We collect as little personal data as we can, we do not use advertising trackers, and we never sell personal data. This policy explains what we do with the information you give us on this website.
Who we are
This website is operated by Synaptic OT Private Limited (in incorporation) ("Synaptic OT", "we", "us"). We are the controller of the personal data described in this policy. You can reach us about privacy at [email protected].
What this policy covers
This policy covers synapticot.com and the forms on it. It does not cover the Synaptic vSOC product deployed at a customer's site. The product runs on the customer's own infrastructure; operational data it processes stays there and is governed by the customer agreement. Fully air-gapped deployments never contact us.
What we collect
Information you give us
When you use the contact or evaluation form we collect your name, work email, company, and, if you provide them, your job title, country, industry, topic, expected deployment, number of sites, approximate asset count and your message. We also record that you consented to us processing the request and the website that referred you, if your browser shares it.
When you use the feedback form we collect your name, work email, company, job title and role, and, if you provide them, your industry, country, the size of your OT estate, the capabilities that interest you, your ratings, your comments and whether you want us to follow up.
Please do not send IP addresses, credentials or other sensitive details about your plant through the form.
Information collected automatically
- Network data. Our hosting and security provider, Cloudflare, processes your IP address and request details to deliver the site and protect it from attacks.
- Rate limiting. When you submit a form we store a pseudonymised hash of your IP address, salted per day, to limit abuse. We do not store the IP address itself.
- Analytics. We use cookieless, aggregate page statistics (Cloudflare Web Analytics). It does not use cookies or build a profile of you.
- Bot protection. If enabled, Cloudflare Turnstile checks that form submissions come from a person or a legitimate assistant. It processes technical signals from your browser for that purpose only.
We do not use advertising cookies, social media pixels or third-party tracking scripts. See the cookie notice for details.
How and why we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to your request, arrange a walkthrough or evaluation, and prepare a quote | Form data | Your consent, and steps taken at your request before a contract |
| Learn what industry professionals think of our product and website, and improve both | Feedback form data | Your consent |
| Follow up about our products with people who contacted us | Name, email, company, role | Legitimate interest in business-to-business communication. You can object at any time. |
| Keep the website and forms secure, prevent spam and abuse | Network data, IP hash | Legitimate interest in security |
| Understand which pages are useful | Aggregate analytics | Legitimate interest; no personal profile is created |
| Meet legal, tax and accounting obligations | Records of customer relationships | Legal obligation |
We do not make decisions about you based solely on automated processing.
Who we share it with
We share personal data only with service providers that help us run this website and respond to you, under contracts that limit their use of it:
- Cloudflare, Inc. for hosting, database, content delivery, security and analytics.
- Our email providers, to receive and send messages about your request.
We may disclose information if required by law or to protect our rights, and to a successor if the business is reorganised or sold. We do not sell or rent personal data.
International transfers
Our providers may process data outside your country, including in the European Union, the United States, the United Arab Emirates and India. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
We keep form submissions for up to 24 months after our last contact with you, unless you become a customer or partner, in which case we keep the records needed for that relationship and for legal obligations. You can ask us to delete your data sooner.
Your rights
Depending on where you live, including under the EU and UK GDPR, the UAE Personal Data Protection Law and India's Digital Personal Data Protection Act, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data;
- ask us to delete your data;
- object to or restrict our processing, including follow-up communication;
- withdraw consent at any time, without affecting earlier processing;
- receive your data in a portable format; and
- complain to your data protection authority.
Email [email protected] to use any of these rights. We will reply within 30 days and may ask you to confirm your identity.
Security
The website is served over HTTPS with strict security headers, form data is stored in an access-controlled database, and only authorised staff with authenticated accounts can read it. No method of transmission or storage is perfectly secure, but we work to protect the data you share with us.
This website is intended for business users and is not directed at children.
Changes and contact
We will update this policy when our practices change and show the date of the latest version at the top. For any question about privacy, contact [email protected].