Privacy Policy

Introduction

Syncfusion, Inc. and all subsidiaries and affiliates of Syncfusion, Inc. (hereafter “us”, “we”, “our”, “the Company” or “Syncfusion”), with its main offices located at 2501 Aerial Center Pkwy #111, Morrisville, NC 27560, is committed to protecting and respecting your privacy. This privacy policy (“Policy”) will detail what information we collect and what we use it for. In this Policy, personal data (“Personal Data”) refers to any information that on its own, or incombination with other available information, can identity an individual.

At Syncfusion, we take your privacy seriously and will only use your personal information to administer your account, provide legitimate interests, and provide the products and services you have requested from us. Syncfusion targets compliance with all applicable laws and regulations. If you have any questions, please feel free to reach out to privacy@syncfusion.com. We encourage you to periodically review this statement as it may change at any time at our sole discretion.

Scope

This Policy applies to Syncfusion, Inc. websites, domains, applications, services, and products. This includes, but is not limited to, BoldSign, BoldDesk, Bold BI, and Bold Reports.

This policy does not apply to third-party applications, websites, products, services or platforms that may be accessed through links we may provide to you. Those sites are owned and operated independently from Syncfusion and have their own separate privacy policy and data collection practices. Any Personal Data you provide to third-parties will be governed by their own privacy policy. We cannot accept liability for the actions or policies of these idependent sites, and we are not responsible for the content or pirvacy practices of such third-party sites.

Your Personal Data Rights and Controls

Depending on your geographical location and citizenship, your rights are subject to local data privacy regulations. Privacy laws, including the General Data Protection Regulation (“GDPR”), California Consumer Privacy Act (“CCPA”), and other privacy laws give rights to individuals over their personal data. Please note, the rights provided to you may vary.

The table below outlines rights and their descriptions:

	It’s your right to…
Access	Be informed of the personal data we process about you and request access to it
Rectification	Request that we amend or update your personal data where it’s inaccurate or incomplete
Erasure	Request that we delete certain of your personal data
Restriction	Request that we temporarily or permanently stop processing all or some of your personal data
Object	Object to us processing your personal data at any time, on grounds relating to your particular situation Object to your personal data being processed for direct marketing purposes
Data portability	Request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party’s service

How to Exercise Your Rights

You can make a request to exercise any of these rights in relation to your Personal Data through the Company’s contacts outlined below or directly to your applicable supervisory authority. Please note that certain requests may be limited in their scope as we may need to retain certain types of data in order to comply with legal obligations or to establish, exercise or defend legal claims. To ensure your privacy and the security of these requests we may, at our discretion, require you to prove your identity before completing the request.

For EEA and UK customers, please direct your comments and questions to the following addresses:

Bird & Bird GDPR Representative Services SRL, Avenue Louise 235, 1050 Bruxelles, Belgium, EUrepresentative.syncfusion@twobirds.com

AND

Bird & Bird GDPR Representative Services UK, 12 New Fetter Lane, London, EC4A 1JP, United Kingdom, UKrepresentative.syncfusion@twobirds.com

For all other customers, please direct your questions or comments about this policy to the following addresses:

By Mail:

• Syncfusion
• 2501 Aerial Center Parkway Suite 111 Morrisville, North Carolina 27560
• ATTN: Legal Affairs

By Email:

• privacy@syncfusion.com

Personal Data We Collect

The Personal Data We Collect

When you create an account, make a purchase, or attempt to make a purchase we collect the following types of personal data. The exact data collected depends on the type of Service Option you have, how you create your account, the country you are in, and if you are using a third-party service to sign in.

The Data Includes:

• Account Information including name, date of birth, login credentials, or profile name.
• Contact Information including email address, phone number.
• Payment Information including billing address, credit card, debit card, or other payment methods.
• Online Identifiers such as IP address, device information.
• Location Data such as country or when applicable street address data to verify eligibility for specific Service Options for tax purposes.
• Usage Data relating to products and services.
• User Preferences.
• Company Affiliation or Business Information including company name.
• Social Media Information that is published by and or about you on social media profiles such as LinkedIn, Facebook, Twitter etc.
• Feedback, such as customer support or product reviews.

Sensitive Data

As a Controller, it is our policy not to request any information that, pursuant to law, falls within the definition of sensitive information, including, but not limited to, the following: religion, sexual orientation, and political persuasion, among other types of sensitive information. The Company forbids any discrimination or the request of any data that may imply discrimination.

If we are required to process sensitive personal information about you, we will ensure that a lawful basis applies and that one or more of the purposes for processing information applies, as noted in the Section below titled “Purposes and Use of Personal Information”.

In situations where Syncfusion acts as a Processor, through your use of our Licensed Product(s), it is our customer who determines the appropriate legal basis associated with processing activities, and any questions about the applicable lawful basis and/or purposes of processing should be directed to them.

How We Collect Your Personal Data

We collect Personal Data from the following sources:

From You

You may choose to give us your information that includes:

• Account Information including name, login credentials, or profile name.
• Contact Information including email address, phone number.
• Payment Information including billing address, shipping address, last four of credit card or debit card number, expiry date. Note that the exact payment information we receive will depend on the payment processor you select.
• Online Identifiers such as IP address, device information.
• Location Data such as country or state to verify eligibility for specific Service Options and for tax purposes, security requirements, or legal compliance. We do not collect precise location data such as GPS coordinates or personal street address unless provided by you.
• Usage Data relating to products and services
• User Preferences
• Company Affiliation or Business Information including company name
• Social Media Information that is published by and or about you on social media profiles such as LinkedIn, Facebook, Twitter etc.
• Feedback, such as customer support or product reviews
• Job Application details including resume, cover letter, or other details requested if applying for employment at Syncfusion

If you choose to provide us with a third-party’s personal information (such as the person’s name, email and company), you represent that you have the third-party’s permission to do so. In addition, we may collect data uploaded by you, your employer or other users of the application that may be required to use Syncfusion services. We expect all users to follow their organization’s privacy policy and any applicable regulatory requirements when uploading, accessing and using personal information into our application. The data uploaded may include personal information like:

• Employee names, email addresses and contractual agreements
• Vendor names, email addresses, contractual agreements or other personal data necessary for Syncfusion services
• Customer names and email addresses used to provide services within Syncfusion’s platform

We may ask you to give us your information when:

• You use the website to download articles, data sheets or eBooks.
• You request a free trial or demo.
• You refer a friend to us.
• You connect with us directly via phone calls or video conferencing platforms.
• We or Client Account Administrators grant you access to the application.
• You or Client Account Administrators upload or enter personal information into the application.
• You participate in a marketing/sales promotion.
• You attend trade events and other industry networking events.
• You register or attend a webinar or other event.
• You participate in programs we may offer from time to time.
• You participate in chats.
• You pay for our services.

From Automatic Technologies or Interactions

As you interact with our websites, domains, applications, services, and/or products we may automatically collect the following types of data:

• Account Information including name, username, or profile name.
• Contact Information including email address, phone number.
• Payment Information including billing address, shipping address, last four of credit card or debit card number, expiry date. Note that the exact payment information we receive will depend on the payment processor you select.
• Online Identifiers such as IP address, device information.
• Location Data such as country or state to verify eligibility for specific Service Options and for tax purposes, security requirements, or legal compliance. We do not collect precise location data such as GPS coordinates or personal street address unless provided by you.
• Usage Data relating to products and services.
• User Preferences.
• Company Affiliation or Business Information including company name
• Social Media Information that is published by and or about you on social media profiles such as LinkedIn, Facebook, Twitter etc.

We collect this data from using cookies, server logs and other similar technologies. Please see the Cookies and Fraud Detection sections below for more details.

Cookies

We collect information about your visits to the website and the application when you land on any of our web pages through cookies and similar tracking technology. Please refer to our Cookie Policy for more details: Read More.

Fraud Detection

We use Fingerprint Identification, a device identification and fraud‑prevention service operated by FingerprintJS, Inc., to help us maintain the security and integrity of our services.

When you access our services, Fingerprint Identification processes certain technical information about your device or browser, such as device identifiers, browser characteristics, IP address, time zone, operating system details, and interaction patterns, strictly on our behalf and under our instructions. We use this information to detect, prevent, and investigate fraudulent activity, protect our systems, and ensure secure access to our products and services.

As the data controller, we determine the purposes and means of this processing. Fingerprint Identification acts solely as our data processor and does not use the information for its own purposes. Processing is carried out based on our legitimate interest in securing our platform and preventing fraud.

For more information about Fingerprint Identification’s data‑processing practices, please review its Privacy Policy: https://docs.fingerprint.com/docs/privacy-policy

Usage Data

When you visit one of Syncfusion Inc.’s websites, domains, applications, services, and/or products we may collect and store information relating to your usage.

When Using A Product or Website:

Syncfusion may collect information from visitors to our website in order to help us understand website usage patterns, provide a better product, comply with legal obligations, prevent fraud, better communicate with you, provide essential services with the product, and provide better customer service. Information collected in this manner is provided automatically by your system and the systems that you use to connect to our website. For example, we may keep track of what time people visit our website, how long they stay on the website, and what sections they visit.

When Downloading Products:

If you decide to purchase or download any of our products, we may collect information from you. Syncfusion collects information on users who download our product or create cloud accounts for the purposes of tracking subscription terms and providing support and updated product lines.

Cloud Products

When using one of Syncfusion Inc.’s Cloud Products we may collect and store information for market research purposes.

When Using a Cloud Product:

We may collect data such as your full name, phone number, email address, IP address, company name, location, support tickets, registered users, and billing and shipping address; we may also collect market research data such as usage patterns and where you register your account.

From Third-Parties

We may receive Personal Data about you from various third-parties, including:

• Account Information including name, username, or email.
• Contact Information including email address, phone number.
• Payment Information including billing address, shipping address, last four of credit card or debit card number, expiry date. Note that the exact payment information we receive will depend on the payment processor you select.
• Online Identifiers such as IP address, device information.
• Location Data such as country or state to verify eligibility for specific Service Options and for tax purposes, security requirements, or legal compliance. We do not collect precise location data such as GPS coordinates or personal street address unless provided by you.
• Usage Data relating to products and services.
• User Preferences.
• Company Affiliation or Business Information including company name from publicly available sources such as Dun and Bradstreet, government business registries, or similar websites.
• Social Media Information that is published by and or about you on social media profiles such as LinkedIn, Facebook, Twitter etc.

Information from third-parties is either received from a sub-processer in order to provide our services or is collected from publicly available sources. We may combine this information with personal data provided by you. This helps us update, expand, and ensure the accuracy of our records. This information may be used to maintain legal compliance, including for tax purposes, to identify new customers, verify identity, and create more tailored marketing or sales services. A complete list of our sub-processors can be found here. All information from third parties is used in line with our Privacy Policy.

Google API User Data Policy

Our use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Youtube API Data Policy

If you enable Youtube API you must configure your settings, this is outside of Syncfusion’s control but could share. Our application integrates with YouTube API Services to enhance your user experience. By utilizing our services, you consent to our access and use of your data in accordance with YouTube’s Terms of Service and If you purchase a product or service at. We collect various data through the YouTube API, including your profile information (such as name, email, and profile picture), video and playlist details, and your interaction history. This information helps us to deliver tailored content, improve our offerings, and analyze user engagement. We are committed to safeguarding your data and implement industry-standard security measures to protect it from unauthorized access and misuse. You have the right to access, update, and delete your data, and you can manage these settings via your Google account or by reaching out to us directly. We retain your data only as long as necessary to provide our services or as required by law. For more details, please refer to YouTube’s Terms of Service and Google’s Privacy Policy.

Xero API User Data Policy

Our use and transfer of information received from Xero APIs will adhere to Xero Privacy Notice, Xero Developer Platform Terms, and Xero’s Security Requirements for Developer Partners. We only use Xero‑sourced data for the purposes authorized by the user and required to provide our service.

Data Sharing and Disclosure

We use third-party service providers to assist in providing our services. We will share your Personal Data with third partes only in the ways set out in this Policy or as noted at the time when Personal Data is collected and provided by you.

To see the complete list of our service providers that data may be shared with please click: Read More.

Data Type	Internal Recipients	External Recipients
Account Information	If you choose to create an account, utilize our product(s), submit a support ticket, or contact us through other publicly available channels certain Account Information, may be disclosed to internal teams including, but not limited to, Accounting, Sales, Support, Legal, Network, and/or Marketing.	If you choose to create an account, utilize our product(s), submit a support ticket, or contact us through other publicly available channels certain Account Information, may be stored through our sub-processors including cloud computing service providers.
Contact Information	If you choose to create an account, utilize our product(s), submit a support ticket, or contact us through other publicly available channels certain Contact Information, may be disclosed to internal teams including, but not limited to, Accounting, Sales, Support, Legal, Network, and/or Marketing.	If you choose to create an account, utilize our product(s), submit a support ticket, or contact us through other publicly available channels certain Account Information, may be stored through our sub-processors including cloud computing service providers and email service providers.
Payment Information	If you choose to purchase a product from us we may disclose limited payment information to internal teams including, but not limited to, Accounting, Sales, Support, and Legal.	If you choose to purchase a product from us, our third-party payment processor will collect your payment information. We may also utilize tax compliance service to process or store limited payment information and email service providers to process transactional related emails.
Online ID	If you choose to visit our website or utilize our product(s), certain Online Identifiers, such as IP Address, may be disclosed to internal teams including, but not limited to Sales, Support, Legal, Marketing, and Network.	If you choose to visit our website or utilize our product(s), certain Online Identifiers, such as IP Address, may be collected or stored through our sub-processors including cloud computing service providers, and/or traffic management & network security providers.
Location Data	If you choose to visit our website or utilize our product(s), we may disclose Location Data to internal teams including, but not limited to, Sales, Support, Legal, Marketing, and Network.	If you choose to visit our website or utilize our product(s), Location Data may be collected and/or stored through our sub-processors including cloud computing service providers, accounting and/or tax software providers.
Usage Data	If you choose to visit our website, create an account, utilize our product(s), or purchase a product from us, we may disclose certain Usage Data to internal teams including, but not limited to, Network, Development, and/or Support.	If you choose to visit our website, create an account, utilize our product(s), or purchase a product from us, Usage Data may be collected and/or stored through our sub-processors including cloud computing service providers.
Usage Data (Webinars)	If you choose to participate in a Webinar, Usage Data we may disclose this Usage Data to internal teams including, but not limited to, Sales, Marketing, and/or Support.	If you choose to participate in a Webinar, Usage Data may be collected and/or stored through our sub-processors including our webinar hosting platform provider. Our third-party webinar hosting service may collect some information related to (i) information you submit to the third-party in order to register and/or (ii) that the third-party service collects when you are accessing the webinar’s platform or attending an event, this may be retained and stored by the third-party and may be transmitted to us.
Usage Data (API, Advertising, and Analytics)	If you choose to utilize available APIs, Opt-In to Advertising and/or Analytic services we may disclose Usage Data to internal teams including, but not limited to, Sales, Marketing, Product, Support, Legal, and/or Network.	We use third-party advertising and analytics tools, including Meta’s Conversions API, to measure the effectiveness of our advertising and understand how users interact with our services. We may share limited information with Meta, such as events related to your interactions with our website or app. Certain identifiers (for example, email address or phone number) are converted into a hashed value using a one-way cryptographic hash function (SHA-256) before being shared. Hashing is a security measure that helps protect your information, but these hashed identifiers may still be used by Meta to match you with their existing users. The information shared may also include technical data such as IP address, browser type, and device information. Meta processes this data in accordance with its Business Tools Terms and Data Processing Terms. We do not receive personally identifiable information about you from Meta as part of this process. You can learn more about how Meta uses data for advertising purposes in Meta’s privacy documentation, and you may manage your advertising preferences through your Meta account or applicable consent controls on our site. In addition to the above, we may share limited information with Google Ads to perform ad measurement services on your behalf and we obtain consent for such sharing and use where legally required. The information shared may include paid customers’ hashed email addresses, phone number, first name, last name, and IP address with Google Ads.
User Preferences	If you choose to visit our website or utilize our product(s), certain User Preferences may be disclosed to internal teams including, but not limited to Sales, Support, Legal, Marketing, and Network.	If you choose to visit our website or utilize our product(s), certain User Preferences may be collected or stored through our sub-processors including cloud computing service providers, and/or traffic management & network security providers.
Company Affiliation	If you choose to utilize our product(s) and/or purchase a product from us we may disclose Company Affiliation to internal teams including, but not limited to, Accounting, Sales, Marketing Support, and Legal.	If you choose to utilize our product(s) and/or purchase a product from us, Company Affiliation may be collected and/or stored through our sub-processors including cloud computing service providers.
Social Media Information	If you choose to utilize our product(s) and/or purchase a product from us we may disclose Social Media Information to internal teams including, but not limited to, Accounting, Sales, Support, and Legal.	If you choose to utilize our product(s) and/or purchase a product from us, Social Media Information may be collected and/or stored through our sub-processors including cloud computing service providers.
Feedback	When you complete any forms, respond to a survey or questionnaire, or take part in a contest or sweepstake, we collect the personal data you provide and we may disclose this Feedback data internally to teams including, but not limited to Sales, Marketing, Legal, and/or Support.	When you complete any forms, respond to a survey or questionnaire, or take part in a contest or sweepstake, we collect the personal data you provide, this Feedback data may be collected and/or stored through our sub-processors including cloud computing service providers.

Purposes and Legal Basis for the Processing of Personal Data

Your personal information will be used specifically to facilitate communication, provide maintenance and support services, process orders, process registrations or inquiries, make improvements to our product, resolve disputes, collect fees, troubleshoot problems, carry out any activity relating to the use or support of the product, comply with legal obligations, prevent fraud, or submit notices. Further, if you are providing any data that you do not own, you hereby state and confirm that you have the express written consent of the persons whose personal information you will provide.

We may use this information to respond to an email or other inquiry or request, help improve our website and our services, customize your experience at our website, or send updates or notices about our organization and the products we offer that we think may be of interest to you. We may also combine this information with other generally or publicly available information to help us identify visitors’ preferences or interests.

We collect your email address if you communicate with us by email, as well as other information that you might supply voluntarily, such as survey information.

If you purchase a product or service at our site, we will also ask for your credit card number or other account number that you wish to be charged. We do not give out your credit card or other account information to third parties unless you authorize us to do so or if it is necessary to fulfill our responsibilities, including, but not limited to, delivering a product or service you order.

The table below sets out:

• our purpose for processing your personal data
• our legal justifications (each called a “legal basis”) under data protection law, for each purpose
• categories of personal data which we use for each purpose (see more about these categories in Sections above titled “Personal Data We Collect” and “How We Collect Your Personal Data”)

Here is a general explanation of each “legal basis” to help you understand the table:

• Performance of a Contract: When it’s necessary for Syncfusion (or a third party) to process your personal data to:
  • comply with obligations under a contract with you, e.g. Syncfusion’s obligations under the Terms of Use to provide the Syncfusion Service to you
  • or verify information before a new contract with you begins.
• Legitimate Interest: When Syncfusion (or a third party) has an interest in using your personal data in a certain way, which is necessary and justified considering any possible risks to you and other Syncfusion users. For example, using your Usage Data to improve the Syncfusion Service for all users. Contact us if you want to understand a specific justification.
• Consent: When Syncfusion asks you to actively indicate your agreement to Syncfusion’s use of your personal data for a certain purpose(s).
• Compliance with Legal Obligations: When Syncfusion must process your personal data to comply with a law.

Purpose for processing your data	Legal basis that permits the purpose	Categories of personal data used for the purpose
Provide the Licensed Product SaaS for customer use.	Performance of a Contract	Exact categories are determined by Customer (Controller) in this scenario.
Providing support and account maintenance to users of the Licensed Product through diagnostic, troubleshooting, providing fixes, or other support services.	Performance of a Contract	Account Information, Contact Information, Online ID, Location Data, and/or Company Affiliation.
User Authentication and Personalization	Legitimate Interest	Account Information, Contact Information, Online ID, Location Data, User Data, Usage Data, Social Media Information, and/or Company Affiliation.
Provide updates regarding product release documentation and downtime notifications.	Performance of a Contract	Account Information and/or Contact Information.
Provide updates regarding webinars an individual has registered for.	Consent	Account Information and/or Contact Information.
Provide marketing and ad leads analytics to internal teams.	Consent	Account Information, Contact Information and/or Online ID.
To detect and prevent fraud, including fraudulent payments and fraudulent use of Syncfusion Licensed Products through carrying out required checks on customers and suppliers to verify all business relationships are in alignment with our ethical and legal requirements.	Legal Obligation	Account Information, Contact Information, Payment Information, Online ID, Location Data, Usage Data, Company Affiliation, Social Media Information, and/or Criminal Offence Information.
Taking steps for the organization to comply with legal obligations, including performing compliance projects, answering to queries and providing internal support to other teams within the organization.	Legal Obligation	Account Information, Contact Information, Location Data
Privacy request management to ensure compliance with legal obligations regarding data subject requests.	Legal Obligation	Account Information, Contact Information, Online ID, Location Data, Company Affiliation, Social Media Information, and/or additional provided documentation required to verify identity.
To complete transactional email services in relation to the Licensed Product	Performance of Contract	Account Data, Contact Information, Payment Information, Online ID, Location Data, and/or Company Affilitation
Bookkeeping, completing tax and business requirements.	Legal Obligation	Account Information, Contact Information, Payment Information, Online ID, Location Data, and/or Company Affilitation
To complete transactional services, specifically refunds to customers.	Performance of Contract	Account Information, Contact Information, Payment Information, Online ID, Location Data, and/or Company Affiliation
Facilitating payments from customers, invoicing for the Licensed Product(s).	Performance of Contract	Account Information, Contact Information, Payment Information, Online ID, Location Data, and/or Company Affilitation
For marketing, promotion, and advertising purposes.	Consent	Account Information, Contact Information, User Data, Usage Data, Feedback, and/or Contests, Surveys and Sweepstakes Data
To evaluate and develop new features, technologies, and improvements to the Syncfusion product or service.	Legitimate Interest	User Data, Usage Data, and/or Voice Data
To comply with legal obligations and law enforcement requests	Legal obligation	Account Information, User Data, Usage Data, Payment Information, Online Identifiers, Location Data, Voice Data Contests, and/or Surveys and Sweepstakes Data
To fulfill contractual obligations with third parties, for example, our agreements with owners of content on the Syncfusion Service and take appropriate action with reports of intellectual property infringement and inappropriate content.	Legitimate interest	User Data, Usage Data, and/or Payment Information
To establish, exercise, or defend legal claims.	Legitimate interest	Account Information, User Data, Usage Data, Payment Information, Location Data, and Contests, Surveys and Sweepstakes Data
To conduct business planning, reporting, and forecasting.	Legitimate Interest	User Data, Usage Data, and/or Payment Information
To conduct research, contests, surveys, and sweepstakes.	Consent	User Data, Usage Data, and Contests, Surveys and Sweepstakes Data
To authenticate users, list/manage their documents, send reminders, obtain embedded signing links, refresh/revoke sessions when BoldSign Extension is enabled.	Performance of a Contract	User Data, Usage Data

Retention and Deletion of Personal Information

Retention

As a Controller, we keep your personal data only as long as necessary to provide you with the Syncfusion service or Licensed Product. The length of time that we retain personal information depends on the purpose for which we collected it for and/or as required to comply with applicable legal obligations as set forth in our internal Data Retention and Disposal Policy. For instance, there is some types of personal information we need to retain even after you close your account in order to comply with business and legal requirements, such as personal information related to our contract and business transactions with you, which we retain for ten years after your last interaction with us.

Where we process personal information for marketing purposes or on the basis of consent, we process the information until you revoke consent and for a short period after this in order to implement your requests. We also keep a record of the fact that you have asked us not to send you direct marketing or to process your information so that we can respect your request in the future.

Deletion

If you close or request that we close your account, we will delete or anonymize your personal data, so it no longer identifies you, unless we’re required to keep something, or we still need to use it for a legally justifiable reason.

Here are some examples of situations where we’re legally allowed or required to keep some of your personal data:

• if there is an unresolved issue relating to your account, such as an outstanding credit or unresolved claim or dispute
• for our legal, tax, audit, and accounting obligations
• for our legitimate business interests such as fraud prevention or to maintain security.
• The data is connected to a corporation that has a legitimate legal business interest.

Protection of Personal Data

The Company adopts and implements technical and administrative security measures for the protection of your personal data, pursuant to strict policies and internal control standards concerning the managing, processing, and safeguarding of personal data. We encrypt your data both in transit and at rest.

Security Policy

Syncfusion has appropriate measures in place to help ensure that our users’ data is protected against unauthorized access or use, alteration, unlawful or accidental destruction, and accidental loss. Although we make reasonable efforts to protect your Personal Information from loss, misuse, or alteration by third parties, you should be aware that there is always some risk involved in transmitting information over the Internet. There is also some risk that thieves could find a way to thwart our security systems. In the unfortunate event of a Personal Data breach, we will notify you and any applicable regulator when we are legally required to do so.

Data Integrity and Security

We use industry standards to keep any information you provide secure. All Company employees must abide by the Company’s Privacy Policy. Only authorized employees are permitted to have access to personally identifiable data about website visitors, and that access is limited to what is reasonably needed to perform an employee’s responsibilities, such as providing updates, notices, or customer service. Employees who violate our Privacy Policy are subject to disciplinary action, up to and including termination.

Children's Privacy

The Company’s website and any product or service is intended for adults. The Company does not knowingly collect Personal Data from children under the age of majority. If the Company obtains knowledge that it has personally identifiable information from a child under the age of majority in retrievable form in its files, the Company will delete that information from its existing files.

Our application and services are intended for business use, and we do not expect them to be of any interest to minors. We do not intentionally collect any personal information from consumers below the age of 18.

For Individuals Based in the European Union (EU), European Economic Area (EEA), United Kingdom (UK), and Switzerland

If you are based in one of these jurisdictions, Syncfusion is the controller of your personal data collected in the following instances:

• When you visit our website
• When we process your personal data for sales and marketing purposes
• When we process technical information for fraud detection and security monitoring purposes

Syncfusion is a processor of all personal data processed on the application, on behalf of our clients. We only process the personal data under their direction. Please contact your employer or the organization that granted you access to the application for details on their privacy practices.

We only process personal data if we have a lawful basis for doing so. The lawful bases applicable to our processing as controller are:

• Consent: We will ask for your express and informed consent every time we collect your personal data on this legal basis.
• Contractual basis: We process the personal data as necessary to fulfill our contractual terms with you or our clients.
• Legitimate interest: We process the names, contact details, job titles, companies of our existing and prospective clients for our marketing purposes, including market research and sales leads generation.
• Legal Obligation: We process data when it is necessary to comply with legal obligations.
• Fraud Detection: We process technical and device information for fraud detection, misuse prevention, and security monitoring activities.

You have the following rights under the GDPR:

• Be informed about the collection and use of your personal data
• Access your personal data
• correct errors, such as inaccuracies or incomplete information, in your personal data
• Erase your personal data
• Object to the processing of your personal data.
  • This right is also available to individuals whose personal data is processed by us for direct marketing purposes. If you object to the processing of your personal data for direct marketing purposes, we shall stop processing within 30 days of receipt of your request.
• Export your personal data
• Restrict our processing of your personal data for specific reasons, including any of the purposes supported by the legitimate interest legal bases (see the section above).

We process personal data in the United States and share it with our service providers in other jurisdictions. We use standard contractual clauses as the data transfer mechanism of transferring EU data to countries subject to data transfer requirements. Standard contractual clauses (SCCs) are written commitments between parties that can be used as a ground for data transfers from certain countries to third countries by providing appropriate data protection safeguards. SCCs have been approved by the relevant regulatory authority, such as the European Commission, and can not be modified by the parties using them (you can see the SCCs adopted by the European Commission at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?hl=en_US.) Such clauses have also been approved for transfers of data to countries outside the UK and Switzerland. We rely on SCCs for our data transfers where required and in instances where they are not covered by an adequacy decision. If you wish to obtain a copy of our SCCs, you can contact us at privacy@syncfusion.com.

See the table of our service providers Read More.

If you are located in the EEA or the United Kingdom and have questions about your personal data or would like to request to access, update, or delete it, you may contact our representative at:

Bird & Bird GDPR Representative Services SRL, Avenue Louise 235, 1050 Bruxelles, Belgium, EUrepresentative.syncfusion@twobirds.com

AND

Bird & Bird GDPR Representative Services UK, 12 New Fetter Lane, London, EC4A 1JP, United Kingdom, UKrepresentative.syncfusion@twobirds.com

For Individuals Based in California

This section provides additional specific information for consumers based in California as required by the California Consumer Privacy Act of 2018 (“CCPA”).

Collection and Use of Personal Information

In the last 12 months, we have collected the following categories of personal information:

• Identifiers, such as your name, mailing address, email address, zip code, telephone number or other similar identifiers
• California Customer Records (Cal. Civ. Code § 1798.80(e)), such as username and password, company name, job title, business email address and department
• Internet/network information, such as your browsing history, log and analytics data, information about the device(s) used to access the services and information regarding your interaction with our websites or services and other usage data
• Geolocation data, such as information about your location (at country and city level) collected from your IP address
• Sensory Information, the content, audio and video recordings of conference calls between you and us that we record where permitted by you and/or the law
• Profession/employment information that you send to us when applying for a position included in your CV and cover letter
• Other personal information, such as personal information you provide to us in relation to a survey, comment, question, request, article download or inquiry and any other information you upload to our application

We collect personal information directly from you, from your browser or device when you visit our websites, from third parties that you permit to share your information, or from third parties that share public information about you, as stated above.

See the sections above, “How We Collect Personal Data,” “Sharing and Disclosure,” and “Purposes and Legal Basis for Processing Personal Data” to understand how we use the personal information collected from California consumers.

Recipients of Personal Information

We share personal information with third parties for business purposes. The categories of third parties to whom we disclose your personal information may include: (i) our service providers and advisors, (ii) marketing and strategic partners; (iii) ad networks and advertising partners; (iv) analytics providers; and (v) social networks.

Please see the “Sharing and Disclosure” section of the Privacy Policy above for more information.

California Privacy Rights

As a California resident, you may be able to exercise the following rights in relation to the personal information about you that we have collected (subject to certain limitations at law):

• The right to know any or all of the following information relating to your personal information that we have collected and disclosed in the last 12 months (upon verification of your identity):
  • The specific pieces of personal information we have collected about you
  • The categories of personal information we have collected about you
  • The categories of sources of the personal information
  • The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed
  • The categories of personal information we have sold and the categories of third parties to whom the information was sold, and
  • The business or commercial purposes for collecting or selling the personal information.
• The right to request deletion of personal information we have collected from you, subject to certain exceptions.
• The right to opt-out of personal information sales to third parties now or in the future. However, we do not sell your personal information.

You also have the right to be free of discrimination for exercising these rights.

Please note that if exercising these rights limits our ability to process personal information (such as a deletion request), we may no longer be able to provide you with our products and services or engage with you in the same manner.

How to Exercise Your California Consumer Rights

To exercise your right to know and/or your right to deletion, please submit a request by contacting us at privacy@syncfusion.com

We will need to verify your identity before processing your request.

In order to verify your identity, we will generally require sufficient information from you so that we can match it to the information we maintain about you in our systems. Sometimes we may need additional personal information from you to be able to identify you. We will notify you.

We may decline a request to exercise the right to know and/or right to deletion, particularly where we cannot verify your identity or locate your information in our systems or as permitted by law.

You may choose to designate an authorized agent to make a request under the CCPA on your behalf. No information will be disclosed until the authorized agent’s authority has been reviewed and verified. Once an authorized agent has submitted a request, we may require additional information (i.e., written authorization from you) to confirm the authorized agent’s authority.

If you are an employee/former employee of a Syncfusion client that uses our application and services, please direct your requests and/or questions directly to your employer/former employer.

If you are a third party (auditor, business associate, etc.), who was given access to the Syncfusion application by a Syncfusion client, please direct your requests and/or questions directly to the Syncfusion client that gave you access.

Subject to Change

We may change this Privacy Policy at any time. If we make changes to this Policy we post an updated version of this Policy to the applicable websites. We always indicate the date the last changes were published on our website. When using our services, you are asked to review and accept our Privacy Policy. In this manner, we may record your acceptance and notify you of any future changes to this Policy.

Subscription Preferences

Manage the marketing communications you receive from us at any time by accessing and editing your preferences by clicking this link: Explore More.

Contact Us

For EEA and UK customers, please direct your comments and questions to the following addresses:

Bird & Bird GDPR Representative Services SRL, Avenue Louise 235, 1050 Bruxelles, Belgium, EUrepresentative.syncfusion@twobirds.com

AND

Bird & Bird GDPR Representative Services UK, 12 New Fetter Lane, London, EC4A 1JP, United Kingdom, UKrepresentative.syncfusion@twobirds.com

For all other customers, please direct your comments and questions to the following addresses:

By Mail:

• Syncfusion
• 2501 Aerial Center Parkway Suite 111 Morrisville, North Carolina 27560
• ATTN: Legal Affairs

By Email:

• privacy@syncfusion.com

If you encounter a user that is in violation of this Privacy Policy, or if you believe a user is inappropriately using our services, please email us at privacy@syncfusion.com. We will do our best to respond to all inquiries within 30 days.