Addendum: Privacy Policy

International Privacy Addendum

Last Updated: September 27, 2026

SYNCgaze Ltd ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and secure your information when you visit syncgaze.com (the "Website") or use our web-based applications, including the RGaze Early Access Demo.

1. Information We Collect

We only collect personal information that you voluntarily provide to us through our Website form fields.

  • Investor Relations & Partnership Inquiries: Full Name, Company/Investment Entity Name, and Corporate Email Address.
  • Retail SME Early Access Requests: Full Name, Company Name, Corporate Email Address, Partner Type, and Company Size Brackets.
  • Enterprise White-Label Licensing Inquiries: Full Name, Company Name, and Corporate Email Address.
  • RGaze Demo Access Credentials: Unique user passwords and automated session authentication records.

2. How We Use Your Information

We process your personal data strictly to fulfill your requested interactions and maintain platform compliance:

  • To evaluate, verify, and vet institutional credentials for Early Access sandbox provisioning.
  • To transmit secure, single-use authentication sign-in links and demo passwords directly to your verified corporate email address.
  • To initiate private strategic consultations regarding investment rounds or white-label infrastructure deployments.
  • To authenticate, maintain, and secure active sandbox user sessions on our network edge pipelines.

3. Cookie Policy & Session Management

The Website and the RGaze Early Access Demo utilize necessary first-party cookies and local storage tokens to manage system functionality and access security:

  • Authentication & Access Control: When you are issued a secure password to access our live staging engines, a persistent, secure first-party cookie is automatically stored on your browser.
  • Purpose: This cookie safely retains your encrypted credentials so you do not have to re-enter your password during subsequent visits to the demo pipeline.
  • Management: You can configure your device browser settings to refuse or delete cookies at any time; however, disabling cookies will terminate your automated access to the interactive demo area, requiring manual password entry upon every session encounter.

4. Data Sharing & Security Architecture

  • No Third-Party Monetization: We do not sell, rent, trade, or lease your personal data or corporate metadata to external ad-networks or brokers.
  • Secure Infrastructure Storage: All form submission fields are routed directly to our secure cPanel server database lines and processed at the network edge to prevent external data leaks.
  • Regulatory Alignment: In strict alignment with global data protection architectures and our foundational tracks in Data & AI Ethics, personal information is only retained for as long as necessary to manage your active partnership evaluation track.



5. Global Privacy Addendum: United States, United Kingdom, Australia, New Zealand, Europe, China, & India

To secure absolute regulatory compliance across expanding international enterprise markets, this addendum establishes our data protection frameworks under the European Union General Data Protection Regulation (EU GDPR), China’s Personal Information Protection Law (PIPL), and India’s Digital Personal Data Protection (DPDP) Act, 2023.

5.1 US Federal & State Framework Alignment

For investors, retail SMEs, and white-label partners accessing our platform from the United States:

  • Notice at Collection: We collect only the minimum required dataset (Name, Company, Corporate Email, and optional browser session tokens) strictly necessary to authenticate and transmit your automated RGaze Demo credentials.
  • No Commercial Data Sale: SYNCgaze does not "sell" or "share" personal information or corporate metadata to third-party ad networks, data brokers, or behavioral advertising exchanges. Data is processed strictly to manage your active partnership evaluation track.
  • Sensitive Personal Information (SPI): We do not collect, process, or maintain any sensitive personal information (such as financial account numbers, precise geolocation, or biometric data) within our primary landing page forms.

California Consumer Privacy Act (CCPA/CPRA) Rights

For corporate allocators, startup partners, and business users operating within California:

  • Right to Know & Access: You have the right to request a disclosure of the specific pieces of business data we have collected and stored on our secure cPanel server database lines.
  • Right to Delete: You maintain an absolute right to request the permanent removal of your email, password tokens, and form history from our active servers.
  • Right to Opt-Out of Sharing/Targeted Advertising: Because we maintain a pure, non-monetized technology play, we do not engage in cross-context behavioral advertising.
  • Non-Discrimination: We will never deny sandbox access or degrade engine performance if you choose to exercise any of your statutory consumer privacy rights.

Data Security & Multi-State Compliance Operations

  • Children’s Privacy (COPPA): Our Website and the RGaze Early Access Demo are strictly engineered for B2B enterprise applications and business-to-business networking. We do not knowingly collect any data from individuals under the age of 13.
  • Secure Infrastructure Storage: All US form submissions are handled using industry-standard transport layer security (TLS) encryption at the network edge before processing, ensuring complete protection against unauthorized interception or credential leaks.

5.2 United Kingdom (UK GDPR) Compliance

For investors, retail SMEs, and white-label partners accessing our platform from the United Kingdom:

  • Lawful Basis for Processing: We process your name, company, and corporate email under Article 6(1)(b) (Performance of a Contract) to transmit your Early Access Link and automated password tokens, and Article 6(1)(f) (Legitimate Interests) to secure our sandbox testing environment.
  • Data Protection Officer (DPO): All UK data requests, access queries, or "Right to be Forgotten" erasure demands are routed directly to our secure internal infrastructure and processed under strict Information Commissioner's Office (ICO) guidelines.

5.3 Australia (Privacy Act 1988 & APPs) Compliance

For digital commerce networks and brand allocators operating within Australia:

  • Australian Privacy Principles (APPs): We manage all personal and corporate metadata in strict compliance with the 13 APPs.
  • Direct Marketing & Opt-In: Form entries are strictly utilized to provision your requested sandbox credentials. We do not use your corporate emails for unsolicited marketing unless you explicitly opt in via our partnership fields.
  • Local Governance Data Gate: All qualitative store-floor customer journey insights are structurally isolated from consumer PII to meet absolute cross-border privacy boundaries.

5.4 New Zealand (Privacy Act 2020) Compliance

For enterprise partners and retail networks operating within New Zealand:

  • Information Privacy Principles (IPPs): In accordance with the 13 IPPs established under New Zealand law, we collect personal data directly from you for a lawful, specified purpose connected with the onboarding of the RGaze Demo.
  • Cross-Border Data Protection (Principle 12): Before personal information is transferred outside of New Zealand to our central infrastructure, we ensure that the recipient cloud environments provide comparable data protection safeguards to NZ privacy standards.
  • Breach Notification: We maintain an automated logging system on our cPanel server database lines to satisfy statutory requirements for immediate notification to the NZ Privacy Commissioner in the unlikely event of a material data privacy leak.

5.5 European Union (EU GDPR) Compliance

For investors, retail SMEs, and white-label partners accessing our platform from the European Economic Area (EEA):

  • Data Controller: SYNCgaze operates as the data controller for information collected via form fields on syncgaze.com.
  • Lawful Basis for Processing: We process your corporate email, name, and company credentials under Article 6(1)(b) (Performance of a Contract) to deliver your requested Early Access Link, and Article 6(1)(f) (Legitimate Interests) to secure our software sandbox from unauthorized exploitation.
  • EU Ecodesign (ESPR) Alignment: Any sustainability telemetry or reverse-logistics data track handled by our underlying RGaze engine is processed under strict anonymity protocols to fulfill upcoming European compliance data structures.

5.6 China (PIPL) Compliance

For enterprise partners and retail networks operating within the People's Republic of China:

  • Strict Purpose Minimization: We collect only the minimum required dataset (Name, Company, Corporate Email) strictly necessary to transmit your automated RGaze Demo credentials.
  • Cross-Border Data Transfer Governance: Personal information collected via our interface is routed securely to our central infrastructure. In accordance with PIPL requirements, we implement robust encryption protocols at the network edge before data leaves local jurisdictions.
  • Right to Withdraw Consent: Chinese users maintain an absolute statutory right to revoke consent for persistent cookie storage and request immediate deactivation of their sandbox access passwords.

5.7 India (DPDP Act, 2023) Compliance

For digital commerce networks and startup partners utilizing our systems within India:

  • Data Fiduciary Duty: SYNCgaze acts as a Data Fiduciary under the DPDP Act. We deploy rigorous technical safeguards on our cPanel server database lines to prevent any unauthorized data breaches or credential leaks.
  • Itemized Notice & Consent: By entering your business details into our Early Access registration form, you provide unambiguous, affirmative consent for us to process your corporate email strictly for partnership onboarding and password token authentication.
  • Right to Correction and Erasure: Indian data principals have the direct right to demand the immediate correction of inaccurate business profiles or complete erasure of their session cookie strings from our active servers.

6. Contact Us

If you have questions regarding this Privacy Policy, your stored token data, or wish to request immediate erasure of your credentials from our database, please email our Privacy Officer at privacy@syncgaze.com