Privacy Policy

Who we are

Synas Labs is a software company. Based in Lahore, Pakistan, working remotely with clients in the United States and United Kingdom. We decide how and why the personal data described here is used, which makes us the data controller for it.

You can reach us at hello@synaslabs.com about anything on this page.

What we collect

We collect only what you give us or what your browser sends when you use this site:

• Contact details you submit: name, email, business name, website, and your role.
• What you write in forms: how your workflow runs today, the tools you use, your goals, timeline, and budget range.
• Scheduling details you enter when you book a call through our scheduling provider.
• Basic technical data, such as IP address and browser type, in server logs and for abuse prevention.

The System Brief tool keeps your draft in your own browser storage. It is not sent to us unless you choose to attach it to an inquiry.

Why we use it, and our legal basis

• To reply to your inquiry and arrange a call or audit. Basis: our legitimate interest in answering you, or steps you ask for before a contract.
• To deliver work you have hired us for. Basis: performing our contract with you.
• To keep the site secure and prevent spam. Basis: our legitimate interest in running a safe service.
• To meet legal and tax obligations. Basis: legal obligation.

We do not sell personal data, and we do not use it for advertising.

Cookies and analytics

This website does not use advertising or analytics cookies. A session cookie is set only when a client or team member signs in to a private area.

If we add analytics later, we will update this page first and ask for consent where the law requires it.

AI tools

When AI interpretation is switched on for the System Brief, the text you type is sent to an AI model provider (OpenAI) so it can be structured. Please do not enter personal data, passwords, or confidential customer details into that tool.

Who we share it with

We share personal data only with service providers that help us run the business, such as hosting, email, scheduling, and AI model providers, under their own data protection terms. We may also disclose data if the law requires it.

Where it is processed

Our team works from Pakistan, so your data is processed there and with our providers wherever they operate. When we move personal data from the UK or European Economic Area, we rely on appropriate safeguards, such as standard contractual clauses, where the law requires them.

How long we keep it

We keep inquiry data for as long as it is needed to respond and to follow up on the opportunity, then delete or anonymize it. Client project records are kept for the length of the engagement and any period the law requires. You can ask us to delete your data sooner.

Your rights under GDPR and UK GDPR

If you are in the UK or European Economic Area, you have the right to:

• Access the personal data we hold about you.
• Correct data that is wrong.
• Ask us to erase your data.
• Restrict or object to how we use it.
• Receive your data in a portable format.
• Withdraw consent at any time, where we rely on consent.

Email hello@synaslabs.com to use any of these rights. We will reply within one month. You can also complain to your data protection regulator, such as the Information Commissioner’s Office (ICO) in the UK. US residents can contact us with the same requests, and we will honor them where the law applies.

Client data and processing agreements

When we build or run systems for a client, the client’s business data stays the client’s property. We process it only to deliver the agreed work.

A Data Processing Agreement (DPA) is available on request.

Changes to this policy

We will post changes here and update the date at the top. Material changes will also be sent to clients we are working with.