This Privacy Policy explains how personal information is collected, used, disclosed and protected when you use SYNOP•SYS: the web console, the SYNOP•SYS mobile app and this website (together, the "Service"). It is written to meet Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Who we are
The Service is operated by SYNOP-SYS, based in Quebec ("we", "us"). We are responsible for the personal information under our control.
Person in charge of the protection of personal information
We have designated a person in charge of the protection of personal information: Frederick Marcoux, Founder. You can reach them at privacy@synopsysapp.com for any question about this policy or about how we handle your information.
Our role
For the information needed to run your account (who you are, how you sign in, how you pay), we decide how that information is used and are responsible for it.
Customers also put information into their workspace: the configuration of their 3CX phone systems, metrics and logs collected from them, backups, call recordings, and the names and contact details of their own users and end users. For that workspace content, we act on the customer's behalf, as their service provider, and process it only to provide the Service under the customer's instructions. The customer remains responsible for having a valid basis to collect that information and for answering requests from the people it concerns.
Information we collect
Account and contact information. Your name, email address, the name of your organization, and a phone number if you choose to receive sign-in codes by text message. We also keep records of your sign-ins and of the security methods you enable (passkeys, authenticator apps, backup codes), stored in protected form.
Access requests. When you use the request access form on this website, we collect your company name, your first and last name, your email address, your phone number if you give one, what you tell us about your company, the number of phone systems you expect to manage, the language of the page, and the fact that you consented. We use this information only to answer your request and, if you go ahead, to create your workspace and your account.
Workspace content. Information your organization adds to or collects through the Service: PBX configuration, performance metrics, event and audit logs, backups, and call recordings stored on your organization's phone systems that you choose to browse or download.
Billing information. Subscriptions are billed through Stripe. Stripe collects and holds your payment card details; we never see or store full card numbers. We keep the billing records needed for accounting and tax purposes.
Technical information. IP address, browser and device type, and security and audit logs that record significant actions taken in the Service. We use this information to keep the Service secure and to investigate problems.
The mobile app. The SYNOP•SYS mobile app uses your email address, name and user identifier to sign you in, and a push notification token and Live Activity tokens so that alerts and job progress can be delivered to your device. The app contains no analytics or advertising software and does not track you across other apps or websites.
How we use information
We use personal information to provide the Service and keep it secure, to authenticate users, to deliver the notifications your organization configures, to bill for the Service, to answer support requests, to improve the Service, and to comply with our legal obligations.
We do not sell personal information, and we do not use it to build advertising profiles.
Consent
We collect your consent when you sign up, by asking you to accept the Terms and Conditions and this Privacy Policy, and when you turn on optional features, such as text-message sign-in codes or mobile push notifications. You may withdraw your consent at any time by changing those settings or by writing to privacy@synopsysapp.com, subject to legal and contractual restrictions. Withdrawing consent may mean that part of the Service can no longer be provided to you.
Where your information is stored
Information is stored in Canada, in Amazon Web Services data centres in the ca-central-1 region (Montréal). In production, databases are also replicated to the ca-west-1 region (Calgary) for disaster recovery.
Service providers
We use the following service providers to operate the Service. Each receives only the information it needs and is bound by confidentiality and security obligations.
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting, databases, file storage and backups |
| Stripe | Subscription billing and payment processing |
| Cloudflare | Domain name service, and TLS termination and proxying of all traffic to the Service (this website, the web console and every workspace), so Cloudflare handles the content of that traffic in transit; also protection of the signup and request access forms against automated abuse (Cloudflare Turnstile) |
| SMTP2GO | Delivery of transactional email (invitations, sign-in codes, alerts) |
| Apple Push Notification service | Delivery of mobile notifications and Live Activity updates |
| Your browser's push service (for example Google, Mozilla, Microsoft or Apple, depending on the browser) | Delivery of browser notifications you turn on |
Some of these providers may process information outside Quebec. Before communicating personal information outside Quebec, we assess whether it will receive adequate protection, as Law 25 requires.
Integrations you enable
Your organization may connect the Service to other products, such as Twilio or Telnyx for text messages, Microsoft Entra ID and Microsoft Graph, PagerDuty, Slack, Microsoft Teams, ConnectWise, Autotask, HaloPSA, or its own webhooks. These integrations are configured by your organization, with its own accounts. Information sent to them is governed by your organization's agreements with those providers.
Retention
We keep account information for as long as the account is active. An account that has belonged to no workspace for more than 30 days is closed, and then handled as a deleted account. When an account is deleted, we erase its personal information within 30 days; records that must remain coherent, such as the activity log, keep the event without your name or email address. Feedback you submit is deleted, with any screenshot, within 30 days of its removal. We keep an access request for up to 12 months after our last exchange about it, or until you ask us to delete it; when we create a workspace from it, its details become your account information. Metrics are kept for the retention period of your plan. Backups and call recordings stored in your workspace are kept until your organization deletes them or closes the workspace. A workspace whose subscription ends is suspended and, if the subscription is not renewed within 30 days, closed. When a workspace is closed, we delete its content 30 days later, except for information we must keep longer to meet legal, tax or accounting obligations.
Security
We protect personal information with measures suited to its sensitivity, including encryption in transit and at rest, a separate database and separate storage for each workspace, least-privilege access for our staff and systems, multi-factor authentication, and audit logging.
Your rights
You have the right to access the personal information we hold about you, to have it corrected, to have it deleted, to receive it in a structured, commonly used technological format, to withdraw your consent, and, where applicable, to ask that information about you stop being disseminated. You can download your own personal data and erase your data from a workspace yourself, from within the Service; workspace administrators can also export a member's data.
To exercise these rights, write to privacy@synopsysapp.com. We respond within 30 days. If you are a user of a customer's workspace, contact that organization first: it controls the workspace content, and we will assist it in answering your request.
This website
This website uses no cookies, no analytics and no third-party trackers. It stores two settings in your browser to remember whether you prefer the light or dark theme and whether plans are published, so that each page opens with the right links; neither setting ever leaves your device. When you start filling in the request access form, your browser loads a Cloudflare Turnstile check that confirms a person is submitting it; Cloudflare receives your IP address and technical information about your browser for that purpose only.
Confidentiality incidents
If a confidentiality incident involving personal information occurs, we assess the risk of serious injury and, where required, notify the Commission d'accès à l'information and the people concerned, and keep a register of incidents, as the law requires.
Complaints
If you are not satisfied with how we handled your information or your request, please contact us first at privacy@synopsysapp.com. You may also file a complaint with the Commission d'accès à l'information du Québec or with the Office of the Privacy Commissioner of Canada.
Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or in the Service before they take effect. The date at the top of this page shows when it was last updated.
Contact
SYNOP-SYS Frederick Marcoux, Founder, person in charge of the protection of personal information privacy@synopsysapp.com