Privacy Policy

1. Introduction

• Our corporate website (synetrasystems.com)
• Enterprise IT hardware procurement and B2B sales operations
• iOS and Android mobile applications (including Medibite and future titles)
• SaaS and cloud-based enterprise platforms
• Shopify and custom e-commerce storefronts
• Internal enterprise tools developed for clients
• API and backend systems delivered as part of client engagements

2. Information We Collect

2.1 Website Visitors

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages viewed, time spent on pages, and referring URLs
• Information you voluntarily submit through our enquiry or contact forms (name, email, company, phone number, technical requirements)

2.2 Hardware Procurement Clients

• Company name, contact person name, job title
• Business email address and phone number
• Shipping and billing addresses
• Purchase order details, technical specifications, and configuration requirements
• Payment and invoicing information (processed through secure, PCI-compliant channels)

2.3 SaaS and Cloud-Based Software Users

• Account registration information (name, email, organization)
• Authentication credentials (passwords are hashed and never stored in plaintext)
• Usage telemetry and application performance metrics
• User-generated content stored within the platform as part of the service
• API access logs and integration metadata

2.4 Mobile Application Users (iOS & Android)

2.5 E-Commerce and Shopify Clients

• Storefront configuration, product catalog, and inventory data
• Customer transaction records as processed by payment providers (Stripe, Shopify Payments)
• Analytics and conversion data to optimize storefront performance
• Integration credentials for third-party services (shipping, email marketing, etc.)

3. Local-First Mobile Applications

• Data Storage: All data you enter — including clinical notes, schedules, calculator inputs, and personal preferences — is saved exclusively on your physical device using on-device storage. No data is transmitted to our servers or any third-party cloud service.
• No Cloud Sync: There is no cloud synchronization, backup, or data mirroring of any kind. If you delete the application, all locally stored data is permanently erased.
• No Analytics or Tracking: We do not embed analytics SDKs, crash reporters, or advertising trackers in our local-first applications. We have zero visibility into how you use the app.
• Subscriptions and Payments: In-app subscriptions are processed entirely by Apple's StoreKit (iOS) or Google Play Billing (Android). We do not collect, process, or have access to your credit card information, Apple ID, or Google account credentials.
• HIPAA Note: Because our local-first applications do not transmit data to external servers, any Protected Health Information (PHI) entered into the application remains strictly on your device. Users are solely responsible for securing their physical device in compliance with their institutional and regulatory requirements (e.g., HIPAA, GDPR, local data protection laws).

4. How We Use Your Information

• To fulfill hardware procurement orders and deliver configured equipment
• To provide, maintain, and improve our SaaS platforms and enterprise tools
• To respond to enquiries, provide quotes, and deliver technical consultation
• To process payments and maintain accurate billing and warranty records
• To monitor system performance, prevent fraud, and ensure platform security
• To communicate important updates about orders, services, or policy changes
• To comply with applicable legal obligations and regulatory requirements

5. Data Sharing and Third Parties

• Apple Inc. (StoreKit): Processes iOS in-app subscriptions and payments
• Google (Play Billing): Processes Android in-app subscriptions and payments
• Stripe: Processes e-commerce transactions for Shopify and custom storefronts
• AWS / Google Cloud Platform: Hosts our SaaS infrastructure and enterprise tools
• Shipping Carriers: Receive shipping addresses to deliver hardware orders

6. Data Security

• TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls and least-privilege principles for internal systems
• Regular security audits and vulnerability assessments
• PCI-compliant payment processing through certified third-party providers

7. Data Retention

• Hardware procurement records: Retained for 7 years for warranty and compliance purposes
• SaaS account data: Retained for the duration of your active subscription, plus 90 days after cancellation
• Website enquiry data: Retained for 24 months unless you request earlier deletion
• Mobile app data: Not applicable — all data resides on your device and is never transmitted to us

8. Your Rights

Under GDPR (European Economic Area)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time

Under CCPA (California, USA)

• Right to know what personal information is collected, used, and shared
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (note: we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights

9. Children's Privacy

10. Cookies and Tracking Technologies

• Maintain session state and authentication
• Remember user preferences and settings
• Analyze website traffic and usage patterns to improve our Services
• Prevent fraud and enhance security

11. Changes to This Policy

• Update the “Effective Date” at the top of this page
• Provide prominent notice on our website or within affected applications
• Where required by law, obtain your explicit consent before implementing changes that materially affect how your data is processed

12. Contact Us