Privacy Policy
Effective Date: July 27, 2025
Syncora AI (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our website and services (collectively, the “Service”). By using Syncora AI, you agree to the collection and use of information in accordance with this policy.
Disclaimer: This is a template privacy policy and does not constitute legal advice. You should consult with a legal professional to ensure full compliance with all applicable laws and regulations.
1. Information We Collect
We collect various types of information to provide and improve our Service to you.
- Personal Identification Information:
- When you register: Your name and email address (provided via Google or other authentication providers).
- When you contact us: Any information you provide during support inquiries.
- Account Connection Data (from Google Ads): When you connect your Google Ads account(s) to Syncora AI, we collect and securely store:
- **OAuth Tokens:** Access tokens and refresh tokens necessary to interact with Google Ads API on your behalf. These tokens allow us to perform operations authorized by you (e.g., read campaigns, update status, create ads).
- **Google Ads Account Identifiers:** Customer IDs (MCC and client IDs), and the Google User ID associated with the connection.
- **Basic Account Info:** Account name, and the email address of the Google account used for connection.
- Google Ads Data: We access and process data from your connected Google Ads accounts, including but not limited to:
- Campaign structure (names, IDs, types, budgets, statuses).
- Ad group structure (names, IDs, statuses).
- Ad creatives (headlines, descriptions, final URLs).
- Keywords.
- Performance metrics (clicks, impressions, cost, conversions, CTR, CPC) associated with your campaigns, ad groups, and ads over specified date ranges.
- Lead Data: Information related to leads that are processed or managed through our platform, which may include:
- Contact details (e.g., name, email, phone number).
- Company and job title.
- Website URL.
- AI-generated scores or insights derived from lead data.
- Source of the lead (e.g., Google Ads lead form).
- Content Data: Any content you upload, provide, or generate through our AI tools (e.g., business descriptions, creative briefs, generated ad copy).
- Usage Data: Information about how you access and use the Service, including:
- Your device’s IP address, browser type, and operating system.
- Pages visited, features used, and time spent on the Service.
- Referring URLs.
- Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. **You will be notified when cookies are used via a banner on your first visit.**
2. How We Use Your Data
We use the collected data for various purposes, primarily to deliver, maintain, and improve our Service, including:
- To provide and maintain our Service, including allowing you to view and manage your Google Ads campaigns.
- To perform lead scoring, lead enrichment, and generate insights based on your ad data and lead data.
- To analyze campaign performance and send automated alerts based on your configured workflows.
- To personalize your experience on the platform and provide tailored recommendations.
- To facilitate AI-powered ad generation, content creation, and optimization suggestions.
- To monitor the usage of our Service and detect, prevent, and address technical issues.
- To improve our Service, develop new features, and understand user behavior.
- To communicate with you, including sending important service announcements or support responses.
- To fulfill our legal obligations and enforce our terms of service.
We **do not** sell or rent your personal data or your Google Ads data to third parties.
3. Sharing & Disclosure of Your Data
We share your data only with trusted third-party service providers as necessary to operate our Service, with your consent, or when required by law:
- With Google APIs (with your explicit consent): We interact with Google Ads API and Google People API to retrieve and manage your ad accounts and data, and to fetch basic profile information, always under the permissions you grant. Your OAuth tokens are stored securely to facilitate this interaction.
- With AI Service Providers (e.g., OpenAI, Google Gemini): For AI-powered features like ad generation or content creation, certain data (e.g., your website URL, product descriptions, campaign objectives, ad text components you provide or generate) may be sent to these providers. We strive to minimize identifiable information in such transmissions where feasible and do not send raw personal user data unless strictly necessary for the feature. Please refer to their respective privacy policies for how they handle data:
- Cloud Hosting and Database (Google Cloud Platform, Firebase / Firestore): Your data is stored securely on Google's cloud infrastructure (Firebase and Firestore database). Google's privacy policies govern their handling of infrastructure data.
- Analytics Providers: We may use third-party analytics tools (e.g., Google Analytics) to help us measure traffic and usage trends for the Service. These tools collect information sent by your browser as part of a web page request, including cookies and your IP address.
- Legal Requirements: We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
- Business Transfer: If Syncora AI is involved in a merger, acquisition, or asset sale, your data may be transferred. We will provide notice before your data is transferred and becomes subject to a different Privacy Policy.
4. Data Security
We implement a variety of security measures to maintain the safety of your personal data and ad account information. These include:
- Secure authentication protocols (Firebase Authentication).
- Encryption of sensitive data, including OAuth tokens, in transit and at rest.
- Access control mechanisms to limit who can access your data.
- Regular security audits and updates to our systems.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
5. Data Retention
We retain your personal data and connected ad account data only for as long as is necessary for the purposes set out in this Privacy Policy, and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
When you disconnect an ad account, we will cease accessing data from that account immediately. We will retain any previously collected data (e.g., historical metrics, lead data) for a period necessary for legitimate business purposes or as required by law, after which it will be securely deleted or anonymized.
6. Your Data Protection Rights
Depending on your location, you may have the following data protection rights:
- The Right to Access: You have the right to request copies of your personal data.
- The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
- The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before its withdrawal.
To exercise any of these rights, please contact us using the details provided below.
7. International Data Transfer
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
Syncora AI will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
8. Children's Privacy
Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us: