Skip to content

Privacy Policy

Your privacy is fundamental to how we build and operate EcoSync. Learn how we protect and handle your data.

Last updated: July 2026
Built with GDPR & CCPA in mind

Our Privacy Principles

The core values that guide our data practices

Data Minimization

We only collect data necessary for service functionality

Purpose Limitation

Data is used only for stated purposes

Transparency

Clear communication about data practices

Security First

Industry-standard encryption and protection

What Information We Collect

We collect different types of information to provide and improve our services

Personal Information

  • Name and email address
  • Company information (optional)
  • Account role and organization membership
  • Profile picture (optional)

Technical Data

  • Infrastructure metrics
  • System performance data
  • Usage analytics
  • API logs and requests
  • Error and diagnostic data

Usage Information

  • Feature usage patterns
  • Dashboard interactions
  • Time spent in application
  • Navigation paths
  • Preference settings

Device Data

  • IP address and location
  • Browser type and version
  • Operating system
  • Device identifiers
  • Screen resolution

How We Use Your Information

Primary Uses

Service Delivery

Provide infrastructure optimization and monitoring services

Performance Analytics

Generate insights and recommendations for your infrastructure

Account Management

Manage your account, billing, and support requests

We Never

Sell Your Data

We never sell personal information to third parties

Unauthorized Sharing

Share personal data outside the processors listed in Data Sharing, except as required by law

Excessive Collection

Collect more data than necessary for our services

Data Sharing & Subprocessors

We use the following service providers to operate EcoSync. We do not sell your personal information.

Vercel

Application hosting and edge delivery

OpenAI

Optional AI features (chat, summaries, forecasts). Prompt content and selected FinOps metrics may be sent when you use those features.

Resend

Transactional email (verification, password reset, alerts, reports)

Razorpay

Payment processing for subscriptions and purchases

Your Privacy Rights

You have full control over your personal information

Access

View all personal data we hold about you

Email support@ecosync.pro

Rectification

Correct inaccurate or incomplete information

Open account settings

Erasure

Request deletion of your personal data

Delete account in settings

Portability

Request an export of your data via support

Email support@ecosync.pro

Security & Protection

How we keep your data safe and secure

TLS encryption for data in transit
AES-256 field-level encryption for secrets (TOTP seeds, SSO client secrets, cloud credentials)
Multi-factor authentication
Security controls aligned with common enterprise practices
Built with GDPR and CCPA requirements in mind
Database backups and recovery procedures

Cookies & Tracking

Essential Cookies

Required for basic functionality and security

Always Active

Analytics Cookies

Help us understand how you use our service

Optional

Preference Cookies

Remember your settings and preferences

Optional

Data Retention & Deletion

Active Accounts

Data retained while account is active

Inactive Accounts

Retained until you delete your account or request deletion. Organizations may configure shorter retention for audit logs and usage data.

Account Deletion

Data permanently deleted within 30 days

Privacy Questions?

Contact us for privacy-related inquiries

Email

support@ecosync.pro

We aim to respond within a few business days

In-app support

Dashboard → Support

For account holders

This Privacy Policy is effective as of August 27, 2025

GDPR-aware
CCPA-aware
Enterprise security practices