Data processing terms

Draft. Not yet reviewed by a lawyer; may change before SYNRG opens to the public. Organizations that need a signed copy can email us for one.

These terms are part of the terms of service and apply whenever an organizer's use of SYNRG involves personal data about other people — participants, attendees, speakers, staff.

Roles

The organizer (the account holder, or the organization it represents) is the controller of personal data inside its rooms and events. NXT Move Inc ("SYNRG") is the processor. The organizer decides what is collected and why; SYNRG processes it only to provide the service as the organizer has set it up, on the organizer's documented instructions, which these terms and the settings in the studio are.

What SYNRG does with the data

• Stores it, shows it on the surfaces the organizer chose (screen, phones, personal pages, studio), and sends the emails the organizer asks it to.
• Runs the AI features the organizer uses on it (summaries, merged questions, drafts).
• Keeps backups and technical logs for security and recovery.
• Uses room output without names or emails for research and improvement, unless the organizer opts the event out.
• Nothing else. SYNRG does not sell it, use it for advertising, or use it to train AI models.

Sub-processors

Supabase (database and sign-in), Netlify (hosting), Resend (email), Anthropic (AI). Integrations the organizer connects — Airtable, Eventbrite, Planning Center, Google — act on the organizer's instruction and under their own terms. We will post changes to this list at least 30 days before they take effect; an organizer who objects may end the service.

Security

Encryption in transit and at rest; access to production limited to named people; expiring sign-in links; scoped, revocable API keys; an activity log of changes to decks and events; the presenter secret never written to a server log.

Breach

If SYNRG becomes aware of a breach affecting the organizer's personal data it tells the organizer without undue delay, with what is known, so the organizer can meet its own duties (in Texas, notice to affected people within 60 days and to the Attorney General if 250 or more Texans are affected).

Rights requests

Requests from people to see, correct or delete their data go to the organizer; SYNRG gives the organizer the tools to answer (exports, removal from the people list, deletion of a person) and helps with anything the tools cannot do.

Retention and deletion

Event and room data are kept until the organizer deletes them, and in any case are deleted 12 months after the event's end date unless exported or extended by the organizer. On account closure: 30 days to export, then deletion; backups clear within 90 days.

Transfers

Data is processed in the United States. For personal data of people in the EU, UK or Switzerland, the EU Standard Contractual Clauses (module 2, controller to processor) and the UK addendum apply between the organizer and NXT Move Inc, and are available signed on request.

Audit

Once a year, on 30 days' notice, an organizer may ask SYNRG for a written account of the measures above and for the information reasonably needed to show compliance.

NXT Move Inc, Austin, Texas · events@synrg.live · Version 2026-10-15 (draft).