Legal

Privacy Policy

Last updated: June 6, 2026

This Privacy Policy explains how Synchronator processes personal data when you visit the website, create an account, connect LinkedIn, schedule or publish posts, use AI features, use billing or contact support.

Controller

The controller is:

G. Brown IT & Photography
Langgartenweg 8
8280 Kreuzlingen
Switzerland
UID: CHE-395.029.742

Privacy requests: [email protected]
Legal notices: [email protected]
Support: [email protected]

Business and Professional Use

Synchronator is intended for business and professional use only.

If you use Synchronator for a company, client, employer, agency or other organization, personal data may be processed in the context of that organization's Workspace.

Where Synchronator processes personal data on behalf of a customer as a processor, the Data Processing Addendum applies.

Personal Data We Process

We process the following categories of personal data, depending on how you use the Service.

Account data

Name, email address, password hash, email verification status, account settings, Workspace membership, role, permissions and notification preferences.

Authentication and security data

Session identifiers, IP address, user agent, remember-me tokens, passkeys, two-factor authentication data, password reset tokens, login records and security events.

LinkedIn integration data

LinkedIn member identifier, LinkedIn profile name, email address, avatar URL, OAuth access and refresh tokens, token expiry dates, scopes, connection status, token refresh history, connection errors, publishing permissions and permitted profile or page information.

Content data

Post drafts, titles, prompts, notes, comments, source material, attachments, scheduling data, approval states, publishing status, published post identifiers, failure reasons and publishing attempt records.

AI feature data

Prompts, source material, drafts, AI requests, AI Output, token or credit usage, model/provider response metadata, error records and safety or abuse-prevention metadata.

Voice Profile data

If you enable "Learn my voice", we process selected or successfully published posts, writing patterns, tone preferences, structure preferences, style summaries, excluded posts, Voice Profile settings, confidence level and related metadata to create and maintain an editable Voice Profile for your account.

Billing data

Stripe customer identifiers, subscriptions, plan, payment method type, payment method last four digits, subscription status, invoice records, billing portal activity, tax information where applicable and payment-related events.

Email and support data

Transactional email records, support messages, replies, attachments and related communication metadata.

Technical data

Application logs, error records, device and browser data, timestamps, performance data, diagnostic data and technical records needed to operate, secure and debug the Service.

Why We Process Personal Data

We process personal data to:

• provide and maintain the LinkedIn content workspace;
• create and manage accounts and Workspaces;
• authenticate users, protect accounts and prevent abuse;
• connect to LinkedIn and publish or track posts when requested;
• provide AI drafting, rewriting, scoring, summarising and repurposing features;
• create and maintain Voice Profiles where users enable "Learn my voice";
• personalise AI-assisted drafting, rewriting, scoring and repurposing according to a user's Voice Profile;
• allow users to view, edit, pause, rebuild or delete their Voice Profile;
• process subscriptions and payments through Stripe;
• send transactional emails such as verification, password reset, billing, security and publishing notifications;
• provide support and respond to enquiries;
• diagnose bugs, monitor reliability and maintain security;
• enforce Terms and prevent misuse;
• comply with accounting, tax, legal and regulatory obligations.

Legal Bases

Where the GDPR applies, processing is based on one or more of the following legal bases:

• performance of a contract;
• legitimate interests in operating, securing, improving and protecting the Service;
• compliance with legal obligations;
• consent where a feature specifically asks for consent.

Under the Swiss Federal Act on Data Protection, we process personal data transparently, proportionately and for the purposes described in this Privacy Policy.

AI Processing

AI features may use third-party AI providers, including OpenAI, to process prompts, source material, drafts and Output.

If you enable "Learn my voice", Synchronator may use AI features to analyse your selected or successfully published posts and create an editable Voice Profile. The Voice Profile is used only to personalise AI-assisted content for your account or Workspace, depending on the feature configuration.

You can pause, edit, rebuild or delete your Voice Profile where the feature is available.

We do not use Voice Profile data, User Content or Output to train our own or third-party AI models unless this is expressly disclosed in this Privacy Policy, the Data Processing Addendum or a separate agreement and permitted by applicable law.

AI Output may be inaccurate, incomplete, misleading or unsuitable. Users are responsible for reviewing and approving AI Output before use or publication.

Recipients and Processors

We share personal data only where needed to provide the Service, comply with law or protect the Service.

Recipients may include:

• OpenAI or another configured AI provider for AI features;
• Stripe for billing and payment processing;
• LinkedIn/Microsoft for OAuth, LinkedIn integration and publishing;
• mail providers, if external mail delivery is configured;
• operational service providers such as error logging, diagnostics or support tools if enabled;
• professional advisers, authorities or courts where required by law or necessary to protect legal rights.

Some recipients may act as processors, some as independent controllers and some as direct third-party integrations depending on the context.

A current list of subprocessors is available on the Subprocessors page.

International Transfers

Service providers may process personal data in Switzerland, the EEA, the United Kingdom, the United States or other countries.

Where required, we rely on adequacy decisions, standard contractual clauses, data processing agreements or equivalent safeguards.

Retention

Account and Workspace data is retained while your account or Workspace is active.

LinkedIn tokens are retained until you disconnect LinkedIn, delete your account or the tokens are otherwise removed or invalidated.

Content data is retained while needed to provide the Service, maintain schedules, show history, support exports, troubleshoot issues, protect legal rights or comply with obligations.

Billing records are retained as required for accounting, tax, fraud prevention and legal obligations.

Session records expire according to the configured session lifetime and cleanup schedule.

Logs are retained only as long as needed for security, debugging, abuse prevention, reliability and legal obligations.

Backup copies may remain for a limited period until overwritten or deleted through normal backup cycles.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of your personal data, receive a copy of your data and withdraw consent where processing is based on consent.

You may also have the right to complain to a supervisory authority, including the Swiss Federal Data Protection and Information Commissioner where Swiss law applies.

To exercise privacy rights, contact [email protected].

If your account belongs to a Workspace controlled by your employer, client, agency or organization, we may direct certain requests to the Workspace owner or customer.

Cookies

The Service currently uses necessary cookies and similar storage for login, security, fraud prevention and interface operation.

It does not use analytics cookies, advertising cookies, retargeting pixels or social media tracking pixels unless the Cookie Policy is updated and any required consent mechanism is implemented.

See the Cookie Policy for details.

Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse and alteration.

No online service can be guaranteed to be completely secure.

Users are responsible for protecting account credentials, devices, sessions, passkeys and recovery codes.

Automated Decision-Making

Synchronator provides AI-assisted content and workflow tools.

Synchronator does not intentionally make solely automated decisions that produce legal or similarly significant effects for individuals.

Terms

Your use of the Service is also governed by the Terms & Conditions.

Changes

We may update this Privacy Policy when the Service, legal requirements, processors, subprocessors or business operations change.

The updated version will be posted on this page with a new effective date.