Privacy

When someone opens a SYNQRO profile, we add one to a running total. There are three totals, and they belong to the profile, not to any visitor:

• Profile views
• Link clicks
• Contact saves — when someone downloads the contact card
• Presses of the profile’s one main button, if its owner has set one up

We also keep a daily figure for each of these, so a profile owner can see a simple trend over time.

A profile owner can create a campaign — their own label for an event or a period of time, such as a conference they are attending. It has its own link and QR code, and opening one takes you to the owner’s ordinary profile.

When you arrive through a campaign link, we add one to that campaign’s count of visits. That is the whole of it. A campaign is the owner’s label for a context, not a label for you: it records that a visit happened, never who made it.

Everything in the list above still applies. No cookie is set, nothing is stored in your browser, and no identifier is created — the campaign code is in the address bar and nowhere else, and it is gone when you close the tab. It does not follow you to another profile, and it cannot be used to recognise you on a later visit.

This is the longer list, and it is the important one. SYNQRO analytics does not collect, store, derive, or infer:

• Any record of an individual visit
• IP addresses — we do not store them, and we do not hash or shorten them either
• Visitor identifiers of any kind
• Session identifiers used for analytics
• Device or browser fingerprints
• Cross-site or advertising identifiers
• Your location
• Analytics cookies, or identifiers stored in your browser

There is nowhere in our database to put any of it. The tables that hold these counts have no column that could describe a person, which is why this is a statement about how the system is built rather than a promise about how we behave.

This list is about analytics. Contact Exchange has its own, separate protection against abuse, described below.

Best-effort, not deduplicated. Because we do not recognise anyone, we cannot tell a returning visitor from a new one: opening a profile twice counts twice, and refreshing counts again. Some views are not counted at all — a browser extension that blocks trackers will block ours, and it is welcome to.

These numbers are a rough sense of activity. They are not visitor counts, and we do not present them as such anywhere.

• Daily trend data is kept for a maximum of 90 UTC daily buckets — today and the 89 days before it. Older days are deleted, not archived, by a job that runs every night.
• Lifetime aggregate totals remain while the profile and its account exist.
• Deleting an account deletes its analytics, along with the profile itself.

Some SYNQRO profiles show a Contact Exchange form. It is entirely voluntary: the profile works, and the card and QR code work, whether or not you use it.

If you choose to use it, you provide your name, and an email address or a phone number so the owner can reply. You may also add a company and a message. Nothing else is collected, and you must tick a box confirming you want these details shared before anything is sent.

Purpose. These details are shared with that profile owner so they can respond to you or contact you. That is the only purpose.

• This is not marketing consent. Ticking the box does not subscribe you to a newsletter, promotional email, or SMS marketing, and SYNQRO does not pass your details to any third-party marketer. SYNQRO does not send you anything at all.
• No visitor identity is created. We record no IP address, no device fingerprint, no cookie, and no other identifier alongside what you typed. Sharing your details does not link you to the anonymous counts described above, and does not identify you on any other profile you visit.
• We record when you agreed, and which version of this notice was in force when you did — not a copy of the wording you saw, which is this page.
• The profile owner controls what happens next. They can read your details, label them, and delete them. Deleting is permanent.
• The owner can add their own private notes about you. After you share your details, the profile owner may record where they met you, why they think you are interested, a note of their own, when they last contacted you, and a date to follow you up. They write this; you do not, and neither do we. It is their own record of a conversation you had, in their own words.
• None of that is shown publicly. Owner-added notes and follow-up dates appear only in the owner’s own signed-in dashboard. They are never displayed on a public profile, never shared with another owner, and never used to advertise to you or to anyone else. SYNQRO still sends you nothing.
• They can also download the details shared with them as a spreadsheet, to work with outside SYNQRO — including the private notes and follow-up dates they added themselves. We generate that file when they ask for it and keep no copy of it. Once it is on their device it is theirs to look after, and deleting a lead here does not reach a copy they already downloaded.
• If you shared your details through a campaign link, the owner sees which of their own campaigns you arrived through — their label for an event, and nothing about you.
• Deleting the profile or the account deletes the details you shared with it, along with everything else that profile held — including the owner’s own notes about you. If the owner deletes you as a lead, their notes about you go with you.
• Your details are never copied into billing or payment records.

How long they are kept. Details you share are kept for 24 months after the profile owner last updated them, and are then deleted automatically, together with the owner’s notes about you. The owner updates them by changing their status or labels, by adding to or changing their notes about you, by recording when they last contacted you, or by scheduling, completing or clearing a follow-up. Simply opening them does not count.

• If the owner has scheduled a follow-up with you, your details are kept until at least that date. A follow-up can be set no more than 24 months ahead.
• The period is the same on every SYNQRO plan, and it does not start, shorten or stop because the owner’s subscription changes.
• The owner can see the date your details are kept until, and their dashboard points it out in the last 30 days.
• The owner can delete your details sooner at any time, and deleting their profile or account deletes them straight away.
• Automatic deletion runs once a day, so details can remain for a short time after that date. Copies in our hosting provider’s backups are not removed early; they disappear as those backups expire.

To ask a profile owner to delete details you shared with them, contact them directly using the details on their profile. You can also contact NEXFORA at the address below.

A public form that anyone can use attracts automated spam. To keep Contact Exchange useful for the people it is meant for, it is protected in a few ways — and none of them applies to simply opening a profile.

• Cloudflare Turnstile checks that a person is using the form. It is loaded only when you open or use Contact Exchange; viewing a profile, saving a contact, following a link or scanning a card does not load it. To tell people apart from automated abuse, Cloudflare may process network and device signals from your browser, such as your IP address and characteristics of your browser. Cloudflare does this as a separate service under its own privacy policy, and we do not control how long Cloudflare keeps that information.
• We do not store your IP address for this protection, and we do not send it to Cloudflare ourselves.
• We briefly keep a daily-rotating pseudonymous network digest. To limit how often one network can use the form, our server turns the network you connect from into a short one-way code, using a secret key that changes every day. That code is kept for no more than about 20 minutes, is not stored with the details you share, and is not used for analytics. Because it is derived from your network it is pseudonymous rather than anonymous, which is why it is deleted so quickly.
• We keep hourly totals of what the protection did — for example, how many submissions were accepted or refused. These totals contain no visitor identifier and none of the details you shared, and are kept for 90 days.
• If the same email address or phone number is shared with the same profile again within 24 hours, we do not store a second copy.
• SYNQRO does not create a fingerprint of your device, and sets no cookie for this protection.

A published profile shows what its owner chose to put on it — their name, and whichever contact details and links they added and made visible. A published page is public: anyone with the address, the card, or the QR code can open it, and it can be copied by anyone who does. Owners control what appears and can unpublish at any time, which stops the page, the card, and the QR code from showing it.

Links on a profile lead to destinations its owner chose. We do not review or endorse them.

• Your account stays until you delete it. We do not delete accounts for being inactive.
• Deleting your account takes effect straight away. Your profile, links, photo, analytics, campaigns, and every lead and note in your inbox are deleted with it.
• A retired profile link or card code is never given to anyone else. To guarantee that, we permanently keep a one-way fingerprint of each one. It is not stored with your account and cannot be read back as the address, although someone who already knows an address could check whether it was once used.
• Records of what happened to a physical card — such as its activation, transfer or replacement — and billing records are kept after an account is deleted, without your name or email, for fraud investigation and accounting. How long each is kept is being confirmed with our accountant, and will be stated here.
• The history of profile link changes, which limits how often a profile link can change, is deleted after 35 days.

SYNQRO is operated by NEXFORA and follows the Philippines Data Privacy Act of 2012 (RA 10173) and the guidance of the National Privacy Commission.

For questions about this notice, or to ask about data held about you, contact NEXFORA at privacy@nexforatech.com.