Privacy Policy

Syntax Start ("we", "us") operates the inventory management service at inventory.syntaxstart.com (the "Service"). For the processing of personal data described in this policy, Syntax Start is the data controller.

Contact: contact@syntaxstart.com

• Account data — name, email address, password (bcrypt-hashed), role assignments.
• Usage and security data — audit logs of actions in the Service, login timestamps, IP addresses, and browser user agent, used for security and accountability.
• Business data — inventory items, locations, distributors and related records your organization enters. This data belongs to your organization.

We do not collect patient data, and the Service is not intended for storing patient records.

• Contract — to provide the Service you signed up for: accounts, inventory features, alert emails.
• Legitimate interest — security logging, abuse prevention, and service improvement.

We use only strictly necessary cookies (session and security tokens). No analytics, advertising, or tracking cookies are used, and no cookie banner is therefore required.

Data is hosted on servers within the EU/EEA. Email is sent via our email provider (Hostinger). We do not sell personal data and do not share it with third parties except the processors needed to operate the Service.

Account and business data is kept while your organization is a customer. Audit logs are kept for security review. When an organization is deleted, its data is removed within 30 days, except where legal obligations require longer retention.

Under GDPR you have the right to access, correct, export, and delete your personal data, and to object to or restrict processing. Email us at contact@syntaxstart.com and we will respond within 30 days. You may also lodge a complaint with IMY (Integritetsskyddsmyndigheten), the Swedish supervisory authority.

We will post any changes to this policy on this page with an updated date.