Privacy Policy

Introduction

SyncSpace ("SyncSpace," "we," "us," or "our") operates the SyncSpace website at https://syncspace-web.vercel.app and the SyncSpace Chrome extension (together, the "Service").

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By creating an account or using the Service, you agree to this policy.

Information we collect

We collect the following categories of information:

• Account information — email address and authentication credentials managed through our auth provider when you sign up or sign in.
• Synced browser data — bookmarks, saved tab groups, tab metadata (titles and URLs), and optionally a list of installed Chrome extensions you choose to sync.
• Device information — a randomly generated device fingerprint stored locally in the extension, a human-readable device label (such as platform and browser version), and last-seen timestamps used for device limits and management.
• Subscription and billing data — plan tier, subscription status, and payment-related identifiers processed by our payment provider. We do not store full payment card numbers on our servers.
• Usage and technical data — basic service logs, error reports, and API activity needed to operate, secure, and improve the Service.

How we use your information

We use the information we collect to:

• Provide cloud sync, backup, restore, and library features across your registered devices.
• Authenticate you, enforce plan limits, and manage registered devices.
• Process subscriptions, invoices, and billing support.
• Maintain security, prevent abuse, and troubleshoot issues.
• Respond to support requests and communicate important service updates.
• Improve reliability and develop new features.

Legal bases (EEA/UK users)

Where applicable, we process personal data on the basis of contract performance (providing the Service you requested), legitimate interests (security, fraud prevention, and product improvement), and consent where required (such as optional marketing communications, if offered).

How we share information

We do not sell your personal information. We share data only with service providers that help us operate the Service, under contractual obligations to protect your data:

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale with appropriate notice where legally permitted.

• Supabase — cloud database, authentication, and row-level security for your synced library.
• Lemon Squeezy — subscription checkout, billing, and payment processing for paid plans.
• Infrastructure providers — hosting, logging, and security services that process data on our behalf.

Data retention

We retain your account and synced data for as long as your account is active. If you delete your account or request deletion, we delete or anonymize associated personal data within a reasonable period, except where retention is required for legal, tax, or security purposes.

Backup copies may persist for a limited time before being purged according to our infrastructure provider retention schedules.

Security

We use industry-standard safeguards including encrypted connections (HTTPS/TLS), authenticated API access, and database row-level security so your synced data is accessible only to your account.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials confidential.

Your choices and rights

Depending on your location, you may have the right to:

To exercise these rights, contact us at hello@syncspace.app. We may need to verify your identity before fulfilling a request.

• Access, correct, or delete personal data we hold about you.
• Export your synced library from the extension or web app.
• Remove registered devices from your account to revoke sync access on those browsers.
• Cancel a paid subscription through the billing portal.
• Object to or restrict certain processing, or withdraw consent where processing is consent-based.

Children's privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border data transfers.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the effective date. Material changes may also be communicated by email or in-product notice.

Contact us

Questions about this Privacy Policy or our data practices? Email hello@syncspace.app.