Privacy Policy

Information We Collect

We may collect the following categories of information:

• Account information such as your name, email address, and login credentials.
• Workspace data such as drafts, scheduled posts, connected accounts, and media uploads.
• Billing information processed through third-party payment providers such as Stripe.
• Technical information such as IP address, browser type, device information, and logs needed to operate and secure the service.
• Social platform authorization data and related account metadata required to publish content on your behalf.

How We Use Information

• To create and manage your account and workspace.
• To upload, store, schedule, and publish content you choose to send to social platforms.
• To process payments, subscriptions, and account administration.
• To secure the service, monitor abuse, troubleshoot issues, and improve performance.
• To communicate service updates, authentication messages, and support responses.

How We Share Information

We do not sell your personal information. We may share information only as needed:

• With infrastructure providers that help operate the service, such as hosting, database, storage, email, and billing vendors.
• With social platforms you choose to connect, including TikTok, Meta, YouTube, LinkedIn, Telegram, Discord, Slack, and X.
• When required by law, legal process, or to protect the security and integrity of the service.
• In connection with a business transfer such as a merger, acquisition, or asset sale. Where Google's user-data rules require it, transferring Google user data also requires your prior explicit consent.

Connected AI Assistants

When you link ChatGPT or another supported assistant, you authorize access to the workspace shown on the consent screen. Requested tool results can include your workspace name and usage, brand profiles, social account labels, media links, captions, drafts, schedules, and publishing results. These results are shared with the assistant provider to carry out your request and are subject to that provider's privacy terms. Your social account passwords and secret API keys are not included in tool results.

For YouTube, connection results include your channel name, handle, connection status, and posting capabilities so the assistant can identify your chosen destination. Publishing results can include the video identifier and status. YouTube subscriber counts and channel thumbnails are excluded from assistant connection results. The assistant provider receives the results of the tools it requests; review that provider's data controls before connecting.

Content generation sends the relevant business brief, website content, prompts, or media to the AI and media services used for that feature, including an AI provider you configure in your workspace. We store workspace authorization and usage records to control access and enforce limits. Disconnect an assistant in Settings to stop further access. Disconnecting does not remove data already shared with the assistant or cancel posts already scheduled; manage those posts in your publishing queue. Contact us to request deletion of your workspace data, subject to the retention requirements described below.

Google Sign-In and YouTube

If you choose Google Sign-In, our authentication service receives your Google account identifier, email address, name, and profile picture to sign you in and maintain your Sync Socials profile. We do not receive your Google password. Connecting a YouTube channel is a separate authorization used for the YouTube features you choose.

Sync Socials uses YouTube API Services. For a connected channel, we access and store its identifier, name, handle, thumbnail, subscriber count, authorization permissions, and encrypted access and refresh tokens. We retrieve channel performance reports and statistics for videos published through Sync Socials, including views, likes, comments, shares, watch time, average view duration, and subscriber gains and losses when available. We retain the original daily report fields and video-statistics responses alongside the values used in our reports. We use them to display daily and selected-period totals for each connected YouTube channel and the performance of its published videos. These channel and video metrics describe aggregate activity, rather than individual viewer profiles. We also use channel and video information to identify destinations and check whether a connection or published video remains available. We store a hashed Google authorization identifier to recognize connections that share the same Google grant; this is a linkable identifier, not anonymous data.

When you request a YouTube upload, we send Google the video and the title, description, privacy choice, and other publishing settings you provide. Google returns video identifiers and publishing status that we store with the post. Infrastructure providers process this information to operate the service. If you connect an assistant, the information described under Connected AI Assistants can also be sent to that provider.

We use connected YouTube data for the publishing, reporting, and connection-management features described here. We do not use or transfer that data for advertising targeting, data-broker services, creditworthiness assessments, or lending decisions. The separate use of Google Sign-In profile fields for advertising measurement with your permission is described under Cookies and Similar Technologies below.

Disconnect YouTube in Connections to stop that local connection and remove its saved channel identity, credentials, and associated performance data from the active workspace. Disconnection starts a Google revocation process. We send the revocation request once we can identify the shared authorization and confirm that it does not supersede a newer connection. If that check is unavailable, revocation remains pending and is retried. Connections sharing that Google authorization can also be removed and may need to reconnect. A separate revocation record temporarily retains the encrypted credential needed for retries; it is cleared on success, when a newer authorization prevents automatic revocation, or by the retry worker when its six-day retry period ends. If a newer authorization is found, we preserve it and ask you to review Google permissions yourself; revoking access there can also affect that newer connection. If Google revocation remains unconfirmed, Connections displays a notice directing you to remove access in your Google security settings.

Disconnecting does not delete your original drafts or uploaded source media, your billing records, or videos already published on YouTube. A queued YouTube destination that loses its connection must be selected again before publishing; it is not moved to another channel. To delete a published video from YouTube, use YouTube's own controls. Reconnecting does not guarantee that deleted local performance history can be recovered.

You can also revoke access through your Google security settings or request deletion by emailing contactsyncsocials@gmail.com. Local disconnection does not immediately erase prior copies in backups or operational logs; see Data Retention below. Google handles information under the Google Privacy Policy.

Website Support Chat

If you use our AI support chat, we process your messages, the page path where the conversation began, and any name or email you provide for follow-up. Messages are sent to OpenAI to generate answers and conversation summaries. We store conversations to provide support and identify product improvements. Summaries, recent message excerpts, and supplied follow-up details may be sent to our support team through Telegram. The assistant does not have access to your workspace or billing account.

Please do not share passwords, API keys, sign-in codes, payment card details, or private customer data. We try to remove common secret formats, but automatic redaction is not guaranteed. A temporary conversation credential is stored in your browser session to let you continue the chat. We also use short-lived, hashed network identifiers to limit abuse.

Support transcripts are scheduled for deletion from our application database after 30 days by routine maintenance. Telegram copies, provider records, backups, and follow-up correspondence are separate and may remain under their respective retention policies. Contact contactsyncsocials@gmail.com with your conversation reference to request access or deletion, or email us directly if you prefer not to use AI chat. Human follow-up is requested separately and is not guaranteed to be immediate.

Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies to keep you signed in, maintain your session, remember preferences, and understand basic product usage and performance. With your permission, we also use the Meta Pixel and Meta Conversions API to measure registrations, trials, subscriptions, and purchases that may follow an advertisement. This may involve sharing hashed account identifiers and technical information such as IP address, browser information, and Meta attribution cookies with Meta. You can decline optional advertising cookies when prompted.

With that advertising permission, account identifiers can include hashed email and name fields from your Sync Socials profile, including fields supplied by Google Sign-In. The advertising conversion payload does not include your YouTube channel reports or video performance statistics.

Optional First-Party Site Analytics

When this feature is enabled, a separate analytics choice lets you allow or decline measurement on our marketing site and app. Advertising consent does not grant this permission. If you allow it, we use a random browser identifier that resets each UTC day to count visits across these two sites. We store visit timestamps and short campaign, source, medium, content and referral labels, without full URLs, IP addresses, user agents or fingerprinting in this analytics dataset. A referring hostname may be used as a source.

We remember the first consented campaign touch for up to 30 days in a cookie shared between sync-socials.com and app.sync-socials.com. On signup, its labels are linked to your workspace to understand subsequent trial and subscription outcomes. We retain those workspace labels until workspace deletion, subject to backup retention; daily visit records are removed after 180 days during collection. Your consent choice lasts up to 180 days. The daily identifier expires at the next UTC midnight.

Use the Analytics privacy button to change your choice. Declining removes these analytics cookies and stops future measurement; it does not erase previously recorded visits or workspace labels. Contact us for deletion requests. We respect Global Privacy Control and Do Not Track for this optional feature. These records are not sent to Meta; the separate advertising measurement described above has its own consent.

Data Retention

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Connected account tokens, uploaded media, and workspace data may remain stored until you delete them or close your account, subject to backup and legal retention requirements.

For retained YouTube connections, scheduled maintenance checks Google authorization, refreshes channel metadata, and checks whether published videos remain available. If a check confirms that authorization is invalid or the channel is unavailable, we remove its local connection and associated performance data. If channel data cannot be refreshed, or a saved video reference cannot be verified, for 30 days, maintenance removes the affected local connection or video data. Checks run in batches, so service outages or a processing backlog can delay a check or removal. These checks do not independently refresh every historical analytics record; historical reports can remain while the associated authorization and channel remain valid.

The YouTube disconnection process described above removes data from the active service. Encrypted backups and operational logs may contain earlier copies and have separate retention schedules. We do not promise that all backup or log copies are erased immediately on disconnection. Contact us for the status and scope of a deletion request.

Security

We use reasonable administrative, technical, and organizational safeguards to protect your information. Saved YouTube access and refresh tokens, including credentials temporarily retained for revocation retries, are encrypted using AES-256-GCM. Our YouTube integration sends authorization and API requests to Google over HTTPS. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Choices

• You may update or disconnect connected social accounts from your workspace.
• You may delete drafts, media, and other content you upload to the service.
• You may stop using the service at any time.

Privacy Questions and Deletion Requests

Email contactsyncsocials@gmail.com with privacy questions, complaints, or deletion requests. Include your workspace and the connected channel concerned so we can verify ownership and identify the data. Do not send passwords or authorization tokens. More instructions are on our data deletion page.

Children’s Privacy

Sync Socials is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the effective date above.