Privacy Policy

Who is responsible

OSYNK AI S.R.L., Str. Orastie Nr. 10, 400398 Cluj-Napoca, jud. Cluj, Romania, VAT ID RO51637211, is the controller for enquiries sent to Osynk. For privacy questions, contact contact@osynk.ai.

The information in an enquiry

The contact forms on Business Agents, Software Factory and AI Native ask for your name, email address and message; the closed beta request asks for your name and email address. Company is optional on both, and so is the message on the beta request. Please include only the information we need to understand your request; avoid sending sensitive personal information or information about other people.

The Privacy Policy checkbox on the contact forms and the closed beta request records your acknowledgement of this notice. It is not a subscription to marketing emails.

When you send a form, the website emails your details to our inbox and sends you a short confirmation at the address you gave. The confirmation repeats nothing you wrote.

Why we use it

We use enquiry details to understand your request, reply and discuss a possible project. The legal basis for general enquiries is our legitimate interest in responding to people who contact us, under Article 6(1)(f) GDPR. Where you ask us to take steps towards a contract with you, Article 6(1)(b) may apply instead.

You choose whether to contact us. Without an email address and enough information about your request, we may be unable to respond meaningfully.

How long information is kept

Enquiry information is kept for as long as it is needed to answer your request and manage the resulting discussion. Retention is assessed against whether the conversation is active, whether it leads to a customer relationship, and whether a legal obligation or claim requires a record. Information that is no longer needed is deleted or anonymised.

The copy the website itself keeps of each form is deleted automatically 12 months after it arrives; the email it sends to our inbox follows the rules above.

Who can access it

The people at Osynk handling your enquiry need access to it. Service providers supporting our communications may process the information needed to deliver and manage your message.

Postmark, operated by AC PM LLC, part of ActiveCampaign, LLC in the United States, delivers the emails a form sends. Transfers to the United States are made under the EU Standard Contractual Clauses in the Postmark Data Processing Addendum, and ActiveCampaign is certified under the EU-US Data Privacy Framework. Cloudflare, Inc. runs the spam check described below.

Keeping spam out of the forms

The forms use Cloudflare Turnstile to tell people from automated software. It loads only when you start filling in a form and usually needs nothing from you; sometimes it asks you to tick a box. To decide, Cloudflare processes information about your browser and connection, including your IP address. Cloudflare is based in the United States and certified under the EU-US Data Privacy Framework.

Our server also limits how many forms can be sent from one connection, and how many confirmations one email address can receive. For this it keeps a scrambled (hashed) form of your IP address and email address for two days, then deletes it.

The legal basis for both is our legitimate interest in protecting the forms and the people who use them from abuse, under Article 6(1)(f) GDPR.

Preferences on your device

This website follows your device’s light or dark setting until you choose a theme. A manual theme choice is saved on your device. The site also saves a logo preference, if changed, and text you edit in the Home page’s “Note for later”. These are local preferences and notes, not contact-form submissions.

You can remove them through your browser’s site-data controls. This site runs no advertising trackers. Form entries stay in the open page and are not written to local storage by this site.

Analytics cookies

We use Google Analytics to measure visits to osynk.ai. It is off by default and loads only after you choose Accept on the cookie banner; if you choose Reject, it never loads. When enabled, it sets Google’s _ga and _ga_* cookies and records page views with aggregate interaction signals such as scrolling. Before anything is sent to Google, we keep only the page address, its campaign tags and the referring site, and drop anything that looks like an email address or phone number. For analytics, Google’s advertising and personalisation signals stay switched off, so Analytics sets no advertising cookie and builds no advertising profile.

The legal basis is your consent, under Article 6(1)(a) GDPR. Your choice is kept for six months in the osynk_cookie_consent cookie; after that the banner asks again. Cookie settings, at the foot of every page, lets you change it at any time: Reject stops analytics and deletes the _ga cookies. Google may process this data outside the European Economic Area; for such transfers we rely on the European Commission’s Standard Contractual Clauses and, where Google is certified under it, the EU-US Data Privacy Framework.

Your rights

Depending on the processing and legal basis, you may ask for access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests. If processing relies on consent, you may withdraw it. These rights have conditions and exceptions. See the European Data Protection Board’s guide to your rights.

Write to contact@osynk.ai to make a request. You may also complain to a supervisory authority, including Romania’s National Supervisory Authority for Personal Data Processing, or the authority where you live or work.

Changes to this policy

The date at the top will change when this notice is updated.