1. Introduction and Data Controller
This Privacy Policy explains how Synthesis Enterprises Limited, a company incorporated under the laws of the Federation of Saint Kitts and Nevis ("Company," "we," "us," or "our"), operating under the brand name JRBuddy, collects, uses, discloses, and protects your personal information.
Data Controller:
Synthesis Enterprises Limited
Registered in Nevis, Federation of Saint Kitts and Nevis
Email: privacy@jrbuddy.com
By using our website, software products, or services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Email address, username, and password when you create an account
- Purchase Information: Billing address, payment method details (processed by third-party payment processors)
- Communication Data: Information you provide when contacting our support team
- License Information: Hardware identifiers for license activation and validation
2.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, click patterns, session duration
- License Validation Data: Software version, activation status, hardware fingerprint
- Log Data: Server logs, error reports, and diagnostic information
2.3 Information from Third Parties
- Payment confirmation from payment processors (no full card details)
- Fraud prevention data from security services
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data under the following legal bases:
- Contract Performance: Processing necessary to fulfill our contractual obligations (license delivery, support)
- Legitimate Interests: Fraud prevention, security, service improvement, and direct marketing to existing customers
- Legal Obligation: Compliance with applicable laws and regulations
- Consent: Where you have given explicit consent for specific processing activities
4. How We Use Your Information
- Process transactions and deliver software licenses
- Validate and manage software license activations
- Provide customer support and respond to inquiries
- Send transactional emails (purchase confirmations, license keys, updates)
- Detect, prevent, and address fraud, unauthorized access, and security issues
- Enforce our Terms & Conditions and protect our intellectual property
- Improve our products, services, and user experience
- Comply with legal obligations and respond to lawful requests
- Send marketing communications (only with your consent, where required)
5. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share information only in these circumstances:
5.1 Service Providers
- Payment Processors: To process transactions securely
- Hosting Providers: To host our website and services
- Email Services: To send transactional and support communications
- Analytics Providers: To understand usage patterns (anonymized where possible)
5.2 Legal Requirements
We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or illegal activity
- Enforce our Terms & Conditions
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
6. International Data Transfers
Synthesis Enterprises Limited is located in Nevis (Federation of Saint Kitts and Nevis). Your information may be transferred to and processed in countries outside your residence, including the United States and European Union.
For EEA/UK users, we ensure appropriate safeguards for international transfers through:
- Standard Contractual Clauses approved by the European Commission
- Data processing agreements with all service providers
- Encryption in transit and at rest
7. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: TLS/SSL encryption for all data transmission
- Access Controls: Restricted access to personal data on need-to-know basis
- Secure Storage: Encrypted databases and secure server infrastructure
- Payment Security: PCI-DSS compliant payment processing through certified providers
- Regular Audits: Security assessments and vulnerability testing
While we strive to protect your information, no method of transmission or storage is 100% secure. You acknowledge this inherent risk.
8. Data Retention
We retain your personal information for as long as necessary to:
- Active Accounts: Duration of your account plus 3 years
- Transaction Records: 7 years for tax and legal compliance
- License Records: Lifetime of the license for validation purposes
- Support Communications: 3 years from last interaction
- Marketing Data: Until you unsubscribe or withdraw consent
After these periods, data is securely deleted or anonymized.
9. Your Rights
Depending on your location, you may have the following rights:
9.1 All Users
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Opt-Out: Unsubscribe from marketing communications
9.2 EEA/UK Users (GDPR)
- Data Portability: Receive your data in a structured, machine-readable format
- Restriction: Request restriction of processing
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
- Lodge Complaint: File a complaint with a supervisory authority
9.3 California Residents (CCPA/CPRA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
To exercise your rights, contact us at privacy@jrbuddy.com. We will respond within 30 days.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending email notification for significant changes (where required)
Your continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Information
For privacy-related inquiries, requests, or complaints:
Synthesis Enterprises Limited
Trading as JRBuddy
Nevis, Federation of Saint Kitts and Nevis
Email: privacy@jrbuddy.com
General Support: support@jrbuddy.com
We aim to respond to all inquiries within 30 days.