Synup

Synup is operated by Cardinalis Advisory, an Ontario sole proprietorship, based in North York, Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, store, and otherwise process personal information when you use the Synup website, app, business tools, support channels, and related services.

Synup is a Canada-based service that may be used across multiple jurisdictions. Depending on where you are located, additional rights and disclosures may apply under applicable privacy law.

1. Information We Collect

We collect personal information that is reasonably necessary to operate, secure, and improve the service. Depending on how you use Synup, this may include:

Account and identity information, such as your Telegram ID, Google account identifiers, email address for business or admin access, display name, and account status.
Profile and content information, such as date of birth, gender, profile text, photos, interests, preferences, reviews, and other information you choose to submit.
Location information, such as approximate or precise location coordinates, city, country, timezone, and place-search inputs when you use location-based features.
Communications and interactions, such as private chats, public group messages, support requests, support replies, reports, reviews, reservations, and marketplace or business communications.
Business information, such as business profile content, team memberships, event details, reservations, and public contact details a business chooses to display.
Billing and transaction information, such as customer, checkout, invoice, subscription, and payment-related metadata.
Device, usage, and security information, such as session records, IP address, user-agent, device or browser signals, anti-abuse challenge results, and operational logs.
Safety, moderation, and fraud information, such as reports, restrictions, bans, investigations, and related audit records.

Some information is optional and is provided only if you choose to share it. Please avoid submitting sensitive personal information in free-text fields, chats, listings, or support requests unless it is genuinely necessary.

2. How We Collect Information

Directly from you when you sign in, complete your profile, upload content, make a purchase, use a feature, or contact support.
From third-party providers involved in authentication, payments, maps, and related services.
Automatically through your use of the service, including session handling, device or browser signals, security logging, and service operations.
From other users or businesses when they interact with you through product features such as chats, reviews, reservations, reports, or business workflows.

3. Why We Use Personal Information

We use personal information to:

create, authenticate, and secure accounts;
provide profile, discovery, chat, business, marketplace, event, reservation, and support features;
process payments, manage subscriptions, and maintain billing records;
protect users, businesses, and the platform through moderation, fraud prevention, and abuse handling;
respond to support requests, account issues, and operational inquiries;
operate, maintain, troubleshoot, and improve the service;
comply with legal, accounting, tax, regulatory, and enforcement obligations; and
send service, security, billing, and other important administrative communications.

4. Legal Bases

Where applicable law requires a legal basis for processing, we generally rely on one or more of the following:

Performance of a contract or steps taken at your request when processing is needed to provide the service you requested.
Legitimate interests when processing is needed for security, fraud prevention, moderation, support, platform operations, or service improvement.
Consent when required for optional processing, such as future marketing, non-essential analytics, advertising-related processing, or other consent-based features.
Legal obligation when we must keep or disclose data to comply with law, tax, accounting, regulatory, or lawful request obligations.

5. Information Visible to Others

Some information you submit is intended to be visible to other users, businesses, or the public as part of the service. This may include profile details, business profile content, event and marketplace content, reviews, public chat messages, and other material you choose to publish through product features.

You are responsible for the information you choose to make available through the service. Please do not post personal information that you do not want other users or third parties to access, copy, or rely on.

6. Location Information

Some Synup features rely on location. If you choose to use location-based features, we may process location coordinates and related city, country, and timezone information to support nearby discovery, business search, event features, and similar functionality. Device-level location permissions are controlled through your device and browser settings.

We currently use Google Maps, Places, and Geocoding services in connection with some location features. Your use of those features may also be subject to Google's terms and privacy practices.

7. Cookies and Similar Technologies

We currently use essential cookies and similar technologies for authentication, session management, security, and core product operation.

For a more specific summary of current cookie categories and how we approach future analytics or advertising technologies, see our Cookie Policy.

As of the last updated date above, we do not describe non-essential analytics cookies or third-party advertising technologies as active on the service. If that changes, we will update this Privacy Policy and request consent where required by law.

8. How We Share Personal Information

We may share personal information in the following circumstances:

With service providers that help us operate the service, such as providers involved in hosting, infrastructure, storage, payments, mapping, authentication, email, and abuse prevention.
With other users, businesses, or participants when a product feature is designed to show your content or activity to them.
With authorized personnel on a need-to-know basis for support, safety, fraud review, moderation, billing, security, or legal compliance.
When disclosure is required by law, legal process, lawful request, or is reasonably necessary to protect rights, property, safety, or security.
In connection with a corporate transaction such as a financing, acquisition, sale, merger, or reorganization.

As of the last updated date above, we do not describe the service as selling personal information or using personal information for third-party behavioral advertising.

9. Service Providers and Platforms

Depending on the feature you use, our current providers and platforms may include hosting, infrastructure, storage, payments, mapping, authentication, email, and abuse-prevention providers. Examples as of the date above may include:

Neon, Vercel, Railway, and Supabase for infrastructure, hosting, and storage.
Stripe for billing and payment processing.
Telegram and Google for authentication-related and account-access flows.
Google for Maps, Places, and Geocoding features.
Zoho Mail for support, privacy, and operational email communication.
Cloudflare Turnstile for public support abuse prevention.

10. International Transfers

Because Synup is a global service and uses service providers in multiple countries, personal information may be processed, stored, or accessed outside the country where you live, including in Canada, Europe, the United States, and other jurisdictions where our providers or authorized personnel operate.

Some data may be stored in European-region infrastructure, but that does not mean all processing stays only in Europe. Support, security, hosting, payment, identity, mapping, storage, anti-abuse, and similar service functions may involve providers or authorized personnel operating in multiple countries.

When international transfers apply, we use measures intended to protect personal information in line with applicable legal requirements. Depending on the destination and recipient, those measures may include adequacy decisions, contractual safeguards used with service providers, or other lawful transfer mechanisms.

11. Retention

We retain personal information for as long as needed for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

If you delete a consumer or business account, we currently use a 30-day grace period before permanent purge of applicable live account data.
Some support, safety, fraud, moderation, billing, and legal records may be retained longer where necessary, and in some cases account identity may be scrubbed instead of completely deleting the record.
Billing and financial records may be retained longer to comply with tax, accounting, and dispute-handling requirements.

12. Security

We use technical and organizational measures intended to protect personal information, including access controls, session security, provider controls, and moderation or security workflows. No system can be guaranteed to be completely secure, and you use the service at your own risk.

13. Your Rights and Choices

Depending on where you live, you may have rights such as access, correction, deletion, withdrawal of consent where consent is the basis, objection to certain processing, restriction, portability, or complaint rights.

We may need to verify your identity before completing a request. Some rights are subject to legal exceptions and we may retain certain records where permitted or required by law.

14. Adults Only

Synup is intended only for users who are at least 18 years old. If we learn that we have collected personal information from someone who is not eligible to use the service, we may delete or restrict the account and associated data as appropriate.

We may use date of birth and related age checks to verify eligibility, support age-based product rules, and help keep the service limited to adult users.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we may update the date above and take additional steps where required, such as posting a notice in the service or requesting new consent when legally required.

16. Contact Us

For support questions, contact support@synup.app.

For privacy requests, complaints, or data protection questions, contact our Privacy Officer, Cardinalis Advisory at privacy@synup.app.