SYNDRAX

Privacy Policy

Last updated: June 21, 2026

Syndrax LLC ("Syndrax," "we," "us," or "our") operates the Syndrax platform at syndrax.io and api.syndrax.io. This Privacy Policy describes how we collect, use, and protect your data when you use our marketplace automation and compliance monitoring services.

1. Data We Collect

Account Information: Your name, email address, and workspace profile when you register.
Marketplace Data: When you connect a marketplace account (e.g., eBay), we retrieve seller performance data, listing counts, and order information via that platform's official API using OAuth 2.0 authorization.
IP Intelligence: We detect IP type (residential, datacenter, VPN, cellular) at the server level to provide account isolation and cross-contamination protection. Full IP addresses are never sent to the browser — only masked fragments and risk assessments.
Device Information: Device identifiers for node management and account binding.
Usage Data: How you interact with the platform (features used, workflows created, audit results).

2. How We Use Your Data

To provide marketplace automation, compliance monitoring, and account safety features.
To detect and prevent account cross-contamination across marketplace accounts.
To display seller performance metrics and compliance risk assessments.
To operate the AXIS Compliance Sentinel (automated risk scoring).
To send service notifications (alerts, warnings, account status changes).

3. Data We Do NOT Collect

We do not scrape or visit marketplace websites. All marketplace data comes through official APIs with your explicit OAuth consent.
We do not store marketplace passwords — we use OAuth 2.0 tokens only.
We do not sell or share your data with third parties.

4. Data Storage & Security

Data is stored in encrypted PostgreSQL databases on Railway (US datacenters).
OAuth tokens are encrypted at rest.
All API communication uses HTTPS/TLS encryption.
Access is restricted via role-based authentication (owner, team members).

5. Marketplace API Access

When you connect a marketplace account (e.g., eBay), Syndrax uses the official eBay API with the following read-only scopes:

Seller account information and standing (Account API)
Seller performance metrics (Analytics API)
Inventory and listing counts (Inventory API)
Order and fulfillment status (Fulfillment API)

We use this data solely for compliance monitoring and risk assessment. We do not create, modify, or delete marketplace listings via the API without explicit user action.

6. Your Rights

Access: You can view all your data through the Syndrax dashboard.
Deletion: You can delete your marketplace accounts and associated data at any time. Deleting an account removes all associated telemetry, tokens, and audit data.
Revocation: You can revoke Syndrax's API access to your marketplace accounts at any time through eBay's account settings or by disconnecting in Syndrax.
Export: You can request a data export by contacting us.

7. Data Retention

We retain your data for as long as your account is active. When you delete a marketplace account, associated data (tokens, telemetry, audit history) is deleted within 30 days. OAuth tokens are revoked immediately upon disconnection.

8. Contact

For privacy questions or data requests, contact: support@syndrax.io