Privacy Policy

1. Data we collect

We collect the following categories of personal data:

• Account data — name, email address, password (stored only as a cryptographic hash), and, if you sign in with Google or Apple, the identifier and email shared by that provider.
• Organization data — company name and your role within the organization workspace you belong to.
• Measurement data — photographs of timber (piles, truck loads, containers), GPS coordinates and timestamps attached to measurements, and the results computed from them. Photographs of truck loads may incidentally include vehicle license plates, which our system uses solely as a physical size reference to calibrate measurements.
• Contact data — name, email, company, and message content when you use the contact form.
• Technical data — IP address, browser/device information, and server logs generated when you use the Service, used for security and troubleshooting.

2. Purposes and legal bases

We process personal data for the following purposes:

• Providing the Service (creating and operating your account and workspace, processing measurements, generating reports) — necessary for the performance of our contract with you (Art. 6(1)(b) GDPR).
• Responding to enquiries sent through the contact form — our legitimate interest in responding to you (Art. 6(1)(f) GDPR).
• Security, abuse prevention, and service diagnostics — our legitimate interest in keeping the Service secure and reliable (Art. 6(1)(f) GDPR).
• Compliance with legal obligations, including accounting and responding to lawful requests from authorities (Art. 6(1)(c) GDPR).
• Product communications you have opted into — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

3. Where your data is stored

Customer data, including measurement photographs and results, is stored on infrastructure located in the European Union. Our website is delivered through Cloudflare's global network; content cached at the edge may transit outside the EU subject to Cloudflare's GDPR safeguards.

4. Processors and third parties

We share personal data only with service providers who process it on our behalf under data processing agreements:

• Cloudflare, Inc. — website and application delivery (CDN, hosting of the web frontend).
• Google LLC — only if you choose "Sign in with Google" (identity verification).
• Apple Inc. — only if you choose "Sign in with Apple" (identity verification).
• Email delivery providers — to send transactional emails such as verification and password-reset messages.

We do not sell personal data and we do not share it with advertisers.

5. Retention

Account and organization data is kept for as long as your account exists. Deleted measurements are kept in an archive for 30 days before permanent deletion. Contact form messages are kept for as long as needed to handle your enquiry. Server logs are retained for a limited period for security purposes. When you delete your account, we delete or anonymize your personal data unless a legal obligation requires us to keep it longer.

6. Your rights

Under the GDPR you have the right to access, rectify, and erase your personal data; the right to restrict or object to processing; the right to data portability; and the right to withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at contact@syltra.ai. You also have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro.

7. Cookies

The Service uses only essential cookies and similar technologies. See our Cookie Policy for details.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and, for material changes, notify you through the Service or by email.

9. Contact

Syltra AI, Bucharest, Romania — contact@syltra.ai.