |
| Categories of data subjects | Customer's authorized employees and cashiers, store managers, sales representatives, and Customer's own customers, leads, and contacts, including people who message Customer or submit Customer's lead forms. |
| Categories of personal data | Names, emails, phone numbers, role titles, staff sign-in and activity records, CRM lead and contact details, lead form answers, message content, remote support session records, and system audit logs. Excludes payment card numbers and security codes. |
3. Technical & Organizational Security Measures
Syntropy AI Global Inc. maintains technical and organizational measures including TLS encryption in transit, encryption at rest through our hosting providers, logical separation of each customer's data, role-based permissions, regular database backups, and notification of a confirmed personal data breach without undue delay and within 72 hours of confirmation.
4. Sub-processors, Audits & International Transfers
Sub-processors: Customer authorizes the sub-processors listed at /legal/sub-processors. We enter into written agreements with each sub-processor imposing data protection obligations no less protective than our DPA.
International transfers: Our Services are hosted in the United States. Where personal data subject to EU or UK law is transferred, the DPA incorporates the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
Requesting a signed copy: To request a countersigned copy of our full Data Processing Agreement, email privacy@syntropyaiglobal.com or legal@syntropyaiglobal.com.
Questions about this data processing agreement (dpa summary)? Contact us at get@syntropyaiglobal.com.