SynDesk Privacy Policy
SynDesk ("we," "our," "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights when using SynDesk.
1. Information We Collect
1.1 Account Information
- Name, email address, profile picture, organization affiliation, and login credentials.
- Authenticated via our secure identity provider or Google sign-in.
1.2 Usage Information
- Course participation, session attendance, AI study aid usage, quiz results, and interactions with other users.
- Device and browser information, IP address, and connection logs for performance monitoring.
1.3 Content You Upload
- Notes, lecture materials, assignments, and any other content you store in your account.
- AI-generated content you create through SynDesk services.
1.4 Payment Information
- Transaction details for subscriptions, AI credit bundles, or storage upgrades.
- Payment processed through our payment partner (M-Pesa, Tigo Pesa, Airtel Money).
2. How We Use Your Information
- To provide and maintain the SynDesk platform.
- To enable multi-tenant features, e.g., allow students and teachers to access their organization-specific content.
- To generate AI study aids (summaries, quizzes, slides) and track AI credit usage.
- To communicate important notifications (session alerts, billing, updates).
- To monitor platform performance, detect errors, and prevent abuse.
- For legal obligations, fraud prevention, or compliance with Tanzanian digital service regulations.
3. Sharing of Information
- Within an Organization: Teachers and students can access organization-specific content as authorized.
- Third-Party Services:
- Cloud storage providers.
- AI processing infrastructure.
- AI content generation services.
- Payment processors.
These providers only process data as needed to deliver services.
Legal Requests: We may disclose your data if required by law or to protect rights, safety, or property.
4. Data Storage and Security
- All data is encrypted AES-256 at rest and transmitted over TLS 1.3.
- User authentication uses multi-factor authentication and optionally Google sign-in.
- Access to multi-tenant data is strictly controlled with database-level access controls.
- AI-generated temporary files are purged after 30 days, unless explicitly saved.
5. Your Rights
- Access and request a copy of your data.
- Correct inaccurate or incomplete information.
- Delete your account and personal data, subject to legal obligations.
- Control marketing communications.
Students and teachers can manage these preferences in the dashboard or by contacting support.
6. Cookies & Tracking
- We use cookies and local storage to maintain sessions, provide dashboard features, and collect usage analytics.
- You can disable cookies, but some platform features may not function properly.
7. Retention Policy
- Personal and organization data is retained as long as your account is active.
- Temporary AI-generated files are deleted automatically after 30 days.
- Transaction logs and compliance-related data may be retained longer per Tanzanian regulations.
8. Children's Privacy
- SynDesk is intended for users 13 years and older.
- Accounts created for younger users must have parental consent.
9. International Data Transfers
- Data may be stored and processed in secure data centers in Tanzania and the region.
- We ensure compliance with relevant Tanzanian privacy regulations.
10. Changes to this Privacy Policy
- We may update this policy occasionally.
- Users will be notified of significant changes via email or in-app notification.
11. Contact Us
If you have questions or concerns about privacy, contact:
Stralys Ltd.
Email: privacy@lecta.co.tz
Phone: +255791383962