Privacy Policy

Synk Corp (“Synk”, “we”, “us”) is a software development company based in Kathmandu, Nepal. We design and build websites, mobile apps, e-commerce and billing systems, AI solutions and business automation.

This policy explains how we handle personal information when you:

• visit www.synkcorp.com (the “Website”);
• contact us through the project inquiry form, email, phone, WhatsApp or social media;
• become a client, or work with us as a representative of a client, partner or supplier.

For these activities, Synk decides why and how your information is used, so we are responsible for it (a “data controller”). When we build or run software for a client and handle their customers’ or users’ data, the client is responsible for that data and we act on their instructions. Section 7 explains that role.

Information you give us

• Project inquiries. Your name, email address, phone number (optional), company (optional), the services you are interested in, a description of your project, an indicative budget (which you may choose not to disclose) and your timeline.
• Conversations. What you send us by email, phone, WhatsApp, Instagram, LinkedIn or in meetings, including any files you share.
• Client and billing details. Names and contact details of your team, your business name and address, PAN/VAT number and payment records. Payments are made by bank transfer or through payment providers such as eSewa, Khalti or Fonepay. We do not receive or store your full card or wallet credentials.
• Project materials. Content, brand assets, credentials and access you give us so we can build, deploy or maintain your project.

Information collected automatically

• Advertising and measurement data. The Website uses the Meta Pixel, which records page views and related technical data such as your IP address, browser and device type, the pages you visit, the referring page and the time of your visit. See section 4.
• Server logs. Our hosting providers automatically log basic request data (IP address, browser, time, page requested) to keep the Website running and secure.

Information from other sources

We may receive your details from someone who refers you to us, or from public business sources such as your company website or LinkedIn profile when you or your business contact us.

We use personal information only where we have a valid reason to do so:

• To reply to your inquiry and prepare a proposal or quotation, because you have asked us to.
• To deliver our services: planning, designing, building, testing, launching and supporting your project, as required by our contract with you.
• To invoice, keep accounts and pay taxes, because the law requires it.
• To run, secure and improve the Website and understand which pages are useful, in our legitimate interest.
• To measure and improve our advertising on Meta platforms (Facebook and Instagram), based on your consent where the law requires it.
• To send occasional updates about our work or services to existing clients and contacts. You can opt out at any time.
• To protect our rights, prevent fraud and misuse, keep evidence of agreements and approvals, and handle legal claims or disputes.

We do not sell your personal information, and we do not use it to make automated decisions that have legal or similarly significant effects on you.

The Website uses the Meta Pixel, provided by Meta Platforms, Inc. It sets cookies and similar identifiers so we can measure visits from our Facebook and Instagram ads and show relevant ads to people who have visited the Website. Meta handles this data under its own privacy policy.

You can limit this tracking by:

• blocking or deleting cookies in your browser settings;
• changing your Meta ad preferences;
• using a browser or extension that blocks third-party trackers.

The Website still works if you block these cookies. If we add other analytics or advertising tools, we will update this section before they go live.

We share personal information only as needed, and only with:

• Service providers that help us run our business, such as Formspree (which delivers inquiry form submissions to us), Meta (the Meta Pixel and WhatsApp), our email and file-storage providers, cloud hosting providers such as Amazon Web Services and DigitalOcean, and banks or payment providers. They may use the information only to provide their service to us.
• Professional advisers such as lawyers, auditors and accountants, under a duty of confidentiality.
• Authorities when the law, a court order or a lawful government request requires it, or to protect the rights, safety or property of Synk, our clients or others.
• A successor business if Synk is involved in a merger, acquisition or sale of assets. This policy would continue to protect your information.

We are based in Nepal, but some of our service providers store or process data in other countries, including the United States, the European Union and Singapore. When information leaves Nepal, we use reputable providers with appropriate security and contractual safeguards. For clients in the European Union or United Kingdom, we can enter into standard contractual clauses or other approved transfer mechanisms on request.

When we build, host or maintain a website, app or system for a client, we may have access to personal information of the client’s customers, students, employees or users (“Client Data”). For Client Data:

• the client is the controller and decides how it is collected and used, under the client’s own privacy policy;
• we process it only to provide the agreed services and on the client’s documented instructions;
• only team members who need access for the project receive it, under confidentiality obligations;
• we apply the security measures in section 10;
• we help the client respond to requests from their users and notify the client without undue delay if we become aware of a breach affecting Client Data;
• when the engagement ends, we return or delete Client Data as the client instructs, unless the law requires us to keep it.

The client is responsible for having a lawful basis and any consents needed, including parental consent for products used by children. If you are a user of a product we built for a client, please contact that client about your data. A data processing agreement is available to clients on request.

We use AI tools to help with parts of our work, such as writing and reviewing code. We do not enter Client Data or confidential client information into AI services that use inputs to train their models, unless the client has agreed to it.

AI features we build into client products (for example chatbots) may send user messages to third-party AI model providers. We tell clients which providers are involved so they can describe this in their own privacy policies.

• Inquiries that do not become projects: up to 24 months after our last contact, so we have the history if you come back to us.
• Client project and contract records: for the length of the engagement and afterwards for as long as needed to support the work, resolve disputes and meet legal limitation periods.
• Invoices and accounting records: for the period required by Nepal’s tax and accounting laws.
• Marketing contacts: until you unsubscribe or ask us to stop.

We protect information with access controls, the principle of least privilege, two-factor authentication on our key accounts, encrypted connections (HTTPS/TLS), and reputable hosting providers. Credentials you share with us for a project are kept in access-restricted storage and are only used for that project.

No system is perfectly secure. If a breach is likely to put your rights at risk, we will notify you and any relevant authority as required by law.

Under Nepal’s Individual Privacy Act, 2075 (2018), and, where they apply to you, laws such as the EU and UK General Data Protection Regulation, you can ask us to:

• confirm whether we hold your information and give you a copy;
• correct information that is inaccurate or incomplete;
• delete your information where we no longer have a reason to keep it;
• restrict or object to certain uses, including direct marketing;
• give you your information in a portable format;
• withdraw your consent where we rely on it, without affecting what was done before.

Email info@synkcorp.com to make a request. We may ask you to confirm your identity, and we will respond within 30 days. If you are not satisfied with our answer, you can complain to the relevant authority in your country.

Our Website and services are for businesses and adults. We do not knowingly collect personal information from anyone under 18 through the Website. If you believe a child has sent us information, contact us and we will delete it. Products we build for clients that are used by children are covered by section 7.

The Website links to client websites, social networks and other sites we do not control. Their own privacy policies apply when you visit them.

We will update this policy when our practices or the law change. The date at the top shows the latest version. If a change significantly affects how we use information we already hold, we will tell our clients directly.

For any privacy question, request or complaint, contact:

Synk Corp
Baneshwor, Kathmandu 44600, Nepal
Email: info@synkcorp.com
Phone and WhatsApp: +977 9851363489

Using our services is also covered by our Terms of Service.