Privacy Policy

1. Introduction

SYNQ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automotive marketplace automation service, including our website, dashboard, and desktop application (collectively, the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you register, we collect your email address, password, and dealership name. Authentication is handled by Supabase Auth; we do not store a readable copy of your password in our application database.
• Business Information: Dealership name, city and state, website URL, inventory source URLs, and listing preferences you provide.
• Payment Information: If you subscribe to a paid plan, payment processing is handled by our third-party payment processor (Stripe). We do not store your full credit card number.
• Communications: Any correspondence you send to us via email or support channels.

2.2 Information Collected Automatically

• Operational Data: Sync, post, edit, sold-status, account, and billing events needed to operate the Service, including timestamps and error details.
• Website Analytics: Page paths, referrers, approximate country, browser, operating system, and device type collected through Vercel Web Analytics. Vercel provides this data to us in anonymized form without analytics cookies.
• Log and Performance Data: Request information, access times, IP addresses processed by our infrastructure providers, error logs, and performance measurements used for reliability and security.

2.3 Information from Third Parties

• Your Website/Inventory: We scrape publicly available vehicle inventory data from your dealership website as directed by you.
• Facebook Sign-In and Session Data: You enter your Facebook credentials directly on Facebook pages opened by SYNQ Desktop. SYNQ does not store your Facebook password. The resulting browser profile, session cookies, and tokens stay on your computer and are used by that local browser to communicate with Facebook; they are not uploaded to SYNQ cloud servers.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Sync your vehicle inventory from your website
• Generate listing descriptions using vehicle information and your style preferences
• Create and manage listings on Facebook Marketplace on your behalf
• Send administrative notifications, updates, and security alerts
• Respond to customer service requests and support needs
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Data Storage and Security

4.1 Where Data is Stored

• Cloud Data: Account profile information, inventory and listing data, job records, settings, and billing references are stored in databases hosted by Supabase. The web application and related telemetry are hosted by Vercel.
• Local Desktop Storage: Facebook session files, the persistent browser profile, login cookies, and related browser settings are stored on the computer running SYNQ Desktop and are not synchronized to SYNQ cloud servers.

4.2 Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit and provider-managed encryption at rest
• Row-level security policies in our database
• Secure authentication via Supabase Auth
• Access controls limiting employee access to data
• Encrypted local storage for sensitive SYNQ Desktop configuration

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: Supabase provides authentication, databases, and realtime services; Vercel provides hosting, anonymous web analytics, and performance monitoring; Stripe processes billing and payments; Firecrawl retrieves public inventory pages; OpenAI processes vehicle details and style examples to generate listing descriptions; and Resend delivers service and support emails. These providers process information for the functions described here under their applicable terms and data-protection commitments.
• Facebook: At your direction, SYNQ Desktop sends listing content and actions to Facebook through the Facebook account signed in on your computer.
• Legal Requirements: We may disclose information if required by law, court order, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share information with your explicit consent for purposes not covered by this policy.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a portable format.
• Objection: Object to certain processing of your personal data.

To exercise these rights, please contact us at privacy@autosynq.io. We will respond within the timeframe required by applicable law.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When account deletion completes, active account, inventory, listing, and job records associated with the account are removed from our primary application database. Some information may remain for a limited period in provider backups, security logs, or records we must retain for legal, fraud-prevention, tax, or accounting purposes.

8. Cookies and Tracking

We use essential cookies to maintain your signed-in web session. Vercel Web Analytics measures page traffic without analytics cookies, and Vercel Speed Insights collects performance measurements. You can control cookies through your browser settings, but blocking essential cookies may prevent sign-in and other Service functionality.

9. Third-Party Links

Our Service may contain links to third-party websites (e.g., Facebook Marketplace). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

11. California Privacy Rights

If applicable to our processing and your request, California law may provide rights under the California Consumer Privacy Act, as amended (CCPA):

• Right to know what personal information is collected and how it is used
• Right to request deletion of personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

12. International Data Transfers

If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: