Privacy Policy

Last updated: 15 October 2026  ·  Version 1.3  ·  privacy@synqo-one.com

This is a translation provided for convenience. In case of any discrepancy, the Italian version prevails.

1. Data controller

3.0 SRL ("we", "the Controller"), owner of the Synqo One platform, is the controller of the personal data collected through the Synqo One platform and the website synqo-one.com (the "Service").

2. Data collected

2.1 Data provided directly by the user

• Access request: first and last name, company name, email address, telephone number (optional) and what you sell.
• Registration data: company name, email address and username.
• Login credentials: username and password (stored in encrypted form, never in plain text).
• Billing details: company name, address, VAT number, SDI code, email and accounts contact person.
• Payment data: handled by PayPal, which is PCI-DSS certified, or by Shopify for those who subscribe through the Synqo One app for Shopify. Synqo One does not access or store card or payment account details.
• Communications: the content of messages sent to support or by email.

2.2 Data collected automatically

• Technical access data: IP address, browser type, operating system, pages visited, date and time of access, session duration.
• Cookies: a single technical cookie, which remembers how the menu looks; no analytics or profiling cookies. See the Cookie Policy for details.
• Usage data: actions performed on the platform (catalogues uploaded, rules configured, products published) for the provision and improvement of the Service.

2.3 Third-party data (catalogue)

The user may upload to the platform product catalogue data (titles, EANs, prices, images) originating from their own suppliers. Such data is processed solely for the provision of the Service and under the responsibility of the user, who acts as an independent controller with respect to their own suppliers.

2.4 Order data from your sales channels

When you connect a marketplace or online shop to Synqo One (for example Temu, Amazon, Discogs, WooCommerce or Shopify), Synqo One reads the orders you receive on that channel. For each order it stores only:

• order number or identifier, date, status (processing, shipped, cancelled…);
• products sold (code, title, quantity) and amounts (price paid, taxes, shipping costs and channel fees, where the channel provides them).

Synqo One does not store the name, address, email, telephone number or other contact details of buyers: the data received from the channel passes through a closed list of permitted fields, and any other field is discarded before saving. Messages relating to Discogs orders are read and sent in real time and are not stored.

Shipping data. To ship an order, you can open the buyer's name, delivery address and telephone number in Synqo One. This works as follows:

• the data is requested from the channel (for example Amazon, Shopify, WooCommerce or Discogs) at the moment you press «Show shipping details», is shown to you and is not stored: it does not enter the database, backups, logs or browser storage, and it disappears from the page when you close the order;
• only name, company, address, postcode, city, province, country and telephone number are transferred; email, VAT number and notes are not read;
• it can be opened only by administrators of your account who have enabled two-step verification, and only for orders that have not been cancelled, up to 30 days after delivery (and in any case no later than 90 days from the order);
• each opening is recorded in the security log (who, which order, when — never the content), and there is a maximum number of openings per day per user;
• the transfer takes place only over encrypted connections (HTTPS/TLS 1.2 or higher).

For Temu, shipping data is not available in Synqo One.

Purpose: solely the provision of the Service you have requested — removing sold items from the other channels, updating stock, calculating the cost and margin of sales, showing you the Orders and Statistics pages and, for shipping data, enabling you to ship the order. It is not used for advertising, profiling or automated decisions about individuals, and it is not disclosed to third parties. You too must use it only to ship the order to which it relates.

Role: for this data you, as the seller, are the controller; 3.0 SRL processes it on your behalf as processor (Art. 28 GDPR), solely for the purposes indicated above, in accordance with the Data Processing Agreement.

3. Purposes and legal basis of processing

• Provision of the Service (basis: performance of a contract, Art. 6(1)(b) GDPR) — account management, catalogue processing, publishing on sales channels, technical support.
• Security and fraud prevention (basis: legitimate interest, Art. 6(1)(f) GDPR) — access monitoring, detection of anomalous activity, protection of the infrastructure.
• Legal and tax obligations (basis: legal obligation, Art. 6(1)(c) GDPR) — retention of invoices, accounting records and other documents required by law.
• Service communications (basis: performance of a contract) — notifications about critical updates, deadlines, service interruptions.
• Marketing and newsletter (basis: consent, Art. 6(1)(a) GDPR) — sending updates about what is new in Synqo One, only with explicit consent, which may be withdrawn at any time.

4. Data retention

• Account data: retained for the entire term of the contract and deleted within 30 days of the account being closed (copies in backups expire within the following 30 days), unless otherwise required by law.
• Security log (logins, account changes, openings of shipping data): 90 days. Web server logs: 14 days.
• Billing data: 10 years (Italian tax obligation).
• Communications with support: 36 months, and in any case deleted together with the account.
• Shipping data (section 2.4): not retained — it is shown and then forgotten.
• Order data from sales channels (section 2.4): for the term of the contract; deleted within 30 days of the account being closed (copies in backups expire within the following 30 days). You may request earlier deletion by writing to privacy@synqo-one.com. For Shopify stores, a store's orders are deleted automatically when Shopify requests it, 48 hours after the app is uninstalled.

Once the retention periods have expired, the data is deleted or permanently anonymised.

5. Recipients of the data

Personal data may be disclosed to:

• Infrastructure provider: Hetzner Online GmbH (servers in Finland, EU) — with adequate GDPR safeguards; the server disks are encrypted.
• Backup: Backblaze (storage in the EU, the Netherlands) — receives only copies that are encrypted before being sent, which it cannot read.
• In-platform assistant: Anthropic (United States, with Standard Contractual Clauses) — receives only the questions you write to the assistant; it does not receive data about your orders or your buyers.
• Payment providers: PayPal (payment and subscription management) — PCI-DSS certified; Shopify, for those who subscribe through the Synqo One app for Shopify (the subscription is charged on the shop's bill).
• Transactional email provider: for sending system emails and notifications.
• Public authorities: upon legally binding request.

No data is sold or disclosed to third parties for marketing purposes.

6. International data transfers

Data is processed mainly within the European Union. Any transfers to third countries take place only where adequate safeguards are in place (an adequacy decision of the European Commission, Standard Contractual Clauses or other mechanisms provided for by the GDPR).

7. Your rights

As a data subject, you have the following rights under the GDPR (Arts. 15–22):

To exercise your rights, write to privacy@synqo-one.com. We will reply within 30 days. You also have the right to lodge a complaint with the competent supervisory authority (in Italy: Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

8. Cookies

We use a single technical cookie, needed to remember how the menu looks, and no analytics or profiling cookies. For the full list, the purposes and instructions on how to manage them, please see our Cookie Policy.

9. Security

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure: TLS/HTTPS encryption, passwords encrypted with robust algorithms, access to data restricted through role-based controls, encrypted backups, continuous monitoring. For details, please see our Security Policy.

10. Minors

The Service is intended exclusively for natural persons aged 18 or over and for businesses. We do not knowingly collect data from minors. If you believe that data of a minor has been collected, please contact us at privacy@synqo-one.com.

11. Changes to this policy

We reserve the right to update this policy to reflect regulatory, technological or operational changes. In the event of material changes, users will be informed by email or in-app notification with at least 30 days' notice. The "last updated" date at the top of the page always indicates the most recent version.

12. Contact