Policies
GDPR Notice
Information for EU/EEA data subjects about how Synapse Q processes personal data under GDPR.
Controller
Synapse Q acts as controller for platform account data and as processor for enterprise-provided evaluation datasets.
Legal bases
- Contractual necessity for account creation, submissions, and support.
- Legitimate interest for security, fraud prevention, and service improvement.
- Consent for optional communications and marketing.
Data transfers
Cross-border transfers rely on EU Standard Contractual Clauses and vendor due diligence. Region pinning is available for enterprise pilots when requested.
Rights
- Access, rectification, erasure, restriction, objection, and portability.
- Right to lodge a complaint with your supervisory authority.
Send requests to privacy@kvantiq.studio. We respond within the statutory timeframe.
Do you use processors?
Yes. We use vetted processors with DPAs and SCCs in place; vendor list available upon request.
Can I restrict processing?
You may request restriction; we will pause non-essential processing while we review your request.
How long is data retained?
Retention is tied to contractual need and legal requirements; pilot data can be shortened on request.
Is data transferred outside the EU?
Transfers rely on SCCs and technical safeguards; EU hosting is default for platform data.