Syscon One Privacy Policy

Effective date: August 12, 2026

This policy explains what information Syscon Information Systems, Inc. ("Syscon," "we," "us") collects through Syscon One, how we use it, and the choices you have. We have tried to write it the way we would want to read it: plainly and specifically.

1. Who we are and what this policy covers

Syscon Information Systems, Inc. builds and operates Syscon One, a business software platform and app marketplace for construction companies.

This one policy covers both of our online properties:

• The Site — the public pages at syscon-one.com and its subdomains, including our marketing pages.
• The Platform (called the "Services" in our Terms of Service) — the Syscon One platform, portal, and marketplace apps at app.syscon-one.com and related addresses, used by businesses ("Customers") and the individuals who sign in through a Customer's Microsoft 365 account ("Users").

If your company has a signed agreement with Syscon (such as a pilot or services agreement), that agreement governs how we handle your company's data wherever it addresses the subject; this policy describes our practices generally.

2. The two roles we play

Understanding this policy is easier if you know that we handle information in two distinct ways:

Information we collect for ourselves. When you visit the Site, sign in to the Platform, contact support, subscribe to our newsletter, or participate in the Idea Lab, we collect that information for our own purposes and this policy governs it directly.

Customer Data we process for your employer. The data your company or its Users enter into the Platform's apps, and the data flowing through the systems your company connects — for example, its Sage 100 Contractor database (which can include payroll records), its Microsoft 365 tenant, or other systems — belongs to the Customer, and we process it on the Customer's behalf and at its direction. Where a marketplace app connects to your company's Microsoft 365 tenant, it requests specific Microsoft permissions that your company reviews and consents to for that app; data accessed under those permissions is Customer Data processed on your employer's behalf. Customer Data can include information about you as the Customer's employee, such as payroll data.

If you are an employee of a Syscon One Customer and have questions about, or want to access or correct, data your employer runs through the Platform — including payroll data — please contact your employer. Your employer controls that data; we process it on their instructions. We will refer any request we receive about Customer Data to the relevant Customer.

3. Information we collect

On the Site

• Analytics. The Site uses Google Analytics to help us understand how visitors use it. Google Analytics uses cookies and collects information such as your IP address, browser and device information, and the pages you visit; that information is processed by Google.
• Fonts and embedded resources. The Site loads fonts from Google Fonts; when your browser requests them, Google receives your IP address and browser information as part of the request.
• Forms. If you submit a form on the Site (for example, a contact or interest form), we collect the information you provide.

If we add Site features that collect other kinds of information, we will update this policy.

On the Platform

When you use the Platform, we collect:

• Account and identity information. Sign-in is exclusively through Microsoft Entra single sign-on. When you sign in, we receive your name, work email address, and Microsoft 365 identifiers from your employer's Microsoft 365 tenant, and we store them in a database dedicated to your company. We never collect or store your user account password — authentication happens entirely through Microsoft.
• Usage information. The Platform automatically records events such as sign-ins, when you open and close an app, errors, and related technical details (IP address, browser user-agent, the page you entered on, and the referring page). Each record is associated with your company, your user ID, and the app involved. We may use error- and performance-monitoring tools (our own or third-party) to capture diagnostics.
• Cookies. Signing in and staying signed in uses strictly necessary cookies — a session cookie we set after you sign in, and Microsoft's own sign-in cookies on Microsoft's domains. We do not use advertising or cross-site tracking cookies on the Platform.
• AI usage records. When you use an AI feature, we record metadata about each request — such as the model used, tokens in and out, response time, and an estimated cost — associated with your user ID. We use these records to enforce usage limits and for billing.
• Support and feedback. When you contact support or submit a feature request, we collect what you send us plus context about the app you were using, managed through our service-desk systems.
• Newsletter signup. You can subscribe to our newsletter, or your company may subscribe its Users. We record the time and source of each subscription, and every marketing email includes a one-click unsubscribe.
• Idea Lab activity. Ideas you post, votes you cast, and comments you make (see Section 6, because visibility works differently there).
• Records from our existing relationship with your company. Some apps and dashboards display records Syscon already holds about your company from our existing service relationship (for example, support and service history).
• Billing information. We invoice Customers through Syscon's existing accounts-receivable process. The Platform does not collect payment-card numbers, and there is no card on file.

The categories of personal information above are: identifiers (name, work email, Microsoft account identifiers), device and connection information (IP address, browser user-agent), professional information (your employer and role context), internet activity (usage and telemetry records), and the contents of communications you send us.

4. How we use information

We use the information described in Section 3, and the information we process for Customers, to:

• provide, operate, maintain, secure, support, and bill for the Site and the Platform;
• communicate with you about the Platform, including service notices and — if you or your company subscribed — our newsletter;
• tell you about other Syscon products and services that may be relevant to you or your company (you can opt out of marketing email at any time);
• prevent fraud, abuse, and security incidents, and comply with law;
• understand product usage and gauge interest in new apps (including Idea Lab signals, per Section 6); and
• analyze, improve, and develop our products and services, including developing, training, tuning, testing, and evaluating AI and machine-learning features and models.

To administer and bill the Platform, we also maintain internal operational views that list user accounts across Customers; these views are available only to Syscon.

5. What your employer can see

Because you use Syscon One through your employer's account, your employer's designated administrators can see your activity on the Platform — which apps you use, how often, and your individual AI usage and its cost. Syscon staff can see the same operational records in order to run and support the Platform. If you have questions about how your employer uses this visibility, ask your employer.

6. Idea Lab visibility

The Idea Lab is a shared space where users across different companies post and vote on app ideas, so its defaults are more public than the rest of the Platform:

• Idea Lab content is visible to users at other companies. We may display contributions with an abbreviated attribution — for example, your first name and last initial.
• Syscon has full visibility into Idea Lab activity, and we use it as a product and sales signal: when an idea draws broad interest, our sales and product teams may review who showed interest, including companies and individual users. Users who supported an idea may be notified when it ships.

Do not post confidential information in the Idea Lab.

7. Who we share information with

We share personal information with the following categories of recipients, and with other service providers that help us run the Site, the Platform, and our business:

• Hosting and infrastructure providers — Microsoft Azure is our primary host; we may also use other hosting and infrastructure providers.
• Analytics and monitoring providers — such as Google (Google Analytics and Google Fonts on the Site) and error- and performance-monitoring tools used with the Platform.
• AI model providers — third-party providers whose models generate responses when you use AI features (see Section 8). The specific providers may change over time.
• Email delivery providers — for sending transactional and marketing email on our behalf.
• Service-desk and support tooling — the systems we use to manage support requests.
• Your employer — as described in Section 5.
• Professional advisors and authorities — lawyers, accountants, and auditors under confidentiality obligations, and government authorities where the law requires it.
• A successor business — if Syscon is involved in a merger, acquisition, or sale of assets, in which case this policy would continue to apply to your information until changed per Section 14.

We do not sell personal information to anyone. Nevada residents: we do not sell "covered information" as defined by Nevada law; you may submit questions or opt-out-of-sale requests to customersupport@syscon-inc.com.

8. AI features

When you use an AI feature in a Syscon One app, the relevant inputs — which can include your company's business data — are sent to a third-party model provider to generate a response at the time of your request. We access AI models through established commercial providers, under commercial terms that restrict the providers' own use of the content they process for us, including using it to train their models. The specific providers and models may change over time.

Syscon's own use of information in connection with AI features is described in Section 4. AI outputs should be reviewed before you rely on them; they are not professional advice.

9. Security

We use commercially reasonable administrative and technical safeguards for the Platform, including:

• Sign-in through Microsoft. We never store your user account password; authentication happens through Microsoft Entra.
• Separation between customers. The Platform is designed to keep each Customer's data separated from other Customers'.
• Encryption. Data is encrypted in transit and at rest.
• Controlled staff access. Syscon staff access to customer environments is limited to what is needed to operate and support the Platform.
• No payment cards. The Platform does not collect payment-card numbers.

The Platform is hosted in data centers located in the United States.

Social Security numbers. Where the Platform processes Social Security numbers (for example, within a Customer's hosted payroll data), we protect their confidentiality, prohibit their unlawful disclosure, and limit access to them.

We intentionally do not publish detailed security architecture. No system is perfectly secure, and we do not promise ours is.

10. How long we keep information

• Canceled app subscriptions: data associated with a canceled app subscription is retained for 30 days — during which the subscription can be restored — and may be deleted after that. Copies may remain in routine backups for a period afterward.
• Account and Customer Data generally: we retain it while your company's account is active and as long as needed to run the Platform, meet our legal and accounting obligations, and resolve disputes. A Customer may request deletion of its data by contacting us; we honor verified requests subject to our legal and contractual obligations.
• Operational records: we keep logs and operational records as long as needed for security, troubleshooting, and service improvement.

11. Your choices and rights

• Marketing email: every marketing email includes a one-click unsubscribe, honored everywhere. Transactional email (invoices, service notices) continues as long as your company has an account.
• Review and correction: you may ask us to review, correct, or delete personal information we hold about you for our own purposes by contacting customersupport@syscon-inc.com. We will respond to verified requests within a reasonable time.
• Customer Data: requests about data we process on your employer's behalf — including anything in your employer's Sage 100 Contractor database — go to your employer, who controls it.

12. Children

Syscon One is business software for construction companies. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

13. Do Not Track and third-party tracking

Because the Site uses Google Analytics and Google Fonts, Google may collect information about your online activities over time and across different websites when you use the Site. We do not respond to browser "Do Not Track" signals. On the Platform, we do not use advertising or cross-site tracking, and we do not permit third-party advertising networks to collect information about you there.

14. Changes to this policy

When we change this policy, we post the updated version on this page with a new effective date — checking this page is the way to see the current policy. Material changes may also be highlighted on the Site or in the Platform.

15. Contact us

Questions, requests, or concerns about this policy or your information:

Syscon Information Systems, Inc.
P.O. Box 7721, Cave Creek, AZ 85327
Email: customersupport@syscon-inc.com

If you are a Customer with a signed agreement, your agreement's notice provisions also apply.