Privacy Policy

1. Introduction & Scope

ChemSyn operates a B2B SaaS infrastructure for chemical supply chain monitoring. This Privacy Policy applies solely to "Business Data" and "Operational Telemetry" processed via our platform. We strictly define our users as corporate entities (B2B).

2. Data Collection Inventory

To provide critical alerting services, we collect the following categories of data:

3. Lawful Basis for Processing (GDPR)

Under Article 6 of the GDPR, we process data based on the following grounds:

• Performance of Contract: Processing is necessary to deliver the Service (e.g., sending an alert when a chemical tank overheats). Without this data, the Service cannot function.
• Legitimate Interests: Fraud prevention, network security, and ensuring the integrity of our transactional email infrastructure.
• Legal Obligation: Retaining records for OSHA/REACH compliance audits.

4. Infrastructure & Sub-processors

ChemSyn utilizes third-party infrastructure to deliver high-velocity notifications. By using our Service, you acknowledge that data may be transferred to the following trusted Sub-processors:

* All Sub-processors are vetted for GDPR/SOC2 compliance. Data transfers outside the EEA are protected by Standard Contractual Clauses (SCCs).

5. Data Retention Policy

We adhere to strict data minimization principles. Data is retained only for the periods specified below:

• Transactional Logs (Mailgun): Retained for 30 days for delivery troubleshooting, then anonymized.
• Message Bodies: Retained for 7 days maximum (encrypted at rest).
• Suppression Lists: Retained indefinitely to ensure we honor "Do Not Contact" requests (Legal Obligation).
• Inactive Accounts: Purged after 12 months of dormancy.

6. Permitted Use & "Transactional Only" Policy

To comply with our upstream providers (Mailgun AUP), ChemSyn enforces a strict Transactional-Only policy. This section serves as a binding agreement regarding the nature of emails sent via our platform.

Zero Tolerance: Any account detected sending marketing broadcasts or using purchased lists will be immediately suspended without refund. We employ automated heuristics to detect non-transactional patterns.

7. Your Rights (Data Subject)

Regardless of your location, we afford you the following rights over your data:

• Right to Access: Request a copy of all telemetry and logs associated with your ID.
• Right to Rectification: Correct inaccurate corporate details.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention requirements for safety audits).
• Right to Object: Opt-out of non-essential processing.

8. Contact & Abuse Reporting

ChemSyn takes abuse reports seriously. If you have received an unsolicited message that appears to originate from our infrastructure, please contact us immediately.