Home

Legal

Privacy Policy

This Privacy Policy explains how Syntax Lab Technology collects, uses, stores, and discloses information about you when you use our Services. It applies globally, including users in the EU, United States, and Asia.

Last updated: April 5, 2026

1. Introduction and Scope

Syntax Lab Technology ("Company," "We," "Us," "Our") operates the websites syntaxlabtechnology.org, envpilot.dev, and the LUMO application (collectively, "Services"). This Privacy Policy describes how we collect, use, process, store, and share your personal information in connection with those Services.

This Policy applies to all users of our Services worldwide, including those in the European Union (EU) and European Economic Area (EEA), the United Kingdom (UK), the United States (US), and countries across Asia including but not limited to India, Singapore, Pakistan, South Korea, Japan, and the People's Republic of China.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree, please discontinue use of our Services immediately.

2. Information We Collect

We collect only the minimum information necessary to provide and improve our Services.

Information You Provide Directly:

  • Contact details (name, email address) when you submit our contact form or sign up for a product.
  • Account credentials and profile information for product accounts (e.g., envpilot.dev).
  • Any content or communications you submit to us.

Information Collected Automatically:

  • Usage data such as pages visited, time spent, clicks, and referral source.
  • Device and browser information, including IP address, operating system, and browser type.
  • Analytics data collected via Vercel Analytics (privacy-friendly, no cross-site tracking).

Information We Do Not Collect:

  • We do not collect payment card details (handled directly by third-party payment processors).
  • We do not knowingly collect personal information from children under the age of 13 (or 16 in the EU/EEA).
  • We do not collect sensitive personal data such as race, religion, health, or biometric data.

3. How We Use Your Information

We use the information we collect solely for the following purposes:

  • To provide, operate, maintain, and improve our Services.
  • To respond to your inquiries, support requests, and communications.
  • To send transactional or service-related communications (e.g., account updates, security notices).
  • To monitor and analyze usage trends to improve user experience.
  • To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
  • To comply with applicable legal obligations.

We will not use your personal information for purposes materially different from those listed above without obtaining your consent or as otherwise permitted by applicable law.

We do not sell, rent, or trade your personal information to any third party for their marketing purposes.

4. Legal Bases for Processing (GDPR)

If you are located in the EU or EEA, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR Regulation (EU) 2016/679):

  • Contractual Necessity (Art. 6(1)(b)): Processing required to provide our Services to you.
  • Legitimate Interests (Art. 6(1)(f)): Processing for analytics and fraud prevention where our interests are not overridden by your rights.
  • Legal Obligation (Art. 6(1)(c)): Processing required to comply with applicable law.
  • Consent (Art. 6(1)(a)): Where we rely on your explicit consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Where we transfer personal data outside the EEA, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), or other approved transfer mechanisms as required under Chapter V of the GDPR.

5. Your Rights by Region

European Union / EEA / UK

You have the following rights regarding your personal data:

  • Right of access (Art. 15): Obtain a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17): Request deletion of your data under certain conditions.
  • Right to restriction of processing (Art. 18): Request that we limit how we use your data.
  • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interests.
  • Right to withdraw consent at any time where processing is consent-based.
  • Right to lodge a complaint with your national data protection authority (DPA).

United States — California (CCPA / CPRA)

  • Right to know what personal information we collect, use, disclose, or sell.
  • Right to delete personal information we have collected from you.
  • Right to correct inaccurate personal information.
  • Right to opt-out of the sale or sharing of personal information. We do not sell personal information.
  • Right to non-discrimination for exercising your privacy rights.

United States — Other States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other US states with applicable privacy laws may have similar rights to access, correct, delete, and opt-out of processing. We will honor verified requests consistent with applicable law.

Asia

  • India (DPDPA, 2023): We process personal data only for the purposes for which consent was obtained. You have the right to access, correct, and request erasure of your data.
  • Singapore (PDPA): We comply with PDPA requirements for collection, use, and disclosure.
  • South Korea (PIPA): We comply with applicable PIPA obligations.
  • Japan (APPI): We handle personal information in accordance with APPI requirements.
  • Pakistan (PECA): We comply with applicable Pakistani data protection requirements.

To exercise any of your rights, please contact us at support@syntaxlabtechnology.org. We will respond within the timeframe required by applicable law (typically 30 days).

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:

  • Service Providers: Trusted third-party vendors who assist in operating our Services, contractually bound to use your data only to provide services to us.
  • Legal Requirements: If required by applicable law, regulation, court order, or lawful governmental request.
  • Business Transfers: If Syntax Lab Technology undergoes a merger or acquisition, your information may be transferred with prior notice.
  • With Your Consent: For any other purpose with your explicit prior consent.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact form submissions: Up to 2 years or until you request deletion.
  • Account data: Duration of your account plus a reasonable period after closure.
  • Analytics data: Retained in aggregated, non-identifiable form indefinitely.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including encrypted data transmission (TLS/HTTPS) and access controls.

No system is completely secure. You use the Services at your own risk. In the event of a data breach likely to result in risk to your rights and freedoms, we will notify you and the relevant authorities as required by law (e.g., within 72 hours under GDPR Art. 33).

9. Cookies and Tracking

Our Services use cookies and similar tracking technologies:

  • Strictly Necessary Cookies: Essential for the Services to function. Cannot be disabled.
  • Analytics Cookies: Collected via Vercel Analytics — privacy-friendly, no cross-site tracking.

EU/EEA users: Where required by the ePrivacy Directive and GDPR, we will obtain your consent before placing non-essential cookies. You can manage cookie preferences at any time through your browser settings.

10. International Data Transfers

We operate globally and your information may be transferred to countries that may not provide the same level of data protection as your home jurisdiction.

For EU/EEA transfers, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) under GDPR Art. 46. For UK transfers, we rely on the UK International Data Transfer Agreement (IDTA).

11. Children's Privacy

Our Services are not directed to children under 13 (or under 16 in the EU/EEA). If you believe we have inadvertently collected personal information from a child, contact us immediately at support@syntaxlabtechnology.org and we will delete it promptly.

12. Third-Party Links

Our Services may contain links to third-party websites. We have no control over and are not responsible for their privacy practices. Please review the privacy policy of every third-party service you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date above and, where required by law, provide more prominent notice. Your continued use of our Services after any changes constitutes acceptance of the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy: