Skip to content

Legal

Privacy policy

This policy explains how personal data is processed when you visit optisync.net or submit one of its forms.

Version 2026-09-11

  1. 01 Who is responsible

    OptiSync is a product and project currently operated by LEATON GROUP LTD OOD, pending finalisation of the long-term OptiSync company structure. LEATON GROUP LTD OOD is the controller of the personal data described in this policy. If the controller changes, we will update this policy and its version.

    Data controller

    LEATON GROUP LTD OOD

    UIC 208151593 · VAT No. BG208151593

    Malinova Dolina Distr., Bl. No 29, Entr. V, Fl. 8, Apt. 49

    1700 Sofia, Bulgaria

    privacy@optisync.net

  2. 02 What we collect

    • Early-access requests: your name, company and email address, the marketplaces and webshop platform you use, your catalogue size, whether and how you connect to suppliers (and optionally which ones), the tools you use and your approximate monthly spend on tools and/or your webshop, and anything you write about your challenges.
    • Investor interest registrations: your name, email address and country, how you're registering (individual, company or professional investor), an indicative ticket range, your instrument preference, investment horizon and startup investing experience, what you'd like to receive next, and any message.
    • Acknowledgements and consents: whether you acknowledged this policy (and, for investor registrations, that registering is non-binding) and whether you opted in to product news or company updates, with the date, time and policy version.
    • Context sent with your request: the language of the page and, if present, the referring page or campaign source.
    • Security data: a salted one-way hash of your IP address, used only to limit repeated submissions. We do not store your raw IP address for this purpose.
    • Website statistics: aggregated, cookie-free visit statistics (Umami) that do not identify you.

  3. 03 Why we use it and on what basis

    • To handle and follow up on your request — to take steps at your request before a possible agreement, and our legitimate interest in responding to business enquiries (Art. 6(1)(b) and (f) GDPR).
    • To send you product news or company updates — only if you opted in (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.
    • To keep the website and its forms secure and to prevent abuse — our legitimate interest (Art. 6(1)(f) GDPR).
    • To understand, in aggregate, how the website is used — our legitimate interest (Art. 6(1)(f) GDPR).

  4. 04 Who receives it

    We do not sell your data. Where a provider processes personal data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

    • Mailgun (EU region), which delivers our transactional emails.
    • Our hosting provider, which runs the servers of this website.
    • Cloudflare, only if bot protection (Turnstile) is enabled on a form.
    • Website statistics (Umami) run on our own infrastructure; no data is shared with an analytics company.

  5. 05 How long we keep it

    • Early-access requests and investor interest registrations without further follow-up: 24 months after submission.
    • Qualified leads, design partners and investor contacts: 24 months after the last meaningful interaction, unless a commercial or investment relationship begins.
    • If you become a customer or investor, the data needed for that relationship is kept under our contractual, corporate and accounting retention obligations instead of in the lead record.
    • Opt-in for product news or company updates: until you withdraw it.
    • Email delivery logs: 12 months.
    • Hashed IP addresses used for rate limiting: 24 hours.

  6. 06 Your rights

    You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. Email privacy@optisync.net — we respond within one month.

    You can also lodge a complaint with a data protection authority: in Bulgaria the Commission for Personal Data Protection (cpdp.bg), or the authority in the country where you live or work.

  7. 07 Cookies and local storage

    This website does not use tracking or advertising cookies. Your light/dark theme preference is stored in your browser's local storage and never leaves your device.

  8. 08 Security

    We use encrypted connections (HTTPS), limit access to the data to the people who need it, and keep IP addresses for rate limiting only as salted one-way hashes.

  9. 09 Changes to this policy

    We may update this policy — for example when the long-term OptiSync company structure is finalised. The version at the top changes with every update, and each acknowledgement is stored together with the version you saw.