Privacy Policy

SyncEdge Solution (the "Company") is the controller of personal data under Thailand's Personal Data Protection Act B.E. 2562 ("PDPA") for the SyncEdge Scripta service.

• (a) Account data: email, display name, one-way hashed password, and Google/LINE account identifiers.
• (b) Content: uploaded audio files and transcripts, which may contain the voices and personal data of the individuals recorded.
• (c) Payment data: top-up history, and the last 4 digits and brand of your card (the Company does not store full card numbers — these are processed by Stripe).
• (d) Usage data: IP address, browser type, and system logs.
• (e) Consent records.

To provide the Service under our contract (contractual-performance basis); to maintain security and prevent fraud (legitimate-interest basis); and to meet tax and accounting obligations (legal-obligation basis). We do not use your content for advertising.

When you record or upload a patient visit, the recording, transcript and AI notes contain health data, which is sensitive personal data under Section 26 of the PDPA. For this data the clinician or clinic using the Service is the data controller and the Company is its data processor. The clinician must obtain the patient's explicit consent before recording and confirms it in the app for every visit. Visit recordings cannot be shared by public link, and you can delete a recording with its transcript and notes at any time. If you link visits to a patient, Scripta stores the label you type (for example a hospital number) inside your workspace to group that patient's visits. Deleting the patient deletes all of their visits.

Audio files are sent for transcription to a speech-to-text service provider (United States), and transcripts used for AI notes are sent to Anthropic, PBC (United States), as the Company's data processors. Data-protection standards in the destination country may differ from those in Thailand. By using the Service, you acknowledge and consent to this transfer under Section 28 of the PDPA. Other sub-processors: Stripe Payments (payment processing; Stripe, Inc., United States), Resend (system email), and cloud infrastructure providers.

• Audio files and transcripts: for the life of your account or until you delete them; when an account is deleted, data is held for 30 days (to allow recovery) and then permanently deleted or de-identified.
• Payment documents and history: 5 years, as required by the Revenue Code.
• System logs: no more than 90 days.
• Consent records: retained as evidence for as long as legally necessary.

Note: content you upload into another party's workspace is under the control of that workspace's owner.

You have the right to access, obtain a copy of, rectify, erase, and restrict your data, to object to its processing, to request data portability, and to withdraw consent. You can delete your account yourself from the Settings page, or contact support@syncedge.tech (answered within 30 days). You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC).

Encrypted TLS connections, passwords stored as hashes (bcrypt), role-based access controls, and hashed storage of tokens.

We use only the cookies necessary for signing in (httpOnly session cookies). We use no tracking or advertising cookies. To understand how the Service is used, we count page views and a few product events (such as sign-ups and started recordings) with Umami, a cookieless analytics tool that SyncEdge hosts itself. Umami does not store your IP address, and we remove query strings and replace record identifiers in page addresses before anything is sent. It never receives recordings, transcripts, notes or patient information.

The Service is not intended for use by anyone under 20 years of age on their own.

We post the updated version on this page along with its date. For material changes, we will notify you by email or in-app.

support@syncedge.tech

SyncEdge Solution is the data controller under Thailand's PDPA. Uploaded audio is processed by a speech-to-text service provider (US) as our data processor under a data-processing agreement (cross-border acknowledgment per PDPA Section 28). Payments are processed by Stripe, Inc. (United States); we never store full card numbers. Deleted accounts are purged after a 30-day grace period; payment records are kept for 5 years as required by Thai tax law. Send data-subject requests to support@syncedge.tech (answered within 30 days); complaints may be lodged with the Thai PDPC.