Privacy Policy

This Privacy Policy explains what personal data we collect when you visit synthrun.site (the “Site”), how we handle and protect that information, and your legal rights. Synthrun is operated by Synthrun, Banglore, KA, India.

We are an architecture-first software studio. We conduct architecture audits, fix production stability bottlenecks, maintain open-source tools (Cicada, Context Fence), and publish research. This policy applies across all these activities.

• Contact data you give us: Name, company name, work email, and message details when you email hello@synthrun.site, submit scoping requests, or register for updates.
• Usage data: Anonymized IP addresses, browser user-agent, operating system, referrer URL, pages viewed, and approximate time-on-page.
• Engagement & telemetry data: Scoping notes, ADR documentation, benchmark logs, and runbooks created during active client work — all owned by you.
• Open-source contributions: Code commits, issues, and discussions submitted to Cicada or Context Fence repositories are public under their open-source licenses.
• Job applications: Résumé details and contact information submitted to our careers inbox, retained securely for up to 24 months.

• To respond to your inquiries and schedule initial architecture audit calls.
• To scope, execute, and deliver agreed architecture reviews, ADRs, and runbooks.
• To maintain and improve the performance and reliability of the Site and open tools.
• To send occasional important updates you have explicitly opted into.
• To comply with statutory legal, accounting, and regulatory obligations.

We use a minimal number of first-party cookies and local storage tokens. None track you across other websites or sell your data.

You can disable cookies in your browser settings at any time without impacting your ability to browse the site.

We measure web traffic using privacy-focused Vercel Analytics (first-party, aggregated, no cross-site IDs). We do not install advertising trackers, retargeting pixels, or behavioral advertising cookies.

• Vercel: Hosts our web infrastructure with edge caching, DDoS protection, and transient security logs.
• GitHub: Hosts our public and private code repositories under standard GitHub security terms.
• Email providers: Encrypted in-transit transport for client communication and invoices.

We never sell, rent, or trade personal data. We only share information when strictly required: (a) with trusted infrastructure providers bound by confidentiality; (b) with your designated team members during active engagements; or (c) when required by applicable law or enforceable legal process.

Synthrun operates remotely in India. If you access our services from abroad, your data may be processed on servers in India and distributed global edge locations (via Vercel). We ensure appropriate contractual safeguards for cross-border transfers.

We retain information only as long as necessary: contact inquiries are kept for 24 months; engagement artifacts (ADRs, contracts, runbooks) are retained for the duration of our relationship plus standard legal/tax audit periods (typically 7 years); public open-source contributions remain indefinitely in repository history.

Regardless of geography (including EU/EEA, UK, and California residents), you have the right to request access to your personal data, request corrections, request deletion, restrict processing, or receive a portable export. To exercise any right, email hello@synthrun.site with the subject “Privacy Request”.

We employ industry-standard security safeguards: strict HTTPS/TLS encrypted transport, least-privilege role-based access controls, multi-factor authentication across all developer accounts, and audited cloud infrastructure.

Our Site and Services are intended for working professionals and engineering teams. We do not knowingly collect personal data from individuals under the age of 16. If you believe such data has been collected, contact us for immediate deletion.

For job applicants, we collect résumé details, contact information, interview notes, and identity/education documents submitted during the hiring process, retained securely for up to 24 months (longer only with your consent or where legally required). For employees, we collect and process data necessary for employment: identity and statutory documents (PAN, Aadhaar/passport, address proof), bank details, salary and tax records, and background verification details — processed solely for payroll, statutory compliance, and administration.

Employment data is governed by the employee's signed Employment Agreement, Confidentiality Agreement, IP Assignment, and Company policies (including the IT & Information Security Policy and Client Data & Access Policy).

Employees: Upon termination of employment — for any reason — all Company and client system access is revoked immediately via our Access Revocation Checklist: company email is disabled, SSO/tool access is removed, client credentials are recovered and rotated, and any personal (BYOD) devices are verified wiped of Company and client data, with a signed deletion attestation required before Full & Final settlement. Employee records are then retained only for statutory periods (employment and tax records, typically up to 7 years as required under Indian law) and securely deleted thereafter.

Clients: On termination or expiry of an engagement, client Confidential Information, credentials, and project data are returned or deleted per the Master Services Agreement (with a certificate of deletion on request), except copies legally required to be retained (e.g., invoices and audit records).

In accordance with India's Digital Personal Data Protection Act, 2023, you may withdraw consent, exercise your rights of access, correction, and erasure, or raise a privacy grievance by contacting our Grievance Officer at hello@synthrun.site. We acknowledge grievances within 72 hours and aim to resolve them within 30 days. If you are unsatisfied, you may escalate to the Data Protection Board of India.

We may update this Privacy Policy to reflect changes in our operational or legal obligations. Any revisions will be published here with an updated revision date at the top of the page.