Privacy Policy
Controller: NewDmension LLC (Miami, Florida, USA). Contact: privacy@sybana.app
This policy explains how we process data in Sybana (B2B for healthcare professionals). It’s not legal advice and may be updated.
Data we process
- Account data: name, email, billing details.
- Service usage and basic telemetry.
- Payments processed by Stripe; we don’t store card numbers.
- Content you upload (medical history, prescriptions, documents, etc.).
Purposes
- Provide the service, support, and security.
- Billing and tax compliance.
- Product improvement with aggregated/anonymous stats.
- Operational communications; marketing only with consent.
Google Data and Google Calendar
Sybana may access certain data from the user's Google account, including Google Calendar, only with the user's explicit consent and solely for the purpose of providing the requested features within the application.
- Sybana may access Google Calendar information such as events, dates, times, titles, descriptions, and other metadata necessary to display and synchronize the user's schedule within the platform.
- This data is used exclusively to enable the viewing, synchronization, creation, editing, and management of calendar events within Sybana.
- Sybana does not sell, transfer, or share user data obtained through Google APIs with third parties for advertising, commercial, or unrelated purposes.
- Google data is only disclosed to technology providers acting as data processors, and only when necessary for the secure operation of the platform, under appropriate contractual and confidentiality safeguards.
- Sybana does not use user data obtained from Google Workspace APIs to develop, improve, or train generalized artificial intelligence or machine learning models.
- Users may revoke Sybana’s access to their Google account at any time from their Google settings or by discontinuing the integration within the application.
Sybana processes this data in accordance with the Google API Services User Data Policy and its Limited Use requirements, applying reasonable security measures, data minimization, and restricted access.
Legal bases
- Contract performance (Terms of Service).
- Legitimate interest (improvements and security).
- Legal obligation (accounting/billing).
- Consent (marketing, where applicable).
Retention
You can delete your account from the app. When you do, we delete app data and keep for 7 years a minimal accounting record without PII (Stripe IDs, amounts, dates, and taxes) for US tax obligations.
Recipients/processors
- Stripe (payments).
- Supabase (database, storage, and auth).
- Auxiliary providers (email, error reporting, basic analytics).
- Other providers necessary to operate the service.
International transfers
The controller is in the US and may use providers with servers outside your country. We apply appropriate technical and contractual measures.
Your rights
Access, rectification, erasure, objection, restriction, and portability. Email us at privacy@sybana.app from your account email.
Security
Encryption in transit, access controls, and event logging.
Changes
We’ll publish changes on this page. Continued use implies acceptance.
Cookie preferences
Choose which categories you allow. You can change your preferences at any time.
