MySynapz — Last updated: May 2026

1. Purpose of the policy

This Privacy Policy explains how MySynapz SAS collects, uses, stores, and protects the personal data of users of the www.mysynapz.com website, the online store, the diagnostic tool, the MySynapz mobile application, customer service, and marketing communications.

2. Data Controller

The data controller is MySynapz SAS, 58 rue de Monceau, 75008 Paris, France. Contact email for personal data: contact@mysynapz.com

3. Personal data collected

Depending on the use of MySynapz services, the following categories of data may be collected: identification data, order data, delivery and billing data, payment data limited to transaction information, browsing data, marketing data, diagnostic data, application data, customer service data, and supporting documents provided by the customer. Data entered into the application may reveal sensitive information or information related to health in a broad sense. MySynapz must apply a reinforced level of protection, limit collected data to what is necessary, and avoid collecting non-essential medical information.

4. Purposes and legal bases

 

5. Recipients and subcontractors

Data may be transmitted, when necessary, to authorized internal MySynapz teams, technical service providers, e-commerce providers, payment providers, carriers, logistics providers, CRM and newsletter tools, analytics providers, AI providers, legal or accounting advisors, and competent authorities when required by law. Known or probable providers notably include Shopify, payment providers connected to Shopify, Futurlog for logistics and returns, Klaviyo for emailing when the tool is activated, OpenAI or any other AI provider if the application actually uses its services. This list must be checked and completed according to the tools actually activated.

6. Transfers outside the European Union

Some service providers may be located outside the European Union or process data from a third country, particularly certain technical, e-commerce, marketing, or AI providers. When such transfers occur, MySynapz ensures that they are governed by appropriate safeguards, such as an adequacy decision, standard contractual clauses, complementary security measures, or any other mechanism recognized by applicable law. To be contractually verified before final publication.

7. Retention periods

Personal data is retained for a limited period, determined according to the purpose of processing. Account data is retained as long as the account is active, then for a reasonable period after deletion, unless otherwise legally required. Order and billing data is retained for legal accounting and tax periods. Prospecting data is retained until consent is withdrawn or for a period consistent with applicable recommendations. Diagnostic and application data is retained as long as the account is active or until a deletion request, subject to legal obligations and technical backup constraints.

8. Rights of individuals

In accordance with the GDPR, each person has, as the case may be, a right of access, rectification, erasure, restriction, objection, portability, as well as the right to withdraw their consent at any time when processing is based on consent. A request can be sent to contact@mysynapz.com. MySynapz may request proof of identity in case of reasonable doubt about the identity of the applicant.

9. Deletion of application account

The user can request the deletion of their application account and associated data by writing to contact@mysynapz.com or via any deletion functionality available in the application. Some data may be retained when its retention is required by law, necessary for the defense of MySynapz's rights, or technically temporary in backups.

10. Security

MySynapz implements technical and organizational measures aimed at protecting personal data against loss, unauthorized access, disclosure, alteration, or destruction. The user is responsible for the confidentiality of their login credentials.

11. Complaint to the CNIL

If the data subject believes that their rights are not being respected, they can file a complaint with the CNIL, Commission nationale de l’informatique et des libertés, via www.cnil.fr.

12. Policy modification

MySynapz may modify this Privacy Policy to take into account legal, technical, or operational developments. The applicable version is the one published on the website or in the application at the time of consultation.