Privacy Policy

1. Introduction

SyncFDA ("we", "us", "our") respects your privacy and is committed to protecting the data collected through our e-commerce integration platform, website (syncfda.com), and compliance filing services. This Privacy Policy outlines how we collect, use, store, and share information when merchants ("you", "User") use our software to automate FDA Prior Notice filings and carrier label integrations.

2. Information We Collect

To process cross-border compliance documentation and facilitate carrier label generation, SyncFDA collects information directly from your connected storefronts (e.g., Shopify) and carrier accounts:

• Merchant Account Data: Name, work email address, company name, storefront URL, and billing contact details.
• Order & Fulfillment Data: Order IDs, recipient shipping addresses, line items, quantities, declared values, and tracking numbers required for FDA filings.
• Product Catalog Metadata: Harmonized Tariff Schedule (HTS) codes, FDA Product Codes, Manufacturer/Facility Registration details, and Country of Origin values.
• Technical Logs: IP addresses, API request logs, and platform authentication tokens used to ensure system security and auditability.

3. How We Use Your Information

We strictly utilize collected data to deliver core compliance software services:

• Automating FDA Prior Notice (PNSI) submissions on behalf of the Exporter of Record.
• Retrieving Prior Notice Confirmation (PNC) numbers and injecting PNC barcodes onto carrier shipping labels (e.g., FedEx).
• Maintaining immutable audit logs of merchant approvals for regulatory record-keeping.
• Providing white-glove onboarding, customer support, and system health updates.

4. Third-Party Data Sharing

SyncFDA does not sell, rent, or monetize your customer or catalog data. Data is shared exclusively with necessary infrastructure providers to fulfill your service requests:

• Regulatory Authorities: Order metadata submitted directly to the U.S. Food and Drug Administration (FDA) and U.S. Customs and Border Protection (CBP) as mandated for cross-border shipments.
• Logistics & Carrier Partners: Carrier APIs (e.g., FedEx, EasyPost) utilized by your account to generate compliant shipping labels.
• Cloud Infrastructure: Enterprise-grade cloud hosting providers (e.g., Microsoft Azure) enforcing strict encryption at rest and in transit.

5. Data Retention & Security

We implement industry-standard encryption (TLS 1.3 in transit, AES-256 at rest) to protect sensitive order data. Order and compliance filing logs are retained for as long as necessary to meet regulatory record-keeping obligations required for international trade audits.

6. Contact Us

For questions regarding this Privacy Policy or your data, contact our compliance engineering team at [email protected].