Privacy Policy
1. This website
- No tracking cookies, no ad trackers, no third-party analytics.
- Server logs (IP address, requested page, timestamp) are kept for 30 days for security purposes; legal basis: legitimate interest.
- Fonts are self-hosted on our server; no request is made to Google or any third party when the page loads.
2. The SyncMyGAL service (customers)
When a company subscribes, we act as a processor (art. 28 GDPR) for the directory data of its Microsoft 365 tenant: names, job titles, business contact details. Sole purpose: writing those entries into the personal contacts of employees of the same tenant. Technical details: Security page.
- We do not store a copy of your directory — read, write, release from memory.
- Stored data: tenant identifier, subscription state, encrypted access tokens (AES-256-GCM), sync run logs. Retention: contract duration + 30 days.
- Hosting and processing in the European Union.
- Sub-processors: Hetzner Online GmbH (hosting, Germany — EU). No others.
- A Data Processing Agreement (DPA) is available on request.
3. Business contact
If you write to us, we keep the exchange for the duration of the business relationship. Legal basis: pre-contractual measures / legitimate interest.
4. Your rights
Access, rectification, erasure, restriction, objection, portability: write to privacy@syncmygal.com. You may lodge a complaint with your supervisory authority. For directory data processed on behalf of your employer, contact your employer first: they are the controller, we are their processor.