Privacy Policy, terms and data protection

App and Developer Identification

1. Data Controller and Data Processor

Depending on the context, SYNAP IoT s.r.o. acts either as a data controller or as a data processor.

2. Categories of Personal Data

3. Purposes and Legal Bases for Processing

4. Sharing of Personal Data

We may share personal data with trusted third parties where necessary for the operation of Sepolo.

• Microsoft Azure
• Stripe
• Google Play services where required for Android app distribution, app integrity, push notifications or platform diagnostics
• Apple services where required for iOS app distribution, push notifications or platform diagnostics
• Monitoring and logging providers
• Email delivery providers
• Analytics providers
• Professional advisers
• Legal and accounting advisers

5. International Data Transfers

Sepolo services and customer data are hosted within Microsoft Azure datacenters located in Germany.

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented.

• European Commission Standard Contractual Clauses (SCCs)
• Transfers to countries with adequacy decisions
• Contractual safeguards with service providers

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

We may retain data longer where required by law or necessary for legal claims.

7. Account and Data Deletion

Sepolo accounts are normally created and administered by a customer's organization. If you use Sepolo through your employer or another organization, that organization may be the controller for your account and service data.

Users may request deletion of personal data or account-related information by contacting gdpr@sepolo.app. Where we act as processor, we will forward or handle the request in cooperation with the relevant customer organization.

When deletion is approved and no legal retention requirement applies, we delete or anonymize the relevant personal data according to our deletion procedures.

8. Security Measures

• Encryption in transit
• Secure cloud infrastructure
• Access control and role-based permissions
• Authentication and identity management
• Security monitoring and logging
• Backup and recovery procedures
• Network security controls
• Multi-factor authentication support

9. Your Rights

Under applicable data protection laws, you may have the following rights. Requests may be submitted to gdpr@sepolo.app.

• Access your personal data
• Correct inaccurate data
• Request deletion of personal data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent
• Lodge a complaint with a supervisory authority

10. Cookies

Sepolo uses cookies and similar technologies to maintain secure sessions, authenticate users, improve website functionality, analyze website usage and store user preferences.

For additional information, please see our Cookie Policy.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be published on our websites together with the updated revision date.

Introduction

By accessing or using Sepolo, you agree to these Terms.

Service Provider

The Sepolo platform is provided by SYNAP IoT s.r.o., V celnici 1031/4, 110 00 Prague, Czech Republic. VAT Number: CZ06024386.

Eligibility

You must be authorized to enter into binding agreements on behalf of your organization in order to use Sepolo.

Customer Accounts

• Maintaining account confidentiality
• Managing user access
• Ensuring authorized use
• Securing credentials
• Ensuring data entered into Sepolo complies with applicable laws

Subscription Services

Sepolo is provided as a subscription-based software service. Pricing and billing terms are provided separately.

• User-based licensing
• Asset-based licensing
• Add-on services
• Trial periods
• Enterprise plans

Acceptable Use

SYNAP IoT s.r.o. reserves the right to suspend accounts violating these Terms.

• Use Sepolo unlawfully
• Attempt unauthorized access
• Disrupt platform operations
• Upload malicious code
• Interfere with security features
• Use the platform for illegal activities

Intellectual Property

All rights, title and interest in the Sepolo platform, including software, branding, interfaces and documentation, remain the exclusive property of SYNAP IoT s.r.o.

Customers retain ownership of their own data.

Availability and Support

We aim to maintain high platform availability but do not guarantee uninterrupted operation.

Maintenance, updates and unforeseen technical events may occasionally affect availability.

Support is provided via support@sepolo.dk.

Limitation of Liability

To the maximum extent permitted by law, SYNAP IoT s.r.o. shall not be liable for indirect damages, loss of profits, loss of data, business interruption or consequential damages.

• Total liability shall not exceed the fees paid by the customer during the preceding 12 months.

Termination

Customers may terminate subscriptions according to agreed subscription terms.

• Fees remain unpaid
• These Terms are violated
• Continued service would create legal or security risks

Governing Law

These Terms shall be governed by the laws of the Czech Republic.

Roles of the Parties

The customer acts as the Data Controller. SYNAP IoT s.r.o. acts as the Data Processor.

Subject Matter and Duration

Processing activities relate to provision of the Sepolo platform and associated services.

Processing continues for the duration of the customer relationship unless otherwise required by law.

Categories of Personal Data

• Employee information
• Customer information
• Vendor information
• Uploaded files
• Service records
• Device telemetry
• Contact details
• Operational data

Processor Obligations

• Process data only on documented instructions
• Maintain confidentiality
• Implement appropriate security measures
• Assist with data subject rights requests where reasonably possible
• Notify customers of personal data breaches without undue delay
• Delete or return customer data upon termination where applicable

Subprocessors

The customer authorizes use of subprocessors necessary for provision of the Sepolo platform. Current subprocessors are listed in the Sepolo Subprocessor List.

International Transfers

Where transfers outside the EEA occur, SYNAP IoT s.r.o. shall ensure appropriate safeguards are implemented.

Security Measures

• Encrypted communications
• Secure Azure infrastructure
• Access controls
• Authentication controls
• Logging and monitoring
• Backup procedures
• Role-based access management

Audit Rights

Reasonable information regarding security measures may be provided upon written request, subject to confidentiality obligations.

Infrastructure and Cloud Hosting

Payment Processing

Security Overview

• Encrypted communications using HTTPS/TLS
• Secure Azure cloud infrastructure
• Role-based access control
• Authentication and identity protection
• Security logging and monitoring
• Backup and disaster recovery procedures
• Secure development practices
• Principle of least privilege
• Multi-factor authentication support

Data Protection

• Role-based permissions
• Audit logging
• Secure authentication
• Data access management
• Controlled data hosting within the European Union

IoT and Telemetry Security

Sepolo may process telemetry and operational data from IoT devices.

Telemetry data is transmitted and stored using secure Microsoft Azure infrastructure and protected through access controls and security monitoring.

Contact Information

Security and privacy inquiries may be directed to support@sepolo.dk or gdpr@sepolo.dk.