Privacy Policy
Last updated: August 22, 2025
Data Security
Your data is privated in your own cloud space and secured with industry-standard measures
Transparency
Clear and comprehensive data handling practices
Data Control
You have full control over your data and privacy settings
Our Privacy Commitment
We use your data solely for improving our services and your experience. We never sell your personal information to third parties. Your trust is our priority, and we are committed to transparency and giving you full control over your data.
AI Processing Notice
Important: Your data is only processed by third-party AI service providers when you actively choose to use AI enhancement features. If you never use AI features, your data remains completely secure on our servers and is never shared with third parties. You can easily opt-out by simply not using AI enhancement features - no settings or action required.
Optional Features OnlyNo Automatic ProcessingGDPR Compliant
Your Privacy Matters
At Syncpoly, we are deeply committed to protecting your privacy and ensuring the security of your personal information. This comprehensive Privacy Policy provides detailed information about how we collect, process, store, and safeguard your data. We believe in complete transparency regarding our data practices and are dedicated to giving you full control over your personal information. This policy applies to all users of our family photo sharing platform and explains your rights under applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Information We Collect
Account Information
- Personal identification information including your full name, email address, and secure password for account creation and authentication purposes. This information is essential for providing you with secure access to our platform and ensuring that only authorized users can access your family's shared content.
- Profile information including family relationships, member connections, and account hierarchy details. This information helps us provide personalized family sharing features and ensures that content is shared appropriately within your designated family groups.
- Account preferences and settings including language preferences, notification settings, privacy controls, and interface customization options. These settings allow us to provide you with a personalized experience that meets your specific needs and preferences.
- Authentication and security information including login history, device information, and security tokens. This information is crucial for maintaining the security of your account and detecting any unauthorized access attempts.
- Payment and billing information including subscription details, payment method information, billing history, and credit card information. This information is collected and processed securely by our trusted payment processor, Stripe, and is necessary for managing your subscription and providing premium features. We do not directly store or process your credit card information - all payment data is handled securely by Stripe in compliance with PCI DSS standards.
Content and Media
- Digital photographs and video content that you upload to our platform for storage, sharing, and organization purposes. This content is stored securely in your private cloud space and is only accessible to you and the family members you explicitly authorize.
- Album information including titles, descriptions, creation dates, and organizational metadata that helps you categorize and manage your family's digital memories. This information enables us to provide you with effective content organization and search capabilities.
- Sharing permissions and collaboration settings that determine which family members can view, comment on, or contribute to specific albums and content. These settings give you complete control over who has access to your family's shared memories.
- Comments, reactions, and interactions within albums that facilitate family communication and engagement with shared content. These interactions help create a collaborative family experience while maintaining appropriate privacy controls.
- AI enhancement preferences and settings that allow you to control whether and how artificial intelligence is used to improve your photos and videos. These settings ensure that AI processing only occurs when you explicitly choose to use these features.
Usage and Technical Data
- Comprehensive analytics data about how you interact with our services and features, including which pages you visit, features you use most frequently, and your navigation patterns. This information is collected through Google Analytics and other analytics tools to help us understand user behavior and improve our platform's functionality and user experience.
- Technical device information including browser type, operating system version, device type, screen resolution, and other hardware specifications. This information helps us optimize our platform for your specific device and ensure compatibility across different technologies and platforms.
- Internet Protocol (IP) address and general geographic location data that helps us provide location-based services, detect potential security threats, and ensure compliance with regional data protection laws. This information is also used for fraud prevention and security monitoring purposes.
- Performance metrics and error logs that help us identify and resolve technical issues, optimize system performance, and maintain high service reliability. This data includes information about page load times, error rates, and system performance indicators.
- Aggregated and anonymized analytics data that provides insights into overall platform usage patterns without identifying individual users. This information is used for business intelligence, service improvement, and strategic planning purposes.
Communication Data
- Email communications for account management
- Support requests and customer service interactions
- Marketing communications (with your consent)
- System notifications and alerts
- Invitation and collaboration messages
How We Use Your Information
Service Provision
- Provide and maintain our family photo sharing services
- Process your account registration and authentication
- Enable photo and video storage, sharing, and collaboration
- Deliver AI enhancement features and improvements
- Process payments and manage subscriptions
Service Improvement
- Analyze usage patterns to improve our services
- Develop new features based on user needs
- Optimize performance and fix technical issues
- Conduct research and development
- Ensure service reliability and security
Communication
- Send important account and service notifications
- Provide customer support and respond to inquiries
- Send security alerts and account updates
- Share product updates and new features (with consent)
- Facilitate family collaboration and invitations
Legal and Security
- Comply with applicable laws and regulations
- Protect against fraud, abuse, and security threats
- Enforce our Terms of Service and policies
- Respond to legal requests and court orders
- Maintain the integrity and security of our platform
How We Share Your Information
With Your Consent
- Share photos and videos with family members you invite
- Enable collaboration features you choose to use
- Process payments through secure third-party providers
- Send marketing communications (only with explicit consent)
- Use data for specific purposes you authorize
Service Providers
- Cloud storage providers (AWS, Google Cloud) for secure data hosting and backup services. These providers maintain enterprise-grade security standards and are bound by strict data processing agreements to protect your information.
- Payment processors (Stripe) for secure payment processing and credit card information handling. Stripe is a PCI DSS Level 1 certified payment processor that securely processes all credit card transactions and stores payment information in compliance with industry security standards. We do not have direct access to your complete credit card information.
- Email service providers for secure communications, account notifications, and customer support messages. These providers ensure reliable delivery of important account-related communications while maintaining the security of your contact information.
- Analytics services including Google Analytics for website usage analysis and performance monitoring. We only share anonymized and aggregated data with these services to improve our platform functionality and user experience.
- Customer support and help desk services to provide you with assistance and resolve technical issues. These services have access only to the information necessary to provide support and are bound by confidentiality agreements.
Legal Requirements
- Comply with court orders and legal requests
- Respond to government investigations
- Protect against fraud and security threats
- Enforce our Terms of Service and policies
- Protect the rights and safety of our users
Business Transfers
- In the event of a merger, acquisition, or sale of assets
- With appropriate privacy protections in place
- Subject to the same privacy commitments
- With advance notice to users when possible
- Maintaining data protection standards
Data Security and Protection
Privating Media in Your Own Cloud Space
- Privating media in your own cloud space for all data in transit
- Privating media in your own cloud space for data at rest
- Secure authentication and access controls
- Regular security audits and penetration testing
- Multi-factor authentication options
Access Controls
- Role-based access controls for employees
- Limited access to personal data on a need-to-know basis
- Regular access reviews and monitoring
- Secure development practices and code reviews
- Employee privacy and security training
Data Breach Response
- Immediate incident response procedures
- Notification to affected users within 72 hours
- Coordination with law enforcement when appropriate
- Transparent communication about security incidents
- Steps to prevent future breaches
Your Privacy Rights
Access and Control
- Access your personal data and account information
- Update or correct inaccurate information
- Download your data in a portable format
- Delete your account and associated data
- Control your privacy settings and preferences
Data Portability
- Export your photos, videos, and account data
- Transfer your data to another service
- Download your content in standard formats
- Maintain control over your personal information
- Exercise your right to data portability
Marketing Preferences
- Opt out of marketing communications
- Control email preferences and frequency
- Manage notification settings
- Withdraw consent for specific data uses
- Update communication preferences anytime
Legal Rights (GDPR/CCPA)
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ('right to be forgotten')
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
Payment Processing and Credit Card Information
Stripe Payment Processing
- All credit card information and payment processing is handled securely by Stripe, a PCI DSS Level 1 certified payment processor
- We do not directly store, process, or have access to your complete credit card information on our servers
- Stripe securely processes all payment transactions and stores payment data in compliance with industry security standards
- We only receive and store payment confirmation data, subscription status, and billing information necessary for account management
- Your credit card information is protected by Stripe's enterprise-grade security measures and encryption protocols
Payment Data Security
- All payment information is transmitted over encrypted HTTPS connections using industry-standard SSL/TLS protocols
- Stripe maintains PCI DSS compliance and undergoes regular security audits and penetration testing
- We have strict data processing agreements with Stripe that prohibit unauthorized use of your payment information
- Payment data is only used for processing transactions and managing your subscription services
- You can update or remove your payment information at any time through your account settings
Data Retention and Deletion
Retention Periods
- Account data: Retained while your account is active
- Content: Stored until you delete it or close your account
- Usage data: Retained for up to 2 years for service improvement
- Payment data: Retained as required by law (typically 7 years)
- Support communications: Retained for 3 years
Deletion Process
- Immediate deletion of accessible data upon account closure
- Secure deletion of all stored content and personal information
- Removal from active systems within 30 days
- Complete deletion from backups within 90 days
- Confirmation of deletion process completion
Backup and Recovery
- Secure backup systems for data protection
- Limited retention of backups for disaster recovery
- Secure deletion of backup data after retention period
- No access to deleted data after deletion period
- Compliance with legal retention requirements
Cookies and Tracking Technologies
Essential Cookies
- Authentication and session management
- Security and fraud prevention
- Basic site functionality and navigation
- Shopping cart and payment processing
- Account preferences and settings
Analytics and Performance
- Anonymous usage analytics to improve services
- Performance monitoring and error tracking
- Feature usage analysis (anonymized)
- Service optimization and development insights
- No personal identification in analytics data
Cookie Management
- Control cookie preferences in your browser settings
- Opt out of non-essential cookies
- Clear cookies and browsing data
- Manage tracking preferences
- Understand impact of cookie choices on service functionality
Children's Privacy
Age Restrictions
- Minimum age requirement of 13 years old
- Parental consent required for users under 16
- No knowingly collecting data from children under 13
- Special protections for teenage users
- Parental control and monitoring features
Family Accounts
- Parental oversight of family member accounts
- Age-appropriate content and feature restrictions
- Educational resources for digital safety
- Parental notification of account activities
- Easy parental account management tools
International Data Transfers
Data Location
- Primary data storage in secure, compliant data centers
- Use of approved international data transfer mechanisms
- Compliance with GDPR and local privacy laws
- Adequate protection for cross-border data transfers
- Transparency about data storage locations
Legal Compliance
- Compliance with GDPR for European users
- CCPA compliance for California residents
- Local privacy law compliance worldwide
- Standard Contractual Clauses for international transfers
- Regular compliance audits and updates
Artificial Intelligence and Automated Processing
AI-Enhanced Features
- Our platform offers optional artificial intelligence enhancement features that can improve the quality and appearance of your photos and videos. These features are completely voluntary and are only activated when you explicitly choose to use them. You have full control over whether these AI features are applied to your content.
- AI processing capabilities include advanced image enhancement algorithms, quality improvement technologies, content optimization, and intelligent editing suggestions. These features are designed to help you achieve professional-quality results while maintaining the authenticity and integrity of your original content.
- When you choose to use AI enhancement features, your media files may be temporarily transmitted to carefully selected third-party AI service providers who specialize in image and video processing. These providers are bound by strict data processing agreements and are prohibited from using your content for any purpose other than providing the requested enhancement services.
- AI processing is entirely optional and is performed solely to improve your user experience when you specifically request these enhancements. We do not automatically apply AI processing to your content, and you must actively choose to use these features for any AI processing to occur.
- You can completely avoid any AI processing of your content by simply not using AI enhancement features. No action is required on your part to opt out - simply refrain from using AI features and your data will remain secure on our servers without any third-party AI processing.
Data Processing for AI Services
- Only when you actively choose to use AI enhancement features are your images temporarily transmitted to third-party AI service providers
- These providers process your data solely for the purpose of providing the specific AI enhancement services you requested
- We have strict data processing agreements with all AI service providers to protect your data
- Your data is never used for training AI models or any other purposes without your explicit consent
- If you never use AI features, your data never leaves our secure servers and is never processed by third parties for AI purposes
Your Rights Regarding AI Processing
- You can opt-out of AI processing simply by not using AI enhancement features - no settings needed
- You have full control over when and if your data is ever processed by AI services
- You can request information about which AI service providers process your data (only if you use AI features)
- You have the right to object to automated decision-making that significantly affects you
- Your data remains completely secure and private if you choose not to use AI features
Third-Party Services and Data Processing
AI Service Providers
- We use third-party AI service providers for image and video enhancement
- These providers may have access to your media files during processing
- All AI providers are bound by strict data processing agreements
- Providers are prohibited from using your data for purposes other than requested services
- We regularly audit AI providers for compliance with our privacy standards
Other Service Providers
- Carefully selected third-party service providers for essential services
- Data processing agreements with all providers ensuring GDPR compliance
- Regular security and privacy assessments of all third-party providers
- Limited data sharing for specific service purposes only
- Provider compliance with our privacy standards and applicable laws
Data Transfers and International Processing
- Some third-party providers may be located outside the European Economic Area (EEA)
- We ensure adequate safeguards for international data transfers
- Standard Contractual Clauses (SCCs) are used where required
- We assess the adequacy of data protection in recipient countries
- You will be notified of any changes to international data processing arrangements
External Links
- Links to external websites and services
- No control over external privacy practices
- Review external privacy policies before use
- No responsibility for external data handling
- Clear indication of external links
Changes to This Policy
Policy Updates
- Regular review and updates of privacy practices
- Notification of material changes via email
- Advance notice of significant policy changes
- Continued use constitutes acceptance of updates
- Historical policy versions available upon request
User Notification
- Email notification of policy changes
- In-app notifications for significant updates
- Clear summary of changes made
- Opportunity to review changes before acceptance
- Contact information for questions about changes
Contact Information
Privacy Team
- Email: privacy@syncpoly.com
- Data Protection Officer: dpo@syncpoly.com
- General inquiries: support@syncpoly.com
- Legal matters: legal@syncpoly.com
- Response time: Within 48 hours for urgent matters
Regulatory Authorities
- EU Data Protection Authorities (for GDPR matters)
- California Privacy Protection Agency (for CCPA matters)
- Other local privacy regulators as applicable
- Right to lodge complaints with authorities
- Cooperation with regulatory investigations
Your Data Rights
You have comprehensive rights over your personal data, including the right to access, correct, delete, and export your information. We make it easy to exercise these rights through your account settings or by contacting our privacy team.
Right to AccessRight to RectificationRight to ErasureRight to PortabilityRight to Object
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes via email or in-app notification. Your continued use of our services after such changes constitutes acceptance of the updated policy.
Data Security Standards
We implement industry-leading security measures including privating media in your own cloud space, secure authentication, regular security audits, and comprehensive access controls. Your data is protected with the same security standards used by major financial institutions.
Last updated: August 22, 2025
For privacy questions or to exercise your rights, contact us at privacy@syncpoly.com
Data Protection Officer: dpo@syncpoly.com