Privacy Policy

1. Who we are

2. Our role

• Controller (Sellers): For seller accounts and related data (e.g., account, billing, security, CRM/communications to sellers), Synco is the Data Controller.
• Processor (Buyers): For buyer-submitted personalization data collected for a seller’s order (text, photos, audio/video, etc.), the seller is the Data Controller and Synco acts as the Data Processor, processing strictly under the seller’s instructions.

3. Data we process

4. How we collect data

• Directly from sellers when creating/using an account or contacting support.
• Directly from buyers via Synco forms/links sent at the seller’s request.
• Automatically via our services (basic operational and security logs).

5. Why we use data & legal bases

6. Seller responsibility toward buyers

Sellers using Synco are Data Controllers for buyer data. Sellers should:

• Provide their own Privacy Policy and Terms of Service to buyers and obtain any required consent (e.g., a consent checkbox on the personalization form).
• Use buyer data only to fulfill the order and in line with applicable laws.
  If a seller does not provide valid policies/consents, Synco may limit or suspend related features. Synco is not liable for a seller’s non-compliance.

7. Retention

• Buyer personalization content: retained up to 60 days from submission to allow fulfillment and handle shipping/logistics issues (e.g., lost/damaged items), then permanently deleted with no recovery from Synco systems (subject to brief backup/replication lags). Sellers may keep copies in their own systems under their policies.
• Buyer verification & email-send logs:retained for a limited period to provide an audit trail (e.g., to confirm a request/confirmation was sent/received) and for security; deleted or anonymized when no longer needed.
• Seller account data:kept while the account is active; after closure, retained only as needed for legitimate interests or legal obligations (e.g.,invoices and billing records typically 7 years under tax/audit rules); security logs for a limited, proportionate period.
• We follow the storage limitation and data minimization principles and apply deletion/anonymization schedules accordingly.

8. International transfers

Your data may be processed outside your region (for example, in data centers operated by our cloud providers). Whenever we transfer personal data internationally, we implement appropriate safeguards consistent with GDPR Chapter V —suchas Standard Contractual Clauses or equivalent lawful mechanisms—and apply technical/organizational measures (e.g., encryption, access controls) to protect it, so that it receives a level of protection essentially equivalent to that of your home jurisdiction.

9. Security

We use industry-standard measures to protect data:

• Encryption in transit and (where applicable) at rest.
• Access controls and least-privilege permissions.
• Monitoring and logging for security events; incident response procedures.

10. Sub-processors (third-party providers)

We use carefully selected third parties to help deliver the Service (e.g., cloud hosting, authentication, email delivery, payments, CRM/support). Where a provider processes personal data on our behalf, it does so under written data-protection termsthat impose confidentiality, security, restrictions on use, assistance with data-subject rights, and deletion/return of data at the end of the engagement. For international transfers we implement appropriate safeguards (such as the EU Standard Contractual Clauses or equivalent mechanisms) to ensure an essentially equivalent level of protection.

Some providers (for example, certain payment services) act asindependent controllers for the data they receive; in those cases we share only the minimum necessary information for their services.

We do not list provider names publicly in this Policy, but a current list of material subprocessors can be made available to seller customers upon request.

11. Your rights

12. Cookies & similar tech

Synco uses essential cookies and similar technologies for security, session management, and basic product analytics. We donot use them for cross-site advertising. Sellers can manage preferences in their browser; blocking essential cookies may affect functionality (e.g., login).

13. Do we sell data?

No. We do not sell personal data and do not share it for cross-context behavioral advertising.

14. Data about minors

Synco is not directed to children. Buyers must only submit a child’s data if they are the parent/guardian or have lawful authority. If we learn we have collected children’s data without proper authority, we will delete it.

15. Changes to this Policy

We may update this Policy from time to time. We’ll change the “Last updated” date and, where appropriate, notify sellers in-app or by email. Continued use of Synco after an update means you acknowledge the changes.

16. Contact us

Questions, requests, or complaints about privacy can be sent to our privacy team: