Privacy policy

Data controller

The data controller is Syntax Buddy Limited, a company registered in Hong Kong under number 76720044. Its registered office is at Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong.

For any question or request concerning your data, email info@automata.com.

Data we collect

When you submit an audit request, we receive:

• your name, email address and company name;
• your role and the software you use, if you choose to provide them;
• the description of the process you would like to simplify.

Your name, email address, company name and process description are required to handle the request. Without them, we cannot arrange the audit.

To limit abuse, the application also keeps the sender’s IP address in memory for no more than one hour. It is not added to the email and is not stored in our database.

Purposes and legal bases

We use the form data to reply to your request, understand your needs and arrange the audit. Where the GDPR applies, this processing is based on steps taken at your request before entering into a contract or, depending on the nature of the exchange, on our legitimate interest in responding to business enquiries.

Rate limiting and technical logs rely on our legitimate interest in protecting the website. We do not use this data for automated decision-making or commercial profiling.

We do not sell or rent your data. We do not use an audit request for marketing unless there is a separate lawful basis to do so.

Recipients and service providers

The request is available only to the people who need it within Syntax Buddy Limited and to the following technical providers:

• Railway Corporation, which hosts the website;
• Plus Five Five, Inc. (Resend), which delivers the message to our inbox;
• our email provider, which stores the message we receive.

These providers process data to deliver their technical services and under their own contractual data protection commitments.

International transfers

Data may be processed in Hong Kong and the United States. Where the GDPR applies, the data processing agreements of Railway and Resend incorporate the European Commission’s Standard Contractual Clauses for the relevant transfers.

Retention periods

• Audit requests and the related correspondence are kept for three years after the last contact, unless a contract begins or a longer period is needed to meet a legal obligation or defend a legal claim.
• IP addresses used by the application for rate limiting are removed from its memory within one hour.
• Resend states that email and log data is retained for 30 days on its standard plans, with backups retained for 7 days.
• Railway retains technical logs for a plan-dependent period, currently between 3 and 90 days depending on the plan.

Cookies and analytics

The public pages use no analytics or advertising cookies. Fonts are hosted on the website itself.

The private Radar area, reserved for website administration, uses a strictly necessary session cookie after login. It expires after 30 days or when the user logs out.

Your rights

Depending on the law that applies, you may request access to your data, rectification, deletion or restriction of processing. You may also object to processing based on legitimate interests and request data portability where that right applies.

Send your request to info@automata.com. We may ask for reasonable evidence if it is necessary to verify your identity.

For people in the European Economic Area, the General Data Protection Regulation (GDPR) may apply. You may complain to the supervisory authority where you live or work. In France, this is the CNIL.

As the company is established in Hong Kong, the Personal Data (Privacy) Ordinance also applies. It includes rights of access and correction. You may contact Hong Kong’s Privacy Commissioner for Personal Data.

Changes

We may update this policy if the form, our service providers or the applicable requirements change. The date below shows when it was last revised.

Last updated: 4 November 2026.