Privacy Statement

ZyncApps builds cloud software for businesses. Our flagship product, ZyncLedger, is an online accounting and operations workspace; we may offer additional ZyncApps products or sites over time. In this Privacy Statement, "we," "us," and "our" mean ZyncApps as the organization responsible for the processing described here, unless a separate notice says otherwise for a specific offering.

ZyncLedger is designed for organizations: a company or other entity creates a tenant (workspace), invites users, and stores business records there. This statement applies when you browse ZyncApps properties, request information, create an account, sign in, or otherwise use our services, including access via zyncledger.lk and hostnames we use to deliver each application.

Depending on your relationship with us, another party may also decide how certain data is used (for example, your employer as the organization that owns the tenant, or an accountant granted access). Where that applies, you may need to contact them for requests about data they control. We remain responsible for processing described here when we provide the ZyncApps service under your organization's subscription.

By continuing to use ZyncApps services after we post updates, you acknowledge the practices in the version marked at the top of this page, except where a stricter rule applies under law.

We process information that falls into a few broad buckets:

• Subscription and profile details. Names, email addresses, phone numbers, organization name, billing contacts, and credentials or identifiers used to authenticate you.
• Financial and operational content you enter. Examples include invoices, bills, inventory movements, banking activity you record, customer and supplier master data, attachments, and exports you generate. These are essentially the records needed to run accounting and related workflows in the product.
• Technical and usage signals. Server and application logs (such as request timestamps and errors), events related to security, approximate device or browser characteristics, and product analytics that help us understand feature adoption and reliability. Network identifiers such as IP addresses may be included.
• Support and communications. Messages you send to us, feedback, and metadata needed to respond to tickets.

Optional Google sign in and Google Drive features

If you connect a Google account (for example to authenticate or to send exports to Google Drive), Google's OAuth consent screen defines what we can access. We use tokens and profile details only to operate the integration you enabled, such as placing a file you chose to upload. You can disconnect the integration in product settings. For how Google handles data, see Google's privacy policy.

• Run and improve our products. Hosting your workspace (for example your ZyncLedger tenant), syncing changes, generating reports, and fixing defects or performance issues.
• Keep accounts safe. Detecting abuse, investigating suspicious sign in activity, and enforcing rate limits or blocks where needed.
• Reach you about the service. Operational email or notices inside the application, such as billing, security alerts, and substantive changes to this statement or the service. We do not use these channels for cold marketing unless you have agreed to it where required.
• Understand usage in aggregate. Measuring which areas of the app are used so we can prioritize roadmap work, always subject to our commitment not to sell personal data as described below.
• Meet legal duties. Complying with tax, accounting, or court obligations, and defending legal claims when necessary.

We do not sell your personal information.

We disclose information only in limited situations, for example:

• Infrastructure and processing vendors. Partners that host servers, send email, process payments, or provide monitoring, under contracts that restrict how they use customer data.
• Google. When you turn on a Google feature, Google receives or stores data according to your Google account and their terms.
• Legal and safety. When we believe disclosure is required by law, regulation, or a valid legal process, or to protect the rights and safety of customers and the public.
• Business structure changes. If we merge, are acquired, or sell assets, your information may transfer as part of that transaction; we will notify you where practical before your data is governed by a materially different policy.
• With your direction.When you ask us to share something, or when your organization's administrators configure integrations you use.

We apply administrative, technical, and organizational measures appropriate to a cloud business system, including:

• Encrypting traffic between your browser and our service where HTTPS is used.
• Restricting staff access to production systems to those who need it for their role.
• Keeping backups and recovery procedures so tenants can be restored after incidents.
• Reviewing vendors and monitoring for vulnerabilities as part of ongoing operations.

No online service can promise perfect security. If we learn of a breach that affects you, we will follow applicable notification rules and take steps to reduce harm.

Rights vary by country and state. Generally, you can ask to access, correct, or delete personal information we hold about you as an individual user, object to certain processing, or ask for a portable copy where the law provides for it.

Much profile and business data can be updated directly inside ZyncLedger. For requests we must handle manually, especially deletion of an entire tenant, contact us using the details at the end of this page. We may need to verify your identity and, for requests that cover a whole tenant, confirm you are authorized on behalf of the organization.

Where marketing is optional, you can stop it through unsubscribe links or by writing to us. We may still send essential service messages.

We keep tenant data while the subscription is active and for a short period after you cancel, so you can reactivate or retrieve exports.

• After cancellation, active databases may be removed within roughly thirty days unless a longer hold is agreed.
• Backup snapshots can persist longer (on the order of weeks to a few months) before aging out.
• Some records must be retained longer when accounting, tax, or litigation rules require it.

Exact timelines can depend on your plan and legal context; ask us if you need a written schedule for data deletion for procurement.

We use cookies and similar storage on websites and in the web application. For example, we use them to keep you signed in, remember preferences, and measure basic traffic. You can block cookies that are not essential in the browser, but parts of the experience may not work until you allow what is strictly necessary for login and security.

Our service may be hosted or backed up in more than one country. Where we move personal data across borders, we use safeguards that match the requirements that apply to us, such as standard contractual clauses or other mechanisms accepted in your region, in addition to the practices described here.

Privacy laws are not identical worldwide. Residents of the European Economic Area, the United Kingdom, Switzerland, and several U.S. states (among others) may have extra notices, bases for processing, or complaint paths. Nothing in this statement limits rights granted to you by the law that actually applies.

If you believe local law gives you a remedy we have not addressed, email or call us and we will work through the request or point you to the right channel (for example a supervisory authority in the EU or UK where that is appropriate).

We revise this page when our practices or services change. The "Last updated" line shows the latest revision. If a change is significant, we will also notify administrators or affected users by email or with a message inside the product when that is practical.

Questions about privacy or this statement for ZyncApps:

Email: support@zyncapps.com

Phone: 0766216440