Privacy policy

This policy explains how Sync400 handles personal data and other information when you visit sync400.com, use the Sync400 service (the web app where you set up and monitor copies of your IBM i data), and use the SyncTunnel app for Windows.

1. Who we are

Sync400 is a sole proprietorship of Mohammed Hussain, based in Bengaluru, Karnataka, India (“Sync400”, “we”, “us”). Mohammed Hussain, trading as Sync400, is responsible for the personal data described in this policy (the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023). You can reach us at [email protected].

2. This website

• sync400.com is a plain information website. It sets no cookies, uses no analytics, and loads no advertising, tracking or third-party scripts or fonts.
• Like any website, the hosting provider that delivers these pages (Cloudflare) processes technical data such as your IP address and browser details in order to deliver the pages and protect the site from abuse. We do not use this data to identify or profile visitors.
• If you email us, we receive your email address and whatever you include in your message, and we use it only to reply to you.

3. The Sync400 service

When your organisation uses the Sync400 web app, we process:

• Account information from your Microsoft work or school sign-in: your name, work email address, and the Microsoft identifiers for you and your organisation. We use these to sign you in, to place you in your organisation’s account and to apply its roles. We never see your Microsoft password.
• System information about the IBM i systems you connect, such as the system name, serial number and partition, so we can set up workspaces and apply plan limits.
• Service records: connection status, catalog information you ask for (library, file and column names and types, row counts, whether a file is journaled), copy progress and timings, journal positions reached, error messages and an activity log of actions taken in your account.
• Billing information: paid plans are sold through Paddle, which acts as merchant of record and processes your payment details under its own privacy policy. We receive details such as the plan, the billing contact and the payment status, not your full card number.

The Sync400 web app uses cookies or similar storage that are strictly necessary to keep you signed in and to protect your session. It does not use advertising or analytics cookies.

The Sync400 service is designed so that it does not store the contents of your business rows. Error messages from your IBM i or PostgreSQL can occasionally quote a key value from a row that failed; we keep such messages only so you can see and fix the problem.

4. The SyncTunnel app for Windows

SyncTunnel connects your IBM i to the Sync400 service so you can copy IBM i files into your own PostgreSQL database.

What stays on your PC

What SyncTunnel sends to Sync400

SyncTunnel keeps one encrypted outbound connection (HTTPS on port 443) to Sync400. Over it, it sends only:

• Pairing: the one-time pairing code you enter and this PC’s Windows computer name, so you can tell your PCs apart in the web app. Sync400 then gives the PC a random device ID and token. No hardware serial numbers are read.
• Connection status: whether SyncTunnel is signed on to the IBM i or why not (for example “not reachable” or “sign-on failed”), the IBM i host name you entered, the IBM i release, whether TLS is on, the port used, the number of days until the IBM i password expires, whether the journal can be read, and the time of the last check. Your IBM i profile name and password are not included.
• Catalog information you ask for in the web app: library, file and column names and types, row counts from IBM i catalog statistics, and whether a file is journaled.
• Copy progress: which files are being copied, row and journal entry counts, speed, timings and the journal positions reached.
• Errors: the error text from the IBM i or PostgreSQL when a step fails, so you can see it in the web app.

What SyncTunnel does not do

• It does not send row data to Sync400.
• It does not change anything on your IBM i and installs nothing there. It only reads catalog views, the files you choose and journal entries.
• It does not run commands from Sync400 other than a fixed list of read and copy actions built into the app.
• It does not collect advertising IDs, contacts, location, browsing history or files outside its own folder.
• If the IBM i refuses a sign-on, it stops and asks you to enter the password again instead of retrying, so it will not use up your profile’s allowed sign-on attempts.

Removing SyncTunnel and its data

• Unpair this PC: run synctunnel unpair on the PC to delete its device token.
• Uninstall: use Windows Settings > Apps. Windows removes the app and its %LOCALAPPDATA%\SyncTunnel folder. Windows does not remove Credential Manager entries automatically, so delete the “SyncTunnel” entries in Control Panel > Credential Manager > Windows Credentials.

5. How we use information

We use the information described above only to:

• provide the service you or your organisation asked for: sign-in, pairing, showing status and running the copies you start;
• help you when something fails and answer your support requests;
• manage subscriptions and billing;
• keep the service secure and prevent misuse; and
• meet our legal obligations, for example keeping tax and invoice records.

We do not sell personal data, share it for advertising, or use it to build marketing profiles.

6. Service providers

We use a small number of providers to run Sync400. They process data on our behalf and only as needed to provide their service:

• Amazon Web Services: hosting of the Sync400 service, in the United States.
• Cloudflare: website hosting, domain name service and network protection.
• Microsoft: work or school account sign-in (Microsoft Entra ID), and distribution of SyncTunnel through the Microsoft Store.
• Paddle: payments and subscriptions, as merchant of record.
• Zoho: our business email.

Because some of these providers operate outside India, your information may be processed in other countries, including the United States. We may also disclose information if the law requires it.

7. How long we keep it

We keep account information for as long as your organisation’s account is open. We keep status, progress and error records only as long as they are useful for showing you history and helping with support. When an account is closed, we delete its personal data within a reasonable period, except records the law requires us to keep, such as invoices and tax records. Information that SyncTunnel keeps on your PC stays under your control until you remove it as described above.

8. Security

Connections between SyncTunnel, your browser and Sync400 are encrypted with HTTPS. Passwords for your IBM i, PostgreSQL and proxy never leave your PC. We limit access to service data to what is needed to run and support the service. No system is perfectly secure, so if we become aware of a personal data breach that affects you, we will notify you and the authorities as the law requires.

9. Your rights

Depending on where you are, you may have rights over your personal data. Under India’s Digital Personal Data Protection Act, 2023, where it applies, you can:

• ask for a summary of the personal data we process about you and how we process it;
• ask us to correct, complete, update or erase your personal data;
• withdraw consent where we rely on your consent, without affecting processing already done;
• nominate another person to exercise your rights if you die or become unable to; and
• raise a grievance with us, and if you are not satisfied with our response, complain to the Data Protection Board of India.

If you are in another country, you may have similar rights under your local law. To use any of these rights, email [email protected]. We may need to confirm your identity first. If your organisation manages your Sync400 account, we may refer your request to your organisation’s administrator.

10. Children

Sync400 and SyncTunnel are business tools for organisations. They are not intended for, or directed at, anyone under 18, and we do not knowingly process children’s personal data.

11. Changes to this policy

We will post any changes on this page and update the effective date above. If a change is significant, we will also tell account administrators by email.

12. Contact and grievances

For privacy questions, requests or grievances, contact:

Mohammed Hussain, trading as Sync400
Bengaluru, Karnataka, India
[email protected]