Privacy Policy

SynqOS Ltd ("we", "us") is the data controller for personal data you provide when using this service. Registered address: 2 Edmund Court, Sheffield, United Kingdom. Company number: 17338012.

Contact: synqosystem@gmail.com

• Account data: name, email, phone, business name, address, website.
• Authentication data: hashed password, sign-in timestamps.
• Billing data: Stripe customer & subscription IDs (card details are held by Stripe, not by us).
• Product data: agent runs, workflow runs, ROI configuration, ad ideas you generate.
• Integration tokens for connected services (Roller, Facebook, Google Business, etc.).
• Technical data: IP address and browser info logged for security.

• Contract — to deliver the service you sign up for.
• Legitimate interest — service improvement, fraud prevention, security.
• Consent — optional marketing communications and non-essential cookies.
• Legal obligation — tax and accounting records.

We share the minimum data required with:

• Supabase (managed database & authentication — USA, IDTA)
• Stripe (payments — USA, IDTA)
• n8n (workflow execution — EU, Standard Contractual Clauses)
• Google LLC — Gemini API (AI analysis of venue operational data — USA, IDTA). Data sent to Gemini is not used to train AI models.
• Anthropic PBC — Claude API via Lovable (AI model calls — USA, IDTA). Data is not used to train AI models.

When you connect third-party platforms (Meta, Google Business, Roller, Stripe, TikTok), those platforms act as independent data controllers under their own privacy policies. We access only the data you explicitly authorise.

Competitor Radar data

When you use the Competitor Radar feature, SynqOS reads publicly visible posts from Facebook business pages you specify. This data is processed solely to generate your weekly competitor briefing and is not shared with third parties, not used to train AI models, and not retained beyond your account deletion. We do not collect personal data about individuals through this feature — only business page posts that are publicly visible to any Facebook user.

Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses with equivalent safeguards.

SynqOS uses AI models (Google Gemini and Anthropic Claude) to generate briefings, content suggestions, pricing recommendations and other outputs. When you run an agent, relevant venue operational data is sent to these models for analysis.

We do not use your data to train AI models. Data sent via API to Google Gemini and Anthropic Claude is processed under their respective API data processing terms, which prohibit use of API data for model training.

Data sent to AI models is limited to what is necessary to generate the requested output (for example, your revenue figures, stock levels or competitor observations). We do not send names or contact details of your end customers to AI models unless you explicitly include them in a prompt.

Account data is retained while your account is active and for up to 30 days after deletion. Billing records are retained for 7 years to meet UK tax law. You can request earlier erasure at any time.

You have the right to access, rectify, erase, restrict, port and object to processing of your data.

• Download a copy: Portal → Account → "Download my data".
• Delete your account: Portal → Account → "Delete my account".
• Complain to the ICO: ico.org.uk.

Data is encrypted in transit (TLS) and at rest (AES-256). Access is restricted by row-level security scoped to your account. Passwords are hashed with bcrypt and checked against known-breached password lists.

See our Cookie Policy.

Questions? Email synqosystem@gmail.com.

The Customer Re-engagement and Marketing Manager agents can send emails to your venue's customers. You are the data controller for those communications. You are responsible for ensuring you have a valid lawful basis (consent or legitimate interest) under UK GDPR and PECR before sending marketing emails to your customers via SynqOS. We act as your processor for those sends only.