Privacy Policy

This Privacy Policy explains how personal information is collected, used, disclosed and protected when you use SYNOP•SYS: the web console, the SYNOP•SYS mobile app and this website (together, the "Service"). It is written to meet Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Who we are

The Service is operated by SYNOP-SYS, based in Quebec ("we", "us"). We are responsible for the personal information under our control.

Person in charge of the protection of personal information

We have designated a person in charge of the protection of personal information: Frederick Marcoux, Founder. You can reach them at privacy@synopsysapp.com for any question about this policy or about how we handle your information.

Our role

For the information needed to run your account (who you are, how you sign in, how you pay), we decide how that information is used and are responsible for it.

Customers also put information into their workspace: the configuration of their 3CX phone systems, metrics and logs collected from them, backups, call recordings, and the names and contact details of their own users and end users. For that workspace content, we act on the customer's behalf, as their service provider, and process it only to provide the Service under the customer's instructions. The customer remains responsible for having a valid basis to collect that information and for answering requests from the people it concerns.

Information we collect

Account and contact information. Your name, email address, the name of your organization, and a phone number if you choose to receive sign-in codes by text message. We also keep records of your sign-ins and of the security methods you enable (passkeys, authenticator apps, backup codes), stored in protected form.

Access requests. When you use the request access form on this website, we collect your company name, your first and last name, your email address, your phone number if you give one, what you tell us about your company, the number of phone systems you expect to manage, the language of the page, and the fact that you consented. We use this information only to answer your request and, if you go ahead, to create your workspace and your account.

Workspace content. Information your organization adds to or collects through the Service: PBX configuration, performance metrics, event and audit logs, backups, and call recordings stored on your organization's phone systems that you choose to browse or download.

Billing information. Subscriptions are billed through Stripe. Stripe collects and holds your payment card details; we never see or store full card numbers. We keep the billing records needed for accounting and tax purposes.

Technical information. IP address, browser and device type, and security and audit logs that record significant actions taken in the Service. We use this information to keep the Service secure and to investigate problems.

The mobile app. The SYNOP•SYS mobile app uses your email address, name and user identifier to sign you in, and a push notification token and Live Activity tokens so that alerts and job progress can be delivered to your device. The app contains no analytics or advertising software and does not track you across other apps or websites.

How we use information

We use personal information to provide the Service and keep it secure, to authenticate users, to deliver the notifications your organization configures, to bill for the Service, to answer support requests, to improve the Service, and to comply with our legal obligations.

We do not sell personal information, and we do not use it to build advertising profiles.

Consent

We collect your consent when you create an account and when you turn on optional features, such as text-message sign-in codes or mobile push notifications. You may withdraw your consent at any time by changing those settings or by writing to privacy@synopsysapp.com, subject to legal and contractual restrictions. Withdrawing consent may mean that part of the Service can no longer be provided to you.

Where your information is stored

Information is stored in Canada, in Amazon Web Services data centres in the ca-central-1 region (Montréal). In production, databases are also replicated to the ca-west-1 region (Calgary) for disaster recovery.

Service providers

We use the following service providers to operate the Service. Each receives only the information it needs and is bound by confidentiality and security obligations.

Provider	Purpose
Amazon Web Services	Hosting, databases, file storage and backups
Stripe	Subscription billing and payment processing
Cloudflare	Domain name service, TLS termination and proxying of traffic to this website, and protection of the signup and request access forms against automated abuse (Cloudflare Turnstile)
Google Fonts	Delivery of the web console's typeface: your browser requests the font files, and so your IP address, from Google
SMTP2GO	Delivery of transactional email (invitations, sign-in codes, alerts)
Apple Push Notification service	Delivery of mobile notifications and Live Activity updates

Some of these providers may process information outside Quebec. Before communicating personal information outside Quebec, we assess whether it will receive adequate protection, as Law 25 requires.

Integrations you enable

Your organization may connect the Service to other products, such as Twilio or Telnyx for text messages, Microsoft Entra ID and Microsoft Graph, PagerDuty, Slack, Microsoft Teams, ConnectWise, Autotask, HaloPSA, or its own webhooks. These integrations are configured by your organization, with its own accounts. Information sent to them is governed by your organization's agreements with those providers.

Retention

We keep account information for as long as the account is active. We keep an access request for up to 12 months after our last exchange about it, or until you ask us to delete it; when we create a workspace from it, its details become your account information. Metrics are kept for the retention period of your plan. Backups and call recordings stored in your workspace are kept until your organization deletes them or closes the workspace. When a workspace is closed, we delete its content within a reasonable period, except for information we must keep longer to meet legal, tax or accounting obligations.

Security

We protect personal information with measures suited to its sensitivity, including encryption in transit and at rest, a separate database and separate storage for each workspace, least-privilege access for our staff and systems, multi-factor authentication, and audit logging.

Your rights

You have the right to access the personal information we hold about you, to have it corrected, to have it deleted, to receive it in a structured, commonly used technological format, to withdraw your consent, and, where applicable, to ask that information about you stop being disseminated. You can download your own personal data and erase your data from a workspace yourself, from within the Service; workspace administrators can also export a member's data.

To exercise these rights, write to privacy@synopsysapp.com. We respond within 30 days. If you are a user of a customer's workspace, contact that organization first: it controls the workspace content, and we will assist it in answering your request.

This website

This website uses no cookies, no analytics and no third-party trackers. It stores a single setting in your browser to remember whether you prefer the light or dark theme; that setting never leaves your device. When you start filling in the request access form, your browser loads a Cloudflare Turnstile check that confirms a person is submitting it; Cloudflare receives your IP address and technical information about your browser for that purpose only.

Confidentiality incidents

If a confidentiality incident involving personal information occurs, we assess the risk of serious injury and, where required, notify the Commission d'accès à l'information and the people concerned, and keep a register of incidents, as the law requires.

Complaints

If you are not satisfied with how we handled your information or your request, please contact us first at privacy@synopsysapp.com. You may also file a complaint with the Commission d'accès à l'information du Québec or with the Office of the Privacy Commissioner of Canada.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or in the Service before they take effect. The date at the top of this page shows when it was last updated.

Contact

SYNOP-SYS Frederick Marcoux, Founder, person in charge of the protection of personal information privacy@synopsysapp.com