Privacy Policy

Bowrand Inc., a corporation incorporated under the laws of Alberta, Canada, together with its affiliates, subsidiaries, and related entities ("Bowrand," "we," "us," or "our"), is committed to protecting the privacy and security of the data entrusted to us. This Privacy Policy ("Policy") describes our practices regarding the collection, use, processing, disclosure, and protection of information in connection with your use of our proprietary AI-assistant and CRM SaaS platform, Syncolink, and all associated software, websites, services, and applications (collectively, the "Service"), operated on the authorized domains syncolink.net and bowrand.com.

This Policy is designed to comply with global privacy regulations, including Canada's PIPEDA and Alberta's PIPA, the GDPR (EEA/UK), and U.S. federal and state laws including the CCPA/CPRA.

• Provide, Maintain, and Improve the Service: Operate the Service, fulfill contracts, process transactions, manage accounts, support customers, and improve features (including training and evaluation of AI features using de-identified/aggregated data where feasible).
• Security and Fraud Prevention: Verify accounts; detect, prevent, and respond to security incidents and misuse.
• Communications: Transactional notices, updates, support, surveys, and marketing (you can opt out of marketing).
• Legal Compliance and Protection of Rights: Comply with laws/requests; enforce terms; protect our users, the public, and our rights.
• Analytics and Business Development: Create anonymized/aggregated statistics to understand and improve the Service.

• Service Providers and Subprocessors: Vendors under contract who process data on our instructions and consistent with this Policy and applicable law. Access is limited and governed by confidentiality and data protection obligations.
• Legal and Safety: As required by law or to protect rights and safety.
• Business Transfers: In connection with corporate transactions, subject to this Policy and applicable law.
• With Your Consent: Where you direct us to share.

We retain Personal Data for as long as necessary for the purposes described, including during your relationship with us and for a reasonable period afterward to meet legal, tax, and business obligations. Afterward, we delete or anonymize it; if deletion is not immediately possible, we securely store and isolate it until deletion is possible.

Where we act as a processor for organizational customers, we retain end-customer data according to the customer's instructions and our agreement.

We implement appropriate technical, administrative, and physical safeguards, including encryption in transit and at rest where applicable, role-based access controls, least-privilege principles, audit logging, and regular security reviews. Access to Personal Data is limited to authorized personnel with a legitimate need and subject to confidentiality obligations.

If we become aware of a data incident affecting your Personal Data, we will notify you consistent with applicable law and our contractual commitments.

We use:

• Essential Cookies (required for the Service)
• Performance/Analytics, Functionality, and Targeting/Advertising cookies

Most browsers let you control cookies; disabling some may impact functionality.

The Service is hosted and operated in Canada, and data may be processed in other countries where our providers operate. By using the Service, you consent to these transfers. Where required, we use Standard Contractual Clauses or other lawful transfer mechanisms and take reasonable steps to ensure protection consistent with this Policy.

Rights vary by jurisdiction and may include access, correction, deletion, restriction/objection, portability, and complaint rights.

The Service is not directed to children under 18, and we do not knowingly collect their data. If discovered, we will delete it.

We may modify this Policy at any time. Material changes will be posted with an updated date and, where required, notified through additional channels. Continued use indicates acceptance.

To the extent our Service accesses Google user data via Google APIs:

• We comply with the Google API Services User Data Policy, including Limited Use.
• Google-derived data is used only to provide or improve user-facing features you request (e.g., sign-in and account linking), not for serving ads, profiling, or unrelated purposes.
• We do not allow humans to read Google-derived data except (i) with your explicit consent, (ii) for security or compliance (e.g., investigating abuse), (iii) to comply with applicable law, or (iv) for internal operations when the data has been aggregated and de-identified.
• We do not transfer Google-derived data except as permitted under Section 4 and the Google API Services User Data Policy.
• You may revoke our access at any time via your Google Account settings (see Section 12).

You may request deletion of your Syncolink account and associated Personal Data by contacting support@bowrand.com from your registered email or via in-product settings where available. After verification, we will delete or de-identify Personal Data unless retention is required by law or to protect our rights. Where we act as processor for an organizational customer, we delete or return data as instructed by that customer.