This notice explains how Syntropia Oy handles personal data related to Headquarters: this website, purchases and the app itself. We process personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. Controller
Syntropia Oy, Business ID 3645903-2, VAT FI36459032, Välimerenkatu 5D 204, 00180 Helsinki, Finland
Privacy questions: tietoturva@syntropia.fi
2. This website
The website uses no cookies and does not track individual visitors, and its fonts are served from our own server. We measure visits and page load times with Cloudflare Web Analytics, which uses no cookies, stores nothing on your device and does not identify visitors by IP address or browser details. We only see aggregates, such as visits per page and country. The site is hosted on GitHub Pages; GitHub may process technical log data, such as IP addresses, to deliver and secure the site (GitHub Privacy Statement).
3. Purchases
Purchases are made through Lemon Squeezy, our Merchant of Record. Lemon Squeezy collects the details needed for the payment and taxes, such as your name, email address, billing country and payment details (Lemon Squeezy Privacy Policy). We do not see your payment card details.
We receive order details (name, email address, country, order and license information) to deliver the product, provide support and keep accounting records.
4. The Headquarters app
Headquarters runs on your own computer. Your projects, messages, agent memory and files stay there, and we do not collect usage data or telemetry.
- By default, the only outbound connection is license validation, which sends your license key and an instance name to Lemon Squeezy.
- If you turn on Telegram notifications, the notification content is sent to Telegram.
- AI agents you connect send data to their own providers under your accounts and their terms.
5. Email and support
When you contact us, we process your message and contact details to answer you.
6. Legal bases
- Contract: delivering the product, license and support.
- Legal obligation: accounting records.
- Legitimate interest: website security, visitor statistics to improve the website, and answering enquiries.
7. Retention
Order and accounting records are kept for as long as the Finnish Accounting Act requires (up to 10 years). Support correspondence is kept as long as it is needed to help you.
8. Transfers outside the EU
Lemon Squeezy, GitHub and Cloudflare may process data in the United States. They use appropriate safeguards, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
9. Your rights
You have the right to access, correct and erase your data, to restrict or object to processing, and to data portability. Contact tietoturva@syntropia.fi. You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
10. Changes
We update this notice when needed. Material changes are announced on this page.