SYMPHONIC Privacy Policy
Digi Labs Core, LLC
Effective: July 30, 2026
This Privacy Policy explains how Digi Labs Core, LLC ("DLC," "we," "us," or "our") collects, uses, discloses, and protects your information when you use the SYMPHONIC platform and related services (the "Service").
1. INFORMATION WE COLLECT
We collect information you provide directly, including account registration details, payment information, and business data you enter into the Service. We also collect certain information automatically, such as usage data, device information, and IP addresses.
2. HOW WE USE YOUR INFORMATION
We use your information to provide, maintain, and improve the Service; process transactions; communicate with you about your account; and comply with legal obligations.
3. DATA OWNERSHIP
You retain all ownership rights to your data. We do not use customer data to train any artificial intelligence model. This applies to Digi Labs Core, LLC only. Third-party AI providers are governed by their own terms and privacy policies.
4. TENANT ISOLATION
Each customer account is provisioned as a separate tenant. Tenant data is logically isolated from other tenants. We implement access controls designed to prevent cross-tenant data access.
5. DATA SECURITY
We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.
5(a) Breach Notification
If we become aware of a security breach that compromises your personal information or your business data, we will notify you without undue delay, and in any event as required by applicable law.
6. DATA RETENTION
We retain your data for the duration of your active subscription. After cancellation or nonpayment, we provide a thirty (30) day grace period during which you may export your data. After that period, your data is permanently deleted. This Section 6 is the retention policy referenced in Section 12 of the SYMPHONIC Terms of Service.
7. ANALYTICS
We use Cloudflare Web Analytics to measure traffic on our marketing website. It does not use cookies, does not fingerprint visitors, and does not track visitors across other websites. Cloudflare processes this data on our behalf as a service provider. We do not share it with advertisers or third-party advertising networks.
8. THIRD-PARTY PROCESSORS
The Service transmits data to the following third-party processors for the purposes stated:
- Railway: hosting infrastructure
- Cloudflare, Inc.: content delivery, DNS, and website analytics
- Stripe: billing and payment processing
- Plaid: optional bank account verification
- Zip.tax: sales tax calculation
- Resend: transactional email delivery
- Google and Microsoft: OAuth-based email integration
- Cloud storage providers: as selected by the customer
- AI provider: assistant features. Where the customer supplies their own API key, the provider is the customer's choice. Where the customer has not supplied a key, we transmit to Anthropic.
These third parties have their own privacy policies governing the use of your information. We encourage you to review their policies.
9. AI AND DATA PROCESSING
SYMPHONIC connects to third-party AI providers to deliver its assistant features. Data submitted through those features is transmitted to the applicable provider and processed under that provider's own terms and privacy policy.
You may supply your own API key for a supported provider through your account settings. When you do, your data is transmitted to that provider under your own account and your relationship with that provider governs.
Where you have not supplied a key and we make AI features available using a key we provide, we transmit your data to that provider on your behalf, as a processor engaged by us. The provider in use is disclosed in Section 8.
Digi Labs Core, LLC does not use customer data to train any artificial intelligence model, and does not warrant the practices of any third-party AI provider.
10. EXPORT AND PORTABILITY
You may export your data at any time during your active subscription and during the thirty (30) day grace period after cancellation. Data is exported in a standard, machine-readable format.
11. USER RIGHTS AND CHOICES
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information. You may also opt out of marketing communications at any time.
12. ADMIN ACCESS DISCLOSURE
We may access your account data to provide support, maintain the Service, or investigate a security incident. Administrative access is restricted, logged, and audited. Where we use emergency administrative access to address an incident, security issue, or outage, we will disclose that access to the affected subscriber within twenty-four (24) hours.
13. CHILDREN'S PRIVACY
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
14. COOKIES AND TRACKING
We use cookies and similar tracking technologies to operate and improve the Service. You can control cookie preferences through your browser settings.
15. INTERNATIONAL DATA TRANSFERS
If you access the Service from outside the United States, your information may be transferred to and processed in the United States.
16. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service.
17. GOVERNING LAW
This Privacy Policy is governed by the laws of the State of Oklahoma, Tulsa County.
18. CONTACT INFORMATION
For questions about this Privacy Policy or to exercise your privacy rights, contact us at:
Digi Labs Core, LLC
2809 W 67th St, Tulsa, OK 74132-1771