Privacy Policy

Synoro AI, Inc. (“Synoro,” “we,” “us,” or “our”) provides software and AI tools that help accounting firms manage clients, workflows, documents, communications, and accounting work.

This Privacy Policy explains how we collect, use, disclose, and protect personal information through our website, platform, applications, integrations, and related services (collectively, the “Services”).

Privacy contact: privacy@synoro.com

For website visitors, account registration, billing, and our own business communications, Synoro determines how personal information is used.

When an accounting firm uses Synoro to manage client information, we generally process that information on the firm's behalf and according to its instructions. The firm remains responsible for its relationship with its clients, its privacy notices, and its authority to provide information to Synoro.

If your accounting firm invited you to Synoro, contact that firm first about requests concerning the records it manages. We will assist where appropriate.

Depending on how you use the Services, we may collect:

• Account information: Your name, email address, telephone number, organization, professional role, and account preferences.
• Client and company information: Business names, contact details, company records, and information your firm provides about its clients.
• Accounting information: Transactions, account balances, invoices, bills, vendors, financial reports, and other records uploaded or made available through an authorized integration.
• Documents and communications: Files, messages, comments, client questions, answers, and support requests.
• Workflow and AI information: Instructions, prompts, outputs, suggestions, approvals, corrections, and activity records associated with work performed through Synoro.
• Integration information: Connection details, permissions, and information received from services you authorize.
• Billing information: Billing contact details, selected services, and payment records where applicable.
• Technical information: IP addresses, browser and device information, access times, usage events, and diagnostic logs.

Please provide only information you are authorized to share and that is reasonably necessary for your use of the Services.

We use information to:

• Create and manage accounts and workspaces.
• Provide client portals, workflows, reports, document management, and other platform features.
• Process authorized accounting and operational tasks.
• Generate AI responses, suggestions, and work products.
• Apply saved instructions, approved rules, and relevant previous decisions within the appropriate workspace.
• Operate integrations and authorized assistant connections.
• Provide customer support and service communications.
• Maintain security, investigate misuse, and troubleshoot problems.
• Understand service performance and improve functionality.
• Administer billing where applicable.
• Meet legal obligations and protect legal rights.

Using previous decisions to support work within a firm's workspace is different from training a general-purpose AI model.

Synoro's AI features may process relevant instructions, accounting records, documents, messages, and other workspace information to complete a requested task.

Where an external AI provider supports a feature, information needed for that feature may be transmitted to that provider. The applicable processing arrangements depend on the provider and service configuration.

AI outputs can contain errors. Users should review outputs before relying on them or approving changes.

Synoro may use a firm's saved instructions, approvals, and corrections to support later work in that firm's workspace. We do not use customer content to train a general-purpose AI model.

We may disclose information to:

• Authorized workspace users: Firm administrators, team members, clients, and others according to their access permissions.
• Service providers: Companies supporting hosting, storage, AI processing, communications, analytics, payments, and customer support.
• Connected services: Third-party platforms you or an authorized administrator choose to connect.
• Legal and regulatory recipients: Where required by law or reasonably necessary to protect rights, investigate fraud, or respond to a valid legal request.
• Business transaction participants: In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
• Other recipients you authorize: Where you direct or consent to the disclosure.

Service providers processing information on our behalf are subject to applicable contractual restrictions.

We do not sell personal information, and we do not share it for cross-context behavioral or targeted advertising.

Connecting an accounting platform or another service allows Synoro to access information covered by the authorization you provide.

If you connect an external AI assistant, that assistant may receive information returned through the connection and perform the actions its permissions allow. Synoro's access controls and applicable approval requirements continue to apply.

You should review the third party's terms, privacy policy, and permissions before connecting it.

Disconnecting a service or revoking access stops future access through that connection. It does not automatically delete information already imported into Synoro or previously received by the third party.

We use cookies and similar technologies for account sessions, preferences, security, and usage measurement. We do not use them for third-party advertising.

You can manage cookies through your browser. Disabling certain cookies may affect sign-in or other features.

We maintain technical and organizational safeguards designed to protect information against unauthorized access, loss, alteration, and disclosure.

Access to workspace information is governed by account permissions and other applicable controls. Users are responsible for protecting their credentials and managing access appropriately.

No system or method of transmission is completely secure.

We retain information for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Policy.

Retention may also be necessary for legal obligations, security investigations, dispute resolution, and accounting or audit history.

Disconnecting an integration, removing a user, or closing an account does not necessarily erase all related records immediately. Some information may remain in backups or records subject to applicable retention requirements.

Contact us to request deletion or information about retention. We will explain any applicable limitations.

Depending on your location and applicable law, you may have rights to request access, correction, deletion, or a copy of your personal information, or to object to or restrict certain processing.

You may also:

• Update available account settings.
• Manage integration and assistant permissions.
• Unsubscribe from promotional emails.
• Adjust browser cookie settings.

We may need to verify your identity and authority before completing a request. Requests involving a firm's client records may need to be handled through that firm.

Service, security, and account notices may continue even if you unsubscribe from marketing.

Information may be processed in the United States and other countries where Synoro or its service providers operate.

Where applicable law requires safeguards for international transfers, we will use the appropriate arrangements.

The Services are intended for business use by adults and are not directed to children under 18.

If you believe a child has provided personal information directly to Synoro without appropriate authorization, please contact us.

We may update this Privacy Policy as the Services or our practices change.

We will publish the updated version with a revised effective date and provide additional notice where required by law.

For privacy questions or requests, contact:

Synoro AI, Inc.
Email: privacy@synoro.com
1655 S Blue Island Ave #559, Chicago, IL 60608, USA