Privacy Policy

YTT Global Services ("YTT Global", "we", "us") operates Synapse Console, a content, communications and business-growth platform for small businesses, solo founders and community leaders.

We act in two different roles, and the difference matters:

• Your account and usage data. For information about you as a user (your name, email address, how you sign in and use the service), we decide how it is used. In data-protection terms we are the controller (under India's Digital Personal Data Protection Act, the "Data Fiduciary"). This policy explains how we use it.
• Information you keep about other people. For the contacts, leads, form submissions, job applicants, clients and message recipients you store in Synapse, you decide why and how it is used, and we handle it on your behalf as your processor. We act only on your instructions, under our Data Processing Agreement. If you are a person whose details were collected by a Synapse customer (for example, you filled in a form on their website), please contact that customer first; we will help pass your request on to them.

We collect only what we need to provide the service. Depending on how you use Synapse, that includes:

• Account details: your name, email address, role and profile photo, which come through our sign-in provider, plus optional profile details such as a bio, job title, social links, employee ID and department.
• Workspace details: your organisation name, industry, size, website and branding such as logo and colours.
• Content you create: posts, drafts and their version history, images you upload, proposals, job postings, message templates and similar material.
• Information about your contacts and leads (where we are your processor): names, email addresses, phone numbers, company and job title, notes, tags, messages you send, form submissions, job applications and interview details, and client records.
• Usage and security data: sign-in events, an audit log of actions taken in your workspace (who did what, and when), and technical details such as IP address, browser type and device in server and security logs.
• Link and QR tracking, if you use it: when someone opens one of your short links we record the time, approximate location (country and city, from our network provider), the browser's user-agent text and the device type, browser and operating system taken from it, the referring address, and a one-way hashed identifier used to count unique visitors. We do not store the raw IP address for this purpose.
• Error reports: technical details of an error (the error message, the page it happened on without its query string, the request method and your workspace identifier). They are not designed to contain your content, although an error message can occasionally repeat a small piece of the input that triggered it.
• Integrations you connect: for example, if you connect LinkedIn we receive your profile name and identifier and the access token you authorise so that we can publish on your behalf.
• Messages you send us: anything you send through our contact form or to our support and privacy addresses.

We do not currently collect payment card details. If paid plans are introduced, payments will be handled by a payment provider and this policy will be updated first.

We use your information only to:

• provide and operate Synapse, including signing you in, storing your content and delivering the features you use;
• keep the service secure, prevent fraud and abuse, and enforce our Terms of Service;
• send you service messages about your account, security and important changes;
• send email and SMS that you ask Synapse to send to your own contacts;
• run AI features when you choose to use them (see section 6);
• give you support and respond to your requests;
• improve our existing applications and services, by looking at error reports, support requests, and logs and performance data, so that we can fix problems and serve you better; and
• meet legal obligations.

We do not use your data for advertising, we do not build advertising profiles, and we do not make decisions about you that have legal or similarly significant effects by automated means.

We do not sell personal data, and we do not share it for advertising. This is true of your account information, your content, and the contacts and leads you store with us. We do not use advertising or analytics trackers inside Synapse Console.

We share information only in the limited ways described in section 5: with service providers that help us run Synapse, when you tell us to, or when the law requires it. If our ownership ever changed (for example, in a merger), we would tell you first and your data would remain protected by commitments no weaker than these.

We use a small number of service providers to run Synapse. We choose providers whose own terms restrict how they may use the data they handle for us. The providers, and when each one is involved, are:

We may also disclose information when you tell us to (for example, publishing to a website or webhook address you configure), when the law requires it (such as a valid legal request), or to protect the rights, safety or security of our users and the service.

We do not sell this information to the providers above or to anyone else.

Synapse includes optional AI features, such as rewriting text, repurposing a post into other formats, scoring leads and contacts, drafting proposals and suggesting content ideas. AI features run only when you use them.

When you use one, the text and details you submit to it (for example, the text to rewrite, the post to repurpose, or the lead or client details to score or draft from) are sent to our AI provider, Groq, solely to generate the result you asked for. We do not train AI models, and we do not use your content, or your contacts' details, to train any. Groq's documentation says it does not retain inference requests by default, and that it may temporarily log inputs and outputs, for up to 30 days, only when troubleshooting errors that affect the platform or investigating suspected abuse. Please see Groq's own privacy documentation for its terms.

AI output can be wrong or unsuitable. Please review it before you rely on it or send it to anyone, and do not submit information you are not allowed to share.

We process your personal data with your consent, which you give when you create an account and use the features described here, and for certain legitimate uses the law allows without consent, such as providing a service you asked for, keeping the service secure and complying with legal obligations.

You can withdraw your consent at any time by closing your account or by writing to privacy@ytt.global. Withdrawing consent may mean we can no longer provide some or all of the service, and it does not affect processing that already took place.

• We keep your account and workspace data while your account is active.
• When you close your account, or ask us to delete your data, we delete your personal data within 30 days, except where the law requires us to keep something longer.
• Backups held by our infrastructure providers are overwritten on their normal schedule.
• Security logs and the audit log are kept as long as needed to protect the service and meet legal obligations.

Data you hold about your own contacts is kept for as long as you keep it in Synapse, and is deleted with your workspace.

Synapse Console uses only the cookies it needs to work, mainly the session cookies set by our sign-in provider to keep you signed in and secure. It also stores some interface preferences in your browser (for example, whether the sidebar is collapsed or which notifications you have read); these stay on your device and are not sent to us.

We do not use advertising or analytics cookies in Synapse Console. You can control cookies in your browser settings, although blocking essential cookies will stop you from signing in.

Our main website at ytt.global is a separate site, and may measure visits with your consent as described there.

We protect your information with encryption in transit (TLS); our infrastructure providers encrypt stored data at rest; each workspace's data is kept separate from every other workspace's; access is limited to people who need it; and actions in your workspace are recorded in an audit log. Sign-in is handled by a specialist provider, and you can protect your account with additional verification where it is offered.

No system is completely secure. Please use a strong, unique password and tell us promptly at privacy@ytt.global if you suspect a problem. If a security incident is likely to affect your personal data, we will notify you and the relevant authorities as the law requires, without undue delay.

Our service providers operate internationally. Your information may be stored and processed in countries other than your own, including the United States. Where the law requires it, we make sure appropriate safeguards are in place, and we follow the cross-border transfer rules that apply to us.

Under India's Digital Personal Data Protection Act, 2023, and other privacy laws that may apply to you, you have the right to:

• get a summary of the personal data we process about you and how we use it;
• ask us to correct, complete or update your personal data;
• ask us to erase your personal data;
• withdraw your consent at any time;
• have a grievance dealt with (see section 16); and
• nominate another person to exercise these rights for you if you die or become unable to do so.

To use any of these rights, write to privacy@ytt.global from the email address on your account so we can verify it is you. We aim to respond within 30 days. Self-service deletion and data export inside the app are not available yet, so today these requests are handled by email.

If we have not resolved your complaint, you may also complain to the Data Protection Board of India, once you have used our grievance process.

Synapse is a business tool and is not intended for anyone under 18. We do not knowingly collect personal data from children. If we learn that we have, we will delete it promptly.

Synapse can link to, or connect with, services we do not run, such as LinkedIn or the websites you publish to. Their privacy practices are their own, and we are not responsible for them.

We may update this policy as Synapse develops. We will tell you about material changes by email or an in-app notice at least 14 days before they take effect, and we will show the new version number and date at the top of this page.

For any privacy question, request or complaint, write to our privacy and grievance contact at privacy@ytt.global. For general help, write to support@ytt.global. We acknowledge privacy requests and complaints promptly and aim to resolve them within 30 days.

YTT Global Services operates Synapse Console. We do not publish a postal address; please use the email addresses above.