Privacy Policy
Effective date: October 9, 2026
This Privacy Policy explains how Symgora Labs (“we,” “us,” or “our”) collects, uses, and discloses personal information through our website and business activities. Symgora is our product.
Symgora Labs is operated by Tobias Krause and Bryan Goldstein. For privacy questions or requests, contact [email protected].
1. Information we collect
Information you provide. We collect information you choose to share when contacting us, discussing an engagement, or expressing interest in joining our team. This may include your name, email address, company, role, business requirements, correspondence, résumé, and professional background.
Our contact form requires your name, email address and company so we can respond to your inquiry. Other fields are optional. Please avoid submitting sensitive personal information or confidential customer records through this form.
Technical information. Our website providers may receive information such as your IP address, browser and device information, requested pages, and access times when delivering or securing their services.
2. How we use information
We use personal information to:
- Respond to inquiries and communicate with you.
- Discuss and manage customer engagements.
- Evaluate expressions of interest in joining our team.
- Operate and protect our website and business systems.
- Meet applicable legal obligations and manage contractual matters.
We do not sell personal information, disclose it for targeted advertising, or send newsletters or promotional email campaigns. We may communicate directly with you about your inquiry or an existing or prospective engagement.
3. Customer information and AI tools
We use ChatGPT and Claude to support our work. We do not upload identifiable customer data to these tools, and we keep their model-training settings disabled.
We do not use customer information to train AI models.
Information handled on a customer’s behalf is subject to the applicable engagement arrangements and any required data processing agreement. This policy does not replace those arrangements.
If your personal information was provided through one of our customers, please direct requests concerning that information to the customer. We will assist as required by our obligations and applicable law.
4. Service providers and disclosures
Our current providers include:
- Cloudflare, for website hosting and delivery, and GitHub, for website source-code management.
- Google, for business email, website font delivery, and website analytics and advertising measurement.
- Formspree, for receiving and delivering contact-form submissions.
- OpenAI and Anthropic, for AI tools, subject to the limits described above.
Not every provider receives every category of information. Visiting our website does not, by itself, submit your information to an AI tool.
We may disclose information when required by law or reasonably necessary to respond to lawful requests, prevent fraud, or protect rights and safety.
5. Website technologies and external links
For visitors identified as located in the United States, we use Google Analytics and Google Ads to understand website visits, engagement and enquiries, and to measure the effectiveness of our search advertising. These tools use cookies and process technical information such as device and browser information, visited pages, interactions and ad-click identifiers. We send a measurement event when a contact-form submission succeeds; we do not send the form’s names, email addresses, company names or message content to Google Analytics or Google Ads.
Measurement starts automatically for U.S. visitors unless their browser sends a Global Privacy Control or Do Not Track signal, or a previously saved measurement choice declines tracking. We use our hosting provider’s country detection to determine eligibility and do not start measurement for other or unknown locations. You can opt out of measurement by enabling Global Privacy Control or Do Not Track in a browser that supports these signals. We keep advertising personalization disabled. Learn more about how Google uses information from sites that use its services. Third-party hosting, form processing and font delivery may also process technical information needed to provide those services.
We do not start optional measurement when your browser sends a Global Privacy Control or Do Not Track signal. We do not conduct targeted advertising or sell personal information.
External websites linked from our site have their own privacy practices. This policy does not govern those websites.
6. Retention
We delete inactive inquiry records after 24 months and unsolicited career applications after 12 months, unless a continuing relationship or legal obligation justifies longer retention.
Customer and pilot information is retained according to the applicable customer agreement.
Other business records are retained for as long as reasonably necessary for their purpose, including meeting legal obligations, resolving disputes and maintaining an ongoing relationship.
7. Security
We use two-factor authentication, password-protected devices, and access restrictions designed to protect personal information. Access to customer information is limited to authorized people.
No method of electronic transmission or storage is completely secure.
8. Processing locations
Symgora Labs operates from the United States, and our current pilot engagements are with U.S. customers. Our providers may process information in the United States and other countries where they operate.
We will update our disclosures and put any required arrangements in place as our international activities develop.
9. Your choices and rights
You can contact us to request access to, correction of, or deletion of personal information we hold about you.
Depending on your location and applicable law, you may also have rights to receive a portable copy, restrict processing, or object to certain uses. Where processing relies on consent, you may withdraw that consent without affecting the lawfulness of earlier processing. You may also have the right to complain to a relevant data protection authority.
Send requests to [email protected]. We may need to verify your identity or authority before responding. Applicable legal exceptions may limit certain requests.
10. Children
Our website and offerings are intended for business audiences and are not directed to children. If you believe a child has provided personal information to us, please contact [email protected].
11. Changes and contact
We may update this policy as our practices change. We will publish the updated policy with a revised effective date and provide additional notice where required by law.
For questions or privacy requests: