Privacy Policy
Last updated: February 10, 2026
Zync ("we", "us", "our") operates the website getzync.net and the Zync platform. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws (BDSG).
In short: We only collect data necessary to provide our service. We never sell your personal data. You can request deletion of your data at any time.
1. Data Controller
The data controller responsible for processing your personal data is:
Zync
Address will be updated upon company registration
Email: [email protected]
2. Data Protection Officer
We are currently not legally required to appoint a Data Protection Officer pursuant to Art. 37 GDPR and § 38 BDSG. For all data protection inquiries, please contact us directly at [email protected].
3. What Data We Collect
3.1 Account Data
When you create an account, we collect:
- Email address
- Name (from Google OAuth or as provided)
- Profile picture (from Google OAuth)
- Authentication tokens for our service
3.2 Connected Platform Data
When you connect social media platforms, we collect:
- OAuth access tokens and refresh tokens for each platform
- Platform account identifiers and channel names
- Platform-specific metadata required for publishing
We store these tokens securely to publish content on your behalf. We do not access or store your social media followers, messages, or analytics beyond what is needed to publish your content.
3.3 Content Data
When you use Zync to publish content, we process:
- Video files you upload (temporarily stored during processing)
- Titles, descriptions, and hashtags you create or that our AI generates
- Scheduling information
- Publishing history and status
3.4 Payment Data
Payment processing is handled entirely by Stripe, Inc. We do not store credit card numbers or banking details. We only store your Stripe customer ID and subscription ID to manage your plan.
3.5 Usage Data
With your consent, we collect anonymous usage data through Google Analytics (GA4):
- Pages visited and features used
- Browser type and device information
- Approximate location (country level)
- Referral source
This data is only collected if you accept analytics cookies. You can withdraw consent at any time by clearing your browser cookies and revisiting the site.
4. Legal Basis for Processing (GDPR Art. 6)
| Data | Legal Basis | Purpose |
|---|---|---|
| Account data | Contract (Art. 6(1)(b)) | Provide the service |
| Platform tokens | Contract (Art. 6(1)(b)) | Publish content on your behalf |
| Content data | Contract (Art. 6(1)(b)) | Process and distribute content |
| Payment data | Contract (Art. 6(1)(b)) | Process payments |
| Analytics data | Consent (Art. 6(1)(a)) | Improve our service |
| Email communications | Legitimate interest (Art. 6(1)(f)) | Service updates, welcome emails |
5. Third-Party Services
We use the following third-party services to operate Zync:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase (EU) | Authentication & database | Account data, profile info |
| Stripe (US, EU SCCs) | Payment processing | Email, payment details |
| Resend (US, EU SCCs) | Transactional emails | Email address, name |
| Google Analytics (US, EU SCCs) | Website analytics (with consent) | Anonymous usage data |
| Cloudflare (US, EU) | CDN & security | IP address (not stored) |
| OpenAI (US, EU SCCs) | AI-generated captions | Video metadata, content text |
| Social platforms | Content publishing | Videos, titles, descriptions |
Where data is transferred outside the EU/EEA, we ensure adequate protection through Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.
6. Hosting and Infrastructure
Our servers and databases are hosted within the European Union (EU) using EU-based infrastructure providers. User data, including account information and platform tokens, is stored on EU-based Supabase infrastructure. Uploaded video files are processed on our own servers located in the EU.
7. Cookies
Essential Cookies
These are necessary for the site to function:
- Authentication session — Keeps you logged in (Supabase)
- Cookie consent preference — Remembers your cookie choice
- Language preference — Remembers your selected language
- Theme preference — Remembers dark/light mode
Analytics Cookies (requires consent)
- Google Analytics (_ga, _ga_*) — Anonymous usage statistics to help us improve the service. IP addresses are anonymized before storage. No full IP addresses are stored.
You can change your cookie preferences at any time by clearing your browser cookies and refreshing the page.
8. Your Rights (GDPR Art. 15-22)
As a data subject, you have the following rights:
- Right of access — Request a copy of your personal data
- Right to rectification — Request correction of inaccurate data
- Right to erasure — Request deletion of your data ("right to be forgotten")
- Right to restriction — Request limited processing of your data
- Right to data portability — Receive your data in a machine-readable format
- Right to object — Object to processing based on legitimate interest
- Right to withdraw consent — Withdraw consent for analytics at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. Data Retention
- Account data — Retained while your account is active. Deleted within 30 days of account deletion.
- Uploaded videos — Temporarily stored during processing, then deleted after publishing or within 24 hours.
- Platform tokens — Deleted when you disconnect a platform or delete your account.
- Payment records — Retained for 10 years as required by German tax law (AO §147).
- Analytics data — Retained for 14 months (Google Analytics default with data retention set).
10. Data Security
We protect your data with:
- TLS 1.3 encryption for all data in transit
- Encrypted database connections
- Access controls and authentication for all systems
- Regular security reviews
11. Automated Decision-Making
Zync does not perform automated decision-making or profiling within the meaning of Art. 22 GDPR that produces legal or similarly significant effects on users. AI-generated suggestions (such as captions, titles, hashtags, or content ideas) are purely assistive and do not make binding decisions. All AI-generated content requires manual review and approval before publishing.
12. Children's Privacy
Zync is not intended for use by children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected].
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website. The "Last updated" date at the top indicates when this policy was last revised.
14. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. The competent authority is the data protection authority of the federal state in which our company is registered.
15. Contact
For any privacy-related questions or requests, please contact us:
Email: [email protected]
Website: getzync.net