Privacy Policy

1. Overview & Scope

SyncSocial ("we", "us", or "our") values the privacy of e-commerce merchants and their customers. This Privacy Policy outlines our data processing practices for the SyncSocial platform (getsyncsocial.com).

2. Information We Collect

We collect information directly from Merchants and indirectly from interaction logs of the end-customers:

• Merchant Account & Billing Details: Business name, email, full name, phone number, and billing/payment processor references.
• End-Customer Chat Logs: Standard conversation logs between end-customers and your brand accounts on WhatsApp, Instagram, Facebook Messenger, and TikTok. This may include user names, handles, phone numbers, and chat message text.
• Integration Context: Database schemas and catalog inventory data linked to SyncSocial.

3. Platform Permissions & API Scopes

When connecting your brand accounts, we request specific OAuth permissions required to synchronize and automate messaging:

• Meta/WhatsApp Scopes: whatsapp_business_management, whatsapp_business_messaging, and business_management to retrieve phone numbers, configure channels, and handle inbound customer support replies strictly within active sessions.
• Facebook Messenger Scopes: pages_show_list, pages_messaging, pages_manage_metadata, pages_read_engagement, and pages_manage_engagement to listen to and reply to incoming messages.
• Instagram Scopes: instagram_business_basic and instagram_business_manage_messages to list Instagram business accounts and handle inbound direct message support.
• TikTok Scopes: user.info.basic to authenticate and map TikTok accounts.

4. Subprocessors & AI Data Sharing

We share customer chat text with our primary artificial intelligence subprocessors solely to generate automated responses.

5. Data Storage, Security & Cyber Risks

We store database records, access tokens, and chat histories securely using industry-standard encryption protocols.

While we apply best practices in security, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute immunity from sophisticated cyber-attacks, security breaches, or unexpected zero-day vulnerabilities.

6. Cookies & Site Analytics

We use essential cookies and standard analytical cookies on our public marketing pages and dashboards to track traffic metrics, visitor patterns, and active user counts.

7. European (GDPR) & California (CCPA) Privacy Rights

For international customers and users, we align our platform with international privacy frameworks:

• GDPR Compliance: E-commerce merchants act as the Data Controller, and SyncSocial acts as the Data Processor. End-users in Europe retain the right to request deletion of records, access, or corrections.
• CCPA Compliance: We do not sell merchant or customer personal information. California consumers have the right to request disclosure of personal data collected.

8. Contact Information & Governing Law

If you have any inquiries regarding these policies or request removal of data, please contact our privacy compliance desk at support@getsyncsocial.com.

9. Service Uptime & Liability Disclaimer

While we apply best practices in security and operations, SyncSocial does not guarantee 100% satisfaction or absolute delivery of messages. Under no circumstances shall SyncSocial be liable for any financial or operational losses caused by service interruptions, delayed webhooks, or system errors.

Our systems rely on webhooks from third-party social networks which may occasionally fail or be missed due to unverified reasons beyond our control. Users must independently verify critical messages and cannot hold SyncSocial liable for any resulting discrepancies.

By using our services, you confirm you are fully aware of these operational risks and agree to hold SyncSocial harmless from any associated liability.