One connected workspace for office and field. Explore the platform →

ServeLume

Trust & transparency

ServeLume GDPR information

Effective 30 October 2026.

This page explains how European and UK data-protection requests are handled for ServeLume, operated by Synoviq, Inc. It supplements the Privacy Policy. It is effective 30 October 2026. It does not mean that every organisation using ServeLume is subject to the GDPR, or that using the software makes that organisation compliant. The business and Synoviq each have to look at the activity, the people affected, and the law that applies.

Roles

Synoviq, Inc. is the controller for the marketing website, for the account credentials it administers, for platform security, and for support it provides. A person can ask Synoviq about that processing.

The service business is the customer. It chooses the job, customer, staff, photo, and site information placed in the workspace. That business is the controller for that workspace data. Synoviq operates the software. A request about a customer’s job history, an invoice, or a photograph taken for the business should be sent to the business. Synoviq does not replace the business as the controller of those records merely because the records are stored in ServeLume.

What the field app processes

For a signed-in technician, processing can include the company account identifiers, the phone number used for a WhatsApp or SMS verification code, precise location while a job is on the way or in progress, photos, a customer signature, and pending job commands stored on the device until they are sent. Location, camera, photo library, and Bluetooth access are permission-based and limited to that job workflow. The app does not track every technician all day.

Card data for an on-site charge is processed by Stripe. A card charge is not queued on the device. Optional Google Analytics and Meta Pixel on the marketing website run only after the visitor consents in Cookie settings.

Requests to Synoviq

A person can email developers@synoviq.com to request access, correction, deletion, or restriction of personal information for which Synoviq is the controller, or to object to that processing, where the applicable law provides that right. The message should name the business workspace and the account email. Synoviq may need to confirm identity and authority before it discloses or changes information. Do not send passwords, one-time codes, identity-document images, or complete card numbers in the first message.

Closing a technician account is done in ServeLume Field by the signed-in person. That action calls DELETE /api/v1/me/account, the route named api.v1.me.account.delete. It deactivates the login and revokes its tokens. It does not erase the business’s jobs, invoices, or other records the business must keep. See account deletion.

Requests to the service business

Where the service business is the controller, that business decides the response. Synoviq can, when the business instructs it or when the law that applies to Synoviq requires it, help locate the workspace or carry out a technical step the product already supports. Synoviq does not promise that a technician’s account deletion will remove another person’s job history.

International processing

Workspace hosting and the providers named in the Privacy Policy, including Stripe, Meta, Twilio, and, after consent, Google and Meta Pixel, can process information outside the country where the technician or the end customer is located. The service business is responsible for the transfer terms that apply to its own customer data. Synoviq uses those providers for the functions described in the Privacy Policy.

Complaints

A person may contact a data-protection authority that has jurisdiction. They may also write to developers@synoviq.com first so Synoviq can address a request about processing it controls. Nothing on this page removes a right that applicable law gives the person.