Privacy Policy

1. Data Controller

Sintropy S.r.l.
Registered office: Via Cesare Mangili 2, 20121 Milan, Italy
VAT no. 13822990969
WEEE Reg.: IT25120000017905
Email: privacy@sintropy.ai

2. Types of Data Collected

• Data you send us voluntarily through the "Request a free test" form, hosted by Tally: first name, last name, company and email; optionally phone number, annual energy spend and number of sites. We ask for nothing else: no password, no payment details.
• Technical browsing data processed by Cloudflare as our hosting and CDN provider: IP address, user agent and request logs.
• Subject to your consent only, interaction data collected by Microsoft Clarity: pages viewed, clicks, scroll depth and session recording (pointer movement and page scrolling).

3. Purposes and Legal Bases

• Replying to your free test request and getting back to you · basis: pre-contractual measures taken at your request (Art. 6.1.b) and/or consent (Art. 6.1.a).
• Keeping the site secure and running, technical logs included · basis: legitimate interest (Art. 6.1.f).
• Analyzing how the site is used through Microsoft Clarity · basis: consent (Art. 6.1.a).
• Complying with legal obligations · basis: legal obligation (Art. 6.1.c).

4. Retention Period

• Data sent through the form: it stays in our Tally account and in the sintropy-team@sintropy.ai mailbox for as long as it takes to handle your request, and in any case no longer than 24 months from the last contact.
• Cloudflare technical logs and data collected by Microsoft Clarity: kept according to the retention periods set by each provider.

Provider retention periods are set out in their own privacy policies: Cloudflare and Microsoft .

5. Data Recipients

Data may be processed by the providers listed below. Render, Cloudflare, Tally and Microsoft act as Data Processors (Art. 28 GDPR); the social embed providers process any data they collect as independent controllers, under their own privacy policies.

• Render Services, Inc. (United States) — website hosting.
• Cloudflare, Inc. (United States) — content delivery network in front of the site.
• Tally BV (Belgium) — hosting of the "Request a free test" contact form: collection and storage of the responses.
• Microsoft Corporation (United States) — Microsoft Clarity, analysis of how the site is used; active only with your prior consent.
• Meta Platforms, Inc. (United States) — Instagram feed embed on the Team page, loaded only if you ask for it.
• Elfsight — LinkedIn feed widget on the Team page, loaded only if you ask for it.

Some of these providers are based in the United States. For transfers of data outside the European Union we rely on the safeguards set out in Chapter V of the GDPR, such as the Standard Contractual Clauses approved by the European Commission or the provider's certification under the EU-US Data Privacy Framework, as set out in the contract signed with each provider.

6. Your Rights

You have the right to: access your data, rectify it, erase it, restrict its processing, object to processing, receive your data in a portable format and withdraw consent at any time. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

You can withdraw your consent to cookies and analytics tools at any time from the "Cookie preferences" link at the bottom of every page.

7. How to Exercise Your Rights

To exercise your rights, write to: privacy@sintropy.ai . We will reply within 30 days.

8. Changes to this Policy

We update this policy from time to time. The current version is v2.1 of August 24, 2026.