Privacy Policy

1. Data controller

Name: SC Pozitron Grup SRL
Tax ID (CUI): RO15663311
Registered address: Str. Spătarul Nicolae Milescu, Nr. 19, Sector 2, București
Email: synq@pozitron.ro

2. What data we collect

Account data: name, email, password (stored encrypted), and — for therapists — specialty and accreditation number.
SYNQ session data: the descriptive text of your state (if you choose to write one, rather than just pick icons), the computed scores (anxiety, sync), the audio track used, optional feedback.
Billing and transaction data for SYNQ PRO: name, address, order ID, amount, payment status (processed by NETOPIA — card data is never stored or seen by us).
Technical data: IP address (also used to enforce the daily free-session limit), browser type, access log.

3. Legal bases

Contract performance — providing SYNQ sessions and, for PRO, paid access.
Legal obligations — invoicing, tax reporting.
Legitimate interest — abuse prevention (free-session limiting), service improvement.
Consent — for data voluntarily entered in the free-text field of a session.

4. Session data & patient-therapist relationship

If you're a patient registered with a therapist using SYNQ, your session history (scores, date, duration) is visible to your assigned therapist, solely for therapeutic monitoring purposes. Free text entered during a session is treated as sensitive data and is not used for any purpose other than generating that session's audio profile.

5. Who we share data with

The NETOPIA payment processor, for processing SYNQ PRO payments; the hosting provider, for the Platform's technical operation; competent authorities, upon lawful request. We do not sell or rent User data to third parties for marketing purposes.

6. Retention period

Order and billing data is kept for the period required by tax legislation (generally 7 years). Session history is kept as long as the account is active and can be deleted upon request.

7. Your rights

Right of access, rectification and erasure of your data.
Right to restrict processing and to data portability.
Right to object to processing based on legitimate interest.
Right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP).

To exercise these rights, write to synq@pozitron.ro.

8. Security

Communications are encrypted (HTTPS/TLS where the hosting server is configured accordingly), passwords are stored encrypted (bcrypt hash), and access to order and session data is restricted to authorized personnel.