Privacy Notice

Last Updated: April 11, 2026

This Privacy Notice explains how Zyncoraa collects, uses, and protects data.

1. Our Role in Data Processing

Under global data protection laws (such as GDPR), Zyncoraa acts in two capacities:

  • Data Controller: For the information you (the Event Organizer) provide directly to us to create and manage your Zyncoraa account.
  • Data Processor: For the information regarding your event attendees. The Event Organizer remains the Data Controller for all attendee data.

2. Information We Collect

  • From Organizers: When you register for an account, we collect your name, email address, company/organization name, and phone number.
  • From Attendees: We process the attendee data supplied by the Organizer or inputted via our public registration forms. This is strictly limited to the data required to issue tickets: attendee names, email addresses, payment status (as declared by the Organizer), and check-in scan timestamps.

3. Payment Data

We do not process or store credit card information.

  • Organizer SaaS Fees: All software fees paid to Zyncoraa are processed securely by our Merchant of Record, Paddle.com. We do not have access to your full payment details.
  • Attendee Ticket Sales: Zyncoraa does not handle ticket sales. We do not collect or store any financial data from event attendees.

4. How We Use the Data

We use the collected data solely to:

  • Provide, maintain, and improve the Zyncoraa platform.
  • Send automated QR ticket emails to attendees on behalf of the Organizer.
  • Provide Organizers with real-time check-in analytics and post-event CSV exports.
  • Communicate with Organizers regarding account updates, support, and billing.

5. Data Sharing and Security

We do not sell, rent, or trade your data or your attendees' data to third parties. Data is only shared with trusted infrastructure partners (such as our email delivery service, Resend) strictly for the purpose of operating the Service. We implement industry-standard security measures to protect against unauthorized access or data breaches.