Synchee Privacy Policy
1 Scope and our role
This policy explains how Synchee, LLC (Synchee, we, us) collects, uses, discloses, and retains personal information through synchee.com, app.synchee.com, and Synchee mobile applications for iOS and Android (the Services). It covers website visitors, people who contact us, business account administrators, and workers using a customer workspace. The Services are initially offered to United States customers.
For workforce information, your employer or other workspace administrator generally decides what to collect, who can access it, and how it is used for employment purposes. Synchee processes that information on the customer’s behalf under our customer agreement and Data Processing Addendum. Synchee determines how to handle information for its own website inquiries, account administration, billing, security, and direct communications. Privacy requests about employer records should generally be directed to the employer.
2 Information we collect
Website inquiries and support. Email addresses, optional phone numbers, correspondence, and information you submit through our interest or contact forms or send to our support or legal email address.
Accounts and billing. Names, business contact details, business locations, account roles, authentication information, subscription details, and billing and transaction records. Our payment provider processes payment information, including card and billing details. Synchee’s native mobile apps display subscription information; payment entry is handled through the web billing interface.
Worker profiles. Depending on the customer’s use of the Services, full and preferred names, email addresses, phone numbers, job titles, roles, departments, assigned locations, profile photos, hourly pay rates, wage history, hire dates, and emergency contact information. If you provide information about someone else, you should have authority to provide it.
Workforce activity. Draft and published schedules, shifts, availability, shift swap and cover requests, time punches and breaks, manager edits, time-off balances and accruals, task lists and completion photos, manager logs and sales figures, shift notes, messages, announcements, and acknowledgment receipts.
Forms and uploaded documents. Onboarding responses, employee certifications, custom forms, attachments, electronic signatures, and signature timestamps and IP addresses. Form I-9 information may include legal name, date of birth, Social Security number, home address, citizenship or immigration status, USCIS or alien registration number, Form I-94 number, passport details, and identity document numbers and expiration dates. These records can contain sensitive personal information.
Location. When an employer enables geofencing, the Services request precise location when you clock in or out to evaluate whether you are within the workplace geofence. Time records may include GPS coordinates and geofence compliance flags. If you punch while offline, the device can store the punch and associated location until it reconnects.
Device and technical information. IP addresses, browser and device characteristics, operating system and platform, session timestamps, service logs, and device push notification tokens used to deliver notifications.
3 Device permissions and offline storage
We request device permissions in context when a feature needs them. Camera access supports real-time photos of completed tasks and profile photos. Photo or file selection supports profile pictures, certifications, and onboarding attachments. Notification permission supports schedule changes, shift reminders, time-off decisions, and team messages. Location permission supports workplace geofencing at time punches.
You can change permissions in your browser or device settings. Denying a permission may prevent the related feature from working; contact your employer about alternatives for required work activities. Notification previews may display information on your device’s lock screen depending on your settings.
Synchee uses ordinary photos and does not use them to create facial recognition templates or other biometric identifiers. Synchee does not collect fingerprints or scan facial geometry.
For offline operation, the Services can temporarily store pending time punches, breaks, location verification information, and cached profile and schedule information on your device, then synchronize pending records when connectivity returns. Local storage also remembers authentication sessions, selected locations, dismissed walkthroughs, and task read status.
4 How we use information
We use personal information to create and authenticate accounts; provide scheduling, time tracking, messaging, tasks, forms, and other workforce features; deliver enabled notifications; manage subscriptions; respond to inquiries and provide email support; maintain, troubleshoot, and secure the Services; prevent abuse; and comply with legal obligations. Sensitive workforce information is processed to provide the features requested by the employer or administrator, subject to our customer agreement and applicable law.
We use website inquiries to respond to people who ask to hear from us. If we send promotional email, you can unsubscribe using the instructions in that email or contact legal@synchee.com. Service and security messages may continue. Providing an optional phone number is not consent to marketing texts. Outbound SMS delivery is currently disabled.
We do not use identifiable workforce content, including employee identities, I-9 records, wage rates, time cards, shift logs, or chat messages, to train public artificial intelligence models, build advertising profiles, or perform third-party commercial benchmarking. Public AI models and autonomous AI decision-making engines do not process customer workforce, personnel, or payroll data as part of the current Services.
5 How we disclose information
Your employer and authorized workspace users can access information according to configured roles and features. Synchee personnel and service providers may access information as needed to deliver, secure, troubleshoot, or support the Services, subject to applicable safeguards and agreements.
Infrastructure. Lovable Cloud with Supabase supports databases, authentication, and file storage. The core database is hosted in the United States in AWS us-east-1. Cloudflare supports hosting, content delivery, edge routing, and security and may process IP addresses, request headers, and traffic through its global infrastructure.
Notifications and email. Google Firebase Cloud Messaging and Apple Push Notification service process device tokens and notification payloads to deliver mobile notifications. Resend supports transactional email when configured, such as account verification, password reset, and schedule notifications.
Payments. Stripe supports subscription billing and processes payment and billing information.
We may disclose information to professional advisers; to comply with law, legal process, or lawful government requests; to protect rights and safety or investigate abuse; and in connection with a merger, acquisition, financing, or sale of business assets, subject to applicable safeguards. Customer-added websites and integrations are governed by their operators’ policies. Information you send to those destinations may be handled separately from Synchee.
We do not sell personal information or share it for cross-context behavioral advertising, and we do not use customer workforce content for targeted advertising. Necessary disclosures to service providers for the purposes described above still occur.
6 Cookies and similar technologies
The app uses cookies and local device storage for authentication, preferences, security, offline operation, and other service functions. The current app has no advertising pixels or cross-site tracking beacons and no active third-party behavioral analytics or external crash reporting tools.
You can manage cookies through browser settings, but restricting necessary storage may affect sign-in and other features. Because we do not sell personal information or share it for cross-context behavioral advertising, there is currently no such activity to stop in response to a Global Privacy Control signal. If these practices change, we will update our disclosures and provide controls required by applicable law.
7 Retention and deletion
We retain information for as long as reasonably necessary for the purposes described in this policy, considering the customer relationship, the type and sensitivity of information, customer instructions, legal recordkeeping requirements, security needs, and dispute resolution. Deleting login access and deleting an employer’s employment records are different actions.
When a worker is removed from a roster, access to that workspace is revoked. Historical time and employment records may remain available to the employer for lawful recordkeeping. Employers determine applicable retention periods and must export records they need to keep before deleting a workspace. For Form I-9, the employer’s retention obligation is generally three years after hire or one year after employment ends, whichever is later; closing a Synchee workspace does not eliminate that obligation.
The account owner can initiate workspace deletion through the Delete Account & All Locations control in Settings. That action deletes associated locations, schedules, rosters, and chat records from the active database. Database backups are scheduled to age out within 30 days. Limited information may be retained where needed for legal obligations, fraud prevention, security, billing, or disputes.
Push notification tokens are removed when a device token is reported invalid or when the user signs out.
8 Security
We use technical and organizational safeguards appropriate to the information, including encrypted transmission, database access controls, role-based permissions, private file access, and time-limited file links. Access is limited according to workspace roles and service needs. No storage or transmission method can guarantee absolute security.
9 Your choices and privacy requests
Contact legal@synchee.com to request access to, correction of, or deletion of personal information Synchee handles for its own purposes, or to ask questions about our practices. Depending on applicable law, you may also have rights to obtain a portable copy, restrict certain processing, use an authorized agent, or appeal a denied request. We may verify your identity and authority, and exceptions may apply. We will explain a denial and provide an appeal process where required. We will not unlawfully discriminate against you for exercising privacy rights.
For employment records in a customer workspace, contact your employer or administrator. Synchee will assist the customer with requests as required by our agreement and applicable law. If you cannot identify the administrator, email us so we can help route your request.
To request deletion of your Synchee login account and associated information, email legal@synchee.com with the subject Account Deletion and identify the account and workspace. We will verify the request and explain any information that must remain for legal or employer recordkeeping purposes. Removing a worker from a roster alone does not establish that all of their Synchee account information has been deleted.
10 Children
The Services are intended for businesses and workers and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact legal@synchee.com. If confirmed, we will take appropriate steps to delete it. Employers must ensure that their use of the Services for teenage workers complies with applicable law.
11 Processing locations and policy updates
Our core database is hosted in the United States. Global delivery infrastructure and service provider operations may involve processing in other countries, as described in Section 5. A US-only customer launch does not mean all processing occurs exclusively in the United States.
We may update this policy as our Services and practices change. We will post the revised policy with an updated effective date and provide additional notice or obtain consent where required.
12 Contact
Synchee, LLC Email: legal@synchee.com