Privacy Policy

• To provide, operate, and maintain the Service.
• To process documents through AI-assisted contract analysis (the MyCBA Engine).
• To manage your account and provide customer support.
• To send transactional communications (e.g., password resets, deadline reminders).
• To detect, prevent, and address security incidents.
• To comply with legal obligations.

We do not sell your personal data. We share information only in these limited circumstances:

• Service Providers: We use third-party processors (e.g., cloud hosting, AI model providers) solely to operate the Service. These providers are contractually bound to protect your data and use it only as directed.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We retain your account and content data for as long as your account is active or as needed to provide the Service. Upon account deletion or organization request, we will delete or anonymize your data within 90 days, except where retention is required by law.

We implement industry-standard safeguards including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access controls with organization-level data isolation.
• Audit logging of all data access and modifications.
• Regular security assessments and monitoring.

Depending on your jurisdiction, you may have the following rights under the CTDPA, CCPA, and other applicable laws:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a portable, machine-readable format.
• Opt-Out: Opt out of the sale of personal data (we do not sell personal data), targeted advertising, or profiling.
• Non-Discrimination: Exercise any of these rights without discriminatory treatment.

To exercise any of these rights, contact us at admin@syndiscore.ai or call 959-666-0113. We will respond within 45 days as required by the CTDPA.

• We process personal data for the purposes described in Section 2.
• We do not sell personal data.
• We do not use personal data for targeted advertising.
• We do not engage in profiling that produces legal or similarly significant effects.
• If you are a Connecticut resident and wish to appeal a decision regarding your privacy rights request, you may contact us at admin@syndiscore.ai. If we deny your appeal, you may contact the Connecticut Attorney General at portal.ct.gov/AG.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.