Privacy Policy
Last updated: March 17, 2025
Data Security
Your data is privated in your own cloud space and secured with industry-standard measures
Transparency
Clear and comprehensive data handling practices
Data Control
You have full control over your data and privacy settings
Our Privacy Commitment
We use your data solely for improving our services and your experience. We never sell your personal information to third parties. Your trust is our priority, and we are committed to transparency and giving you full control over your data.
Your Privacy Matters
At Syncpoly, we take your privacy seriously. This comprehensive Privacy Policy explains how we collect, use, store, and protect your personal information. We are committed to transparency and giving you control over your data.
Information We Collect
Account Information
- Name, email address, and password for account creation
- Profile information including family relationships
- Account preferences and settings
- Authentication and security information
- Payment and billing information (processed securely by Stripe)
Content and Media
- Photos and videos you upload to Syncpoly
- Album information, descriptions, and metadata
- Sharing permissions and collaboration settings
- Comments and interactions within albums
- AI enhancement preferences and settings
Usage and Technical Data
- How you interact with our services and features
- Device information (browser type, operating system)
- IP address and general location data
- Performance and error logs
- Analytics data (anonymized and aggregated)
Communication Data
- Email communications for account management
- Support requests and customer service interactions
- Marketing communications (with your consent)
- System notifications and alerts
- Invitation and collaboration messages
How We Use Your Information
Service Provision
- Provide and maintain our family photo sharing services
- Process your account registration and authentication
- Enable photo and video storage, sharing, and collaboration
- Deliver AI enhancement features and improvements
- Process payments and manage subscriptions
Service Improvement
- Analyze usage patterns to improve our services
- Develop new features based on user needs
- Optimize performance and fix technical issues
- Conduct research and development
- Ensure service reliability and security
Communication
- Send important account and service notifications
- Provide customer support and respond to inquiries
- Send security alerts and account updates
- Share product updates and new features (with consent)
- Facilitate family collaboration and invitations
Legal and Security
- Comply with applicable laws and regulations
- Protect against fraud, abuse, and security threats
- Enforce our Terms of Service and policies
- Respond to legal requests and court orders
- Maintain the integrity and security of our platform
How We Share Your Information
With Your Consent
- Share photos and videos with family members you invite
- Enable collaboration features you choose to use
- Process payments through secure third-party providers
- Send marketing communications (only with explicit consent)
- Use data for specific purposes you authorize
Service Providers
- Cloud storage providers (AWS, Google Cloud) for data hosting
- Payment processors (Stripe) for secure payment processing
- Email service providers for communications
- Analytics services (anonymized data only)
- Customer support and help desk services
Legal Requirements
- Comply with court orders and legal requests
- Respond to government investigations
- Protect against fraud and security threats
- Enforce our Terms of Service and policies
- Protect the rights and safety of our users
Business Transfers
- In the event of a merger, acquisition, or sale of assets
- With appropriate privacy protections in place
- Subject to the same privacy commitments
- With advance notice to users when possible
- Maintaining data protection standards
Data Security and Protection
Privating Media in Your Own Cloud Space
- Privating media in your own cloud space for all data in transit
- Privating media in your own cloud space for data at rest
- Secure authentication and access controls
- Regular security audits and penetration testing
- Multi-factor authentication options
Access Controls
- Role-based access controls for employees
- Limited access to personal data on a need-to-know basis
- Regular access reviews and monitoring
- Secure development practices and code reviews
- Employee privacy and security training
Data Breach Response
- Immediate incident response procedures
- Notification to affected users within 72 hours
- Coordination with law enforcement when appropriate
- Transparent communication about security incidents
- Steps to prevent future breaches
Your Privacy Rights
Access and Control
- Access your personal data and account information
- Update or correct inaccurate information
- Download your data in a portable format
- Delete your account and associated data
- Control your privacy settings and preferences
Data Portability
- Export your photos, videos, and account data
- Transfer your data to another service
- Download your content in standard formats
- Maintain control over your personal information
- Exercise your right to data portability
Marketing Preferences
- Opt out of marketing communications
- Control email preferences and frequency
- Manage notification settings
- Withdraw consent for specific data uses
- Update communication preferences anytime
Legal Rights (GDPR/CCPA)
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ('right to be forgotten')
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
Data Retention and Deletion
Retention Periods
- Account data: Retained while your account is active
- Content: Stored until you delete it or close your account
- Usage data: Retained for up to 2 years for service improvement
- Payment data: Retained as required by law (typically 7 years)
- Support communications: Retained for 3 years
Deletion Process
- Immediate deletion of accessible data upon account closure
- Secure deletion of all stored content and personal information
- Removal from active systems within 30 days
- Complete deletion from backups within 90 days
- Confirmation of deletion process completion
Backup and Recovery
- Secure backup systems for data protection
- Limited retention of backups for disaster recovery
- Secure deletion of backup data after retention period
- No access to deleted data after deletion period
- Compliance with legal retention requirements
Cookies and Tracking Technologies
Essential Cookies
- Authentication and session management
- Security and fraud prevention
- Basic site functionality and navigation
- Shopping cart and payment processing
- Account preferences and settings
Analytics and Performance
- Anonymous usage analytics to improve services
- Performance monitoring and error tracking
- Feature usage analysis (anonymized)
- Service optimization and development insights
- No personal identification in analytics data
Cookie Management
- Control cookie preferences in your browser settings
- Opt out of non-essential cookies
- Clear cookies and browsing data
- Manage tracking preferences
- Understand impact of cookie choices on service functionality
Children's Privacy
Age Restrictions
- Minimum age requirement of 13 years old
- Parental consent required for users under 16
- No knowingly collecting data from children under 13
- Special protections for teenage users
- Parental control and monitoring features
Family Accounts
- Parental oversight of family member accounts
- Age-appropriate content and feature restrictions
- Educational resources for digital safety
- Parental notification of account activities
- Easy parental account management tools
International Data Transfers
Data Location
- Primary data storage in secure, compliant data centers
- Use of approved international data transfer mechanisms
- Compliance with GDPR and local privacy laws
- Adequate protection for cross-border data transfers
- Transparency about data storage locations
Legal Compliance
- Compliance with GDPR for European users
- CCPA compliance for California residents
- Local privacy law compliance worldwide
- Standard Contractual Clauses for international transfers
- Regular compliance audits and updates
Third-Party Services
Service Providers
- Carefully selected third-party service providers
- Data processing agreements with all providers
- Regular security and privacy assessments
- Limited data sharing for specific service purposes
- Provider compliance with our privacy standards
External Links
- Links to external websites and services
- No control over external privacy practices
- Review external privacy policies before use
- No responsibility for external data handling
- Clear indication of external links
Changes to This Policy
Policy Updates
- Regular review and updates of privacy practices
- Notification of material changes via email
- Advance notice of significant policy changes
- Continued use constitutes acceptance of updates
- Historical policy versions available upon request
User Notification
- Email notification of policy changes
- In-app notifications for significant updates
- Clear summary of changes made
- Opportunity to review changes before acceptance
- Contact information for questions about changes
Contact Information
Privacy Team
- Email: privacy@syncpoly.com
- Data Protection Officer: dpo@syncpoly.com
- General inquiries: support@syncpoly.com
- Legal matters: legal@syncpoly.com
- Response time: Within 48 hours for urgent matters
Regulatory Authorities
- EU Data Protection Authorities (for GDPR matters)
- California Privacy Protection Agency (for CCPA matters)
- Other local privacy regulators as applicable
- Right to lodge complaints with authorities
- Cooperation with regulatory investigations
Your Data Rights
You have comprehensive rights over your personal data, including the right to access, correct, delete, and export your information. We make it easy to exercise these rights through your account settings or by contacting our privacy team.
Right to AccessRight to RectificationRight to ErasureRight to PortabilityRight to Object
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes via email or in-app notification. Your continued use of our services after such changes constitutes acceptance of the updated policy.
Data Security Standards
We implement industry-leading security measures including privating media in your own cloud space, secure authentication, regular security audits, and comprehensive access controls. Your data is protected with the same security standards used by major financial institutions.
Last updated: March 17, 2025
For privacy questions or to exercise your rights, contact us at privacy@syncpoly.com
Data Protection Officer: dpo@syncpoly.com