Purpose (section link)

Syncora's products are business software. They are not a public hosting platform for arbitrary content. This policy protects customers, their end users, and the services themselves. It is a condition of access.

What we expect (section link)

Use the services only for a lawful business purpose.
Keep account credentials to the people they were issued to.
Respect the privacy and intellectual property of others.
Follow the plan limits (users, storage, API calls) published for your subscription.
Tell us if you find a security weakness, using the route on the Security page, and do not exploit it.

Prohibited conduct (section link)

You must not do, or attempt, or help anyone else to do, any of the following. A good-faith security test that we have agreed in writing is not a breach.

Unlawful or harmful use (section link)

Break criminal or civil law that applies to you or to the processing, including the PDPA where it applies to data you upload.
Upload or transmit content that is defamatory, obscene, or that incites violence or hatred.
Upload personal data you do not have a lawful basis to share with us, or special-category data the product is not designed to hold.
Use a service to send unsolicited bulk email, SMS or messages, or to harvest contact details.
Infringe copyright, trade marks, database rights or other intellectual property. Do not upload content you do not have the right to use.
Use the service for child sexual abuse material or for any sexual content involving a minor. We report that to the authorities. There is no appeal on that point.

Security and interference (section link)

Probe, scan or test the vulnerability of the services, or breach authentication, except under a written test we have agreed.
Introduce malware, ransomware, or any code designed to disrupt or gain unauthorised access.
Overload the service, or bypass rate limits, in a way that degrades it for others. Ordinary use of a published API within your plan is allowed.
Access an account, mailbox or data that is not yours, or let a suspended user keep using the service through another login.
Interfere with another customer's data or tenancy.
Scrape the Site in a way that harms availability, or ignore robots.txt for that purpose. Personal, non-commercial viewing and ordinary search-engine crawling are allowed.

Misrepresentation (section link)

Pretend to be Syncora, a Syncora employee, or another customer.
Misrepresent the origin of content, or remove notices of our rights.
Use the service to build or train a competing model or product by systematic extraction, where your plan does not allow that extraction.

Your responsibility for users (section link)

If you hold the account, you are responsible for your users' activity on it. You will give them these rules, remove access when they leave your organisation, and act on a complaint we pass to you. You will also make sure that Customer Data you upload, including employee data in a HR product, is data you are allowed to give a processor.

Monitoring (section link)

We do not routinely read Customer Data. We may review content or logs where we need to do so to provide support you asked for, to investigate a suspected breach of this policy, to respond to a lawful request, or to keep the service secure. We limit that access to people who need it. We are not obliged to monitor, and we are not liable for a customer's content merely because we host it, except to the extent the law puts a duty on a host and we fail that duty.

Enforcement (section link)

If we believe this policy has been breached we choose a response that fits the risk. Depending on severity, we may:

Ask you to stop and to remove the content, and give you a reasonable time to do so where the harm is not immediate.
Remove or disable the content.
Suspend the affected user or the account, with notice where we can give it without increasing the harm.
Terminate the account for a serious or repeated breach, under the Terms of Service.
Report the activity to the affected customer, to a rights holder, or to a competent authority, including where the law requires a report.
Preserve relevant logs for the investigation and for any legal duty.

We will tell the account contact what we did and why, unless the law forbids it or telling you would compromise an investigation or another person's safety. You may reply with an explanation. We will review a good-faith reply. We do not promise reinstatement where the breach is serious, and fees follow the Refund & Cancellation Policy.

Reporting abuse (section link)

To report abuse of a Syncora service, email legal@syncora.solutions with the subject "Abuse report". Include the URL or account if you have it, a description, and a way for us to reach you. For security vulnerabilities, use the contact on the Security page rather than a public channel. We may ignore reports that contain threats or that are themselves unlawful.

Changes (section link)

We may update this policy by posting a new version and changing the "Last updated" date. The effective date is the date at the top. Continued use after that date is acceptance of the update, except where a mandatory law requires a different form of notice. A material change that affects a paid service is also notified under the Terms of Service.

Contact (section link)

Syncora (Pvt) Ltd, Colombo, Sri Lanka. Email: legal@syncora.solutions. Company registration number: [REG NO].

Acceptable Use Policy

Acceptable Use
Policy