Privacy Notice
Last updated 1 October 2026
Who controls your data
Syruby is a trading name of Ofek Taganya, an individual operating in Israel. Ofek Taganya is the controller of the personal data described here. Privacy contact: support@syruby.com.
What we collect and why
Account data (name, email, password hash, sign-in provider) — to create and secure your account. Legal basis: performance of our contract with you.
Workspace content (Areas, goals, milestones, tasks, schedules, notes, assistant conversations, weekly reviews) — to provide the service. Legal basis: contract.
Calendar data, if you connect Google Calendar — to write your scheduled sessions to the calendar you choose. We request only the access needed for that, and you can disconnect at any time in Settings. Legal basis: consent.
Usage and technical data (feature usage, AI request counts and token counts, error logs, IP address, device/browser information) — to operate the service, enforce plan allowances, prevent abuse and improve reliability. Legal basis: contract and our legitimate interest in a secure, working service.
Support messages — to answer you. Legal basis: legitimate interest.
Payment card details are collected and processed by Paddle, our Merchant of Record, not by us. We do not store full card details. We store only the plan, subscription status and Paddle identifiers needed to give you access.
AI processing
When you use the assistant, planning or review features, the relevant parts of your workspace content are sent to our AI provider to generate the result you asked for. We do not use your content to train public models. We record the size and cost of each AI request so we can enforce your plan's allowances and detect abnormal usage.
Who we share data with
Cloud hosting and database providers; our AI model provider; Google, if you connect your calendar; Paddle as merchant of record for sale, subscription management, payments, tax compliance and invoicing; professional advisers; and authorities where the law requires it. We do not sell personal data.
International transfers
Our providers may process data outside Israel, including in the United States and the European Union. Where required, transfers rely on adequacy decisions or standard contractual clauses, or other safeguards permitted by applicable law.
How long we keep it
Workspace content is kept while your account exists. When you delete your account, your workspace content is deleted. Cancelling a subscription does not delete your workspace. Billing records are kept as long as tax and accounting law requires. Other data is kept only as long as needed for the purposes above, then deleted or anonymised.
Your rights
You may request access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and you may withdraw consent (for example for calendar access) at any time. Write to support@syruby.com and we will respond within 30 days. You may also complain to your local data protection authority.
Security and cookies
We use appropriate technical and organisational measures to protect your data, including encrypted connections, restricted access, and per-account database rules that keep your workspace separate from other accounts. We use essential cookies and local storage to keep you signed in and remember your preferences; we do not use advertising cookies.