Cookie Policy

WORKSTORIES, INC. operates SYNPL. This Policy covers cookies and similar technologies on our website, including pages hosted on Webflow and related sign-in and purchase flows. It supplements the Privacy Policy. The website can use analytics and advertising tools, including Meta Pixel, TikTok Pixel, Google Analytics and Amplitude, subject to the choices explained below.

Website advertising is separate from your assistant workspace. Cookie consent does not authorize advertising with your connected email, chats, documents, calendar, assistant conversations or local working memory.

1. Technologies and purposes

Cookies, browser storage, pixels, tags and similar technologies can recognize a browser, remember a choice or report an event. Information may be sent by a browser or, where enabled, through a server-side event integration. Using a proxy, server-side transmission or a technology without cookies does not remove applicable consent or privacy requirements.

Strictly necessary. Technologies limited to delivering a requested website function, protecting a session, signing in, completing checkout or remembering a privacy choice may operate without optional-tracking consent. Security or payment providers are not automatically permitted to use their tools for advertising.

Analytics. Optional measurement helps us understand visits, traffic sources, navigation, downloads and conversion funnels, and improve the website and our offers. Analytics permission alone does not authorize retargeting or disclosure to advertising platforms for their advertising purposes.

Marketing. Optional advertising tools support campaign measurement, attribution, audience creation, retargeting, ad personalization, campaign optimization and suppression of irrelevant ads. This includes showing SYNPL ads to previous visitors on other platforms and creating similar audiences where the platform supports that function. A measurement tool used for these purposes is treated as marketing for that use, even if it is branded as an analytics service.

2. Analytics and advertising services

Meta Pixel (Facebook and Instagram). When marketing is enabled, Meta may receive permitted website events and browser or advertising identifiers to associate visits and conversions with its users, measure campaigns, create retargeting or similar audiences and personalize advertising on Meta services and supported placements. Meta Pixel does not itself place a TikTok pixel; each platform's integration is separately controlled.

TikTok Pixel. When marketing is enabled, TikTok may receive permitted website events and identifiers for matching, conversion measurement, campaign optimization and audience-based advertising, including retargeting through TikTok's advertising services.

Google Analytics, including GA4. When analytics is enabled, Google may process website events, identifiers and traffic-source information for usage reports and conversion analysis. Advertising uses, including remarketing audiences, advertising-personalization features and audience or conversion sharing with Google Ads where configured, require marketing permission. Google Analytics is not the Gmail or Calendar integration in the SYNPL application.

Amplitude Analytics. When website analytics is enabled, Amplitude may process website interaction events and pseudonymous identifiers for funnels, segmentation and usage analysis. Using those website segments for retargeting or sending them to an advertising destination, where configured, also requires marketing permission. Amplitude is an analytics service; advertising delivery is performed by the relevant advertising platform.

The tools and features active on a page are identified in Cookie settings, with their purposes and storage details. We may add other advertising or analytics services, but we identify a new recipient and its purposes before activation, update the relevant notices and obtain renewed consent where required. A reference to "other platforms" is not blanket permission for undisclosed recipients or new purposes.

Webflow provides website hosting, and Stripe supports direct payment flows. Their necessary technologies remain limited to the requested functions. Optional technologies associated with their pages or embedded tools follow the same choice rules.

3. Information used for measurement and retargeting

Depending on the enabled tool and your choices, information can include cookie or device identifiers, advertising click identifiers, IP address, browser and device attributes, language, approximate location derived from network information, timestamps, public page addresses, referring pages, campaign parameters and interactions with our website.

Events may include a page view, download click, sign-up, trial start, checkout or purchase, with limited attributes such as the selected plan, transaction value and currency. Payment-card details and login secrets are not advertising-event fields. Technical events can be associated with a pseudonymous account identifier where disclosed and permitted by your choices. We do not send names, email addresses or telephone numbers as ordinary Google Analytics event data.

Advertising providers may combine permitted website events with information they hold, recognize a visitor across sites or devices and infer interests for advertising. An identifier or a small audience is not necessarily anonymous. We may receive campaign reports and use permitted audiences to show, optimize or exclude SYNPL ads. Refusing personalized advertising does not stop all advertising; ads may instead be contextual or based on information a platform obtained independently.

Enhanced matching using contact details and customer-list uploads are not enabled by this notice alone. Any such additional use requires a clear, specific disclosure and the required permission before activation. Hashing a contact detail does not make it anonymous or bypass these conditions.

4. Information excluded from advertising

We do not use connected mailbox or calendar data, chats, documents, contacts, assistant prompts or answers, local Wiki or working memory for advertising or advertising audiences. The same exclusion covers summaries, embeddings, pseudonyms, aggregates and other derivatives of that content. In particular, Google API data subject to Limited Use is not used or transferred for retargeting, even if aggregated or anonymized.

Advertising tools are not permitted to collect support-message text, passwords, authentication codes, API keys, full payment details, or sensitive workspace-derived indicators such as pressure or crisis markers. Public-page addresses and event attributes must not expose such information. Cookie consent does not authorize reading unrelated files or capturing private application screens. Session replay or form-content capture is not authorized by this Policy alone.

The native application's existing product-analytics events are not automatically repurposed for website advertising. This Policy concerns the website marketing setup, not a new advertising use of connected-source or native-app data.

5. Consent and withdrawal

We activate optional website analytics and marketing only after the relevant choice is accepted. Accept all, Reject optional and Manage preferences provide a choice without requiring acceptance of marketing. Analytics and marketing can be selected separately. Visiting the website, scrolling, closing a banner, accepting the Terms, connecting Google or purchasing a subscription is not consent to optional tracking.

Before a choice, and after rejection, optional tags and their collection remain disabled. If analytics is accepted but marketing is refused, analytics-only information is not exported to advertising platforms or used for advertising personalization. Any server-side advertising events, conversion uploads or audience updates must follow the same choice; they are not a workaround for rejected tracking. Information from before consent is not retrospectively uploaded as optional tracking.

Use Cookie settings in the website footer to review or withdraw choices at any time. Withdrawal stops future optional collection and advertising uses that rely on that consent, including future audience updates under our control. We pass withdrawal, objection or deletion instructions to relevant recipients where required. Withdrawal does not invalidate earlier lawful processing or automatically erase all provider records; deletion can be requested under the Privacy Policy.

Refusing optional tracking does not prevent access to the core website or paid service. A necessary login or payment function may still require its own strictly necessary storage. A choice is generally browser- or device-specific; clearing browser storage or using another browser may require a new choice. We retain only the information needed to record and honor preferences and demonstrate the applicable consent.

6. Advertising opt-outs and privacy rights

Website advertising disclosures may qualify as a "sale", "sharing" for cross-context behavioral advertising, or targeted advertising under applicable US state laws, even without a payment for the information. We do not sell connected workspace content. The categories involved in website advertising are the online identifiers, public-site activity and limited conversion information described above; recipients are the enabled advertising and analytics providers identified in this Policy and Cookie settings.

Use Do Not Sell or Share My Personal Information in the website's privacy controls to opt out of covered website advertising disclosures and targeted advertising. This control covers browser tracking and associated server-side advertising uses under our control, not only cookie storage. We honor Global Privacy Control and other legally required opt-out signals for covered processing. An opt-out does not require opening an account or providing identity documents. A signal is applied to the relevant browser and, where required and reasonably identifiable, associated account information. We do not knowingly use information about people under 18 for targeted advertising.

You can also use browser controls to inspect, block or delete storage and the advertising-preference controls of Meta, TikTok and Google. Google My Ad Center and the Google Analytics opt-out browser add-on provide additional Google controls; their coverage differs and they do not replace our own choice controls. See the Privacy Policy for access, deletion, objection and complaint rights. Contact support@synpl.com if a website privacy control is unavailable.

7. Retention, recipients and international processing

The active cookie and storage inventory in Cookie settings identifies each provider, technology or identifier, purpose and configured lifetime or access duration before optional activation. A session record normally ends with its relevant browser session; persistent storage lasts until its disclosed expiry, earlier removal or a shorter browser limit. Local storage does not necessarily expire automatically and must have a disclosed retention rule. Changes to enabled technologies must also be reflected in that inventory.

Cookie expiry and provider retention are different. Website-event records and audience membership are retained only for the disclosed measurement or advertising purpose, subject to the applicable configuration, withdrawal or deletion duties and legitimate legal-record obligations. Information needed to record a refusal is not used for retargeting. The application-server technical-log and AI retention periods in our Privacy Policy do not establish the lifetime of website cookies or advertising-provider records.

WORKSTORIES determines the purposes of our website measurement and marketing. Providers may act as processors for certain functions and as independent or joint controllers for others under the applicable arrangements. Those responsibilities are not removed by calling a tool a third-party service. Providers may process information outside your country, including in the United States. The international-transfer safeguards described in our Privacy Policy apply; German hosting of the SYNPL application server is not an EU-only promise for website tracking.

Provider information: Meta privacy; Meta cookies; TikTok privacy; TikTok Pixel cookies; Google privacy; Google partner-site data use; Amplitude privacy; Webflow privacy; and Stripe privacy. The applicable regional provider notice and your platform choices may also apply.

8. Native application analytics remain separate

The SYNPL application sends text-free interface events through its /v1/metrics proxy to Amplitude, with device identifier, application version and language. The current control is an opt-out toggle in About. Where prior consent is legally required, optional collection must wait for that consent or remain disabled. Turning the toggle off stops future optional application events, not earlier records or separate website tracking. Website choices and native application settings do not automatically synchronize. The detailed application architecture remains as described in the Privacy Policy.

9. Beta status, updates and contact

SYNPL is a beta service provided under the Terms of Use. We do not guarantee flawless tracking, attribution, uninterrupted third-party services or absolute security. This Policy creates no additional warranty or liability cap. The Terms' limitations apply only to the extent lawful and do not remove our consent, security, data-protection or other non-excludable duties, or a user's mandatory rights.

We update this Policy when relevant processing changes and obtain fresh permission where required before the new processing begins. Publishing this Policy is not itself consent.

Contact: WORKSTORIES, INC., 2093 Philadelphia Pike #2517, Claymont, DE 19703, United States. Email: support@synpl.com.