Privacy Policy

1. Introduction

SyncScript ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our productivity platform.

By using SyncScript, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email, name, password (encrypted)
• Profile Data: Energy levels, productivity preferences, work patterns
• Task Data: Tasks, projects, notes, budgets, time estimates
• Team Data: Team memberships, shared workspaces (if applicable)
• Payment Information: Processed by our payment provider (not stored by us)

2.2 Information Collected Automatically

• Usage Data: Features used, pages viewed, actions taken
• Device Information: Browser type, OS, device type, screen size
• Performance Data: Page load times, error rates, Core Web Vitals
• Analytics Data: Session duration, feature adoption, engagement metrics
• Cookies: Session cookies, preference cookies, analytics cookies

2.3 Optional Context Data

• Location: City-level only (for weather, traffic) - requires consent
• Calendar: Events you choose to sync - requires authorization
• Integrations: Data from connected services (with your permission)

3. How We Use Your Information

We use your information to:

• Provide the Service: Enable core functionality, task management, AI features
• Personalization: Energy-based suggestions, budget recommendations, smart scheduling
• Improve the Service: Analyze usage, fix bugs, optimize performance
• Communication: Service updates, feature announcements, support responses
• Security: Prevent fraud, detect abuse, protect accounts
• Compliance: Meet legal obligations, enforce terms of service

4. Information Sharing & Disclosure

We may share your information with:

4.1 Service Providers

• Authentication: Auth0 (identity management)
• Hosting: Vercel (infrastructure)
• Analytics: Vercel Analytics (usage metrics)
• Payments: Stripe (payment processing)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request.

4.3 Business Transfers

If SyncScript is acquired or merged, your information may be transferred to the new entity. We will notify you via email before any transfer.

4.4 With Your Consent

We may share data with third parties when you explicitly authorize us to do so.

5. Data Security

We implement industry-standard security measures:

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
• Authentication: Secure Auth0 integration with industry best practices
• Access Control: Role-based permissions, least-privilege principle
• Monitoring: Continuous security monitoring and incident response
• Audits: Regular security audits and penetration testing

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights & Choices

6.1 Access & Portability

You have the right to access and export your data at any time.

• View all your data in your account settings
• Export your data in JSON or CSV format
• Request a complete data package (email us)

6.2 Correction & Update

You can update your information anytime through your account settings.

6.3 Deletion (Right to Be Forgotten)

You can delete your account and all associated data:

• Go to Settings → Account → Delete Account
• All data permanently deleted within 30 days
• Some data retained for legal/security purposes (logs, transactions)

6.4 Opt-Out

• Marketing Emails: Unsubscribe link in every email
• Analytics: Disable in Settings → Privacy
• Personalization: Turn off AI features in Settings

6.5 California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what data we collect
• Right to request deletion
• Right to opt-out of data sales (we don't sell data)
• Right to non-discrimination

6.6 EU Privacy Rights (GDPR)

EU residents have additional rights:

• Right to access, rectify, and delete data
• Right to data portability
• Right to restrict or object to processing
• Right to withdraw consent
• Right to lodge a complaint with supervisory authority

7. Cookies & Tracking

7.1 What Cookies We Use

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings (theme, language)
• Analytics Cookies: Understand how you use the service
• No Advertising Cookies: We don't use tracking for ads

7.2 Managing Cookies

You can control cookies through:

• Your browser settings (block third-party cookies)
• Our cookie preferences center (coming soon)
• Opt-out of analytics in Settings

8. Data Retention

• Active Accounts: Data retained as long as account is active
• Deleted Accounts: Data deleted within 30 days of deletion request
• Analytics Data: Retained for 25 months (regulatory requirement)
• Security Logs: Retained for 90 days
• Legal Hold: Some data may be retained longer if legally required

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country. By using SyncScript, you consent to such transfers. We ensure appropriate safeguards are in place.

10. Children's Privacy

SyncScript is not intended for children under 13 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification for material changes

Changes become effective immediately upon posting. Your continued use constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

13. Data Inventory