Synk is a digital signage platform operated by Synkrony. This Privacy Policy explains what personal data we collect from users of the Synk portal at synk-six.vercel.app and associated services, how we use it, and your rights regarding that data. By using Synk you agree to the practices described here.
When you create an account — whether by email/password or by signing in with Google — we collect your email address and, where provided by your identity provider, your display name and profile picture URL.
We store the content you upload (images and video files), playlists, schedules, and device names that you create within Synk. We log device events — such as when a screen comes online, goes offline, or fails to load content — to help you monitor your signage.
Subscription and payment data is handled directly by Stripe. We store a reference to your Stripe customer ID and subscription status, but we never store or process raw payment card details.
We collect standard server logs, including IP addresses, browser type, and pages visited, for security monitoring and to diagnose technical issues. This data is not used for advertising.
We do not sell your personal data to third parties. We do not use your data to serve targeted advertising.
If you choose to sign in with Google, we receive your email address, name, and profile picture from Google. We request only the standard openid email profile scopes — the minimum needed to identify you. We do not request access to your Gmail, Calendar, Drive, or any other Google service. Google's use of your data is governed by the Google Privacy Policy.
Authentication, database storage, and real-time communication are provided by Supabase. Your account data and content metadata are stored in a Supabase PostgreSQL database. Supabase is hosted on AWS infrastructure. See the Supabase Privacy Policy.
Media files (images and videos) you upload are stored in Cloudflare R2 object storage and delivered to your screens via the Cloudflare CDN. See the Cloudflare Privacy Policy.
Subscription billing is handled by Stripe. When you subscribe, you interact with Stripe's hosted checkout and billing portal. Stripe processes your payment details directly and we never see your card number. See the Stripe Privacy Policy.
The Synk portal is deployed on Vercel, which handles web hosting and edge networking. See the Vercel Privacy Policy.
We retain your account and content data for as long as your account is active. If you cancel your subscription and request deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (for example, billing history required by law).
All data in transit is protected by TLS/HTTPS. Access to your data in the database is enforced by row-level security policies — no user can read another tenant's data. Credentials are stored as salted hashes; we never store passwords in plain text. We support multi-factor authentication (TOTP) for your account.
Depending on your location, you may have rights under applicable data protection law (including the UK GDPR and EU GDPR) to:
To exercise any of these rights, contact us at the address below. We will respond within 30 days.
Synk uses session cookies to maintain your authenticated session. These are strictly necessary for the service to function and do not require consent. We do not use advertising or tracking cookies.
We may update this policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the portal at least 14 days before the changes take effect.
For privacy-related questions or requests, please contact us at: synk@synkrony.com