Privacy Policy

Last updated: July 14, 2026

This Privacy Policy explains how SyncBridge ("we", "us", or "our"), operated by Xoryo Technologies, collects, uses, and protects information about you when you use our platform at https://www.sync-bridge.app, including our dashboard, chatbot widget, WordPress plugin, and all connected integrations. By using SyncBridge you agree to the practices described in this policy.

1. Information We Collect

We collect information you provide directly and information generated through your use of SyncBridge:

Account Information: Name, email address, password hash, billing details, and profile settings you provide when registering.
Chat & Conversation Data: Messages exchanged through your deployed chatbot widget, Facebook Messenger, or other connected channels, including visitor messages, AI responses, and agent replies.
Integration Credentials: OAuth tokens for connected platforms (Facebook, Google Calendar, Zoom, Calendly). We store only the access tokens necessary to operate those integrations; we never store your passwords for third-party services.
Usage & Analytics Data: Pages viewed, features used, conversation counts, and performance metrics generated as you use the dashboard.
Technical Data: IP address, browser type, operating system, referrer URL, and device identifiers collected automatically when you access our service.
WordPress Plugin Data: If you install the SyncBridge WordPress plugin, we receive your site domain, plugin version, and widget configuration in order to serve the chatbot widget.

2. How We Use Your Information

We use collected information to:

  • Provide, operate, and improve the SyncBridge platform.
  • Deliver AI-powered chatbot responses and route conversations to the appropriate team member or agent.
  • Sync appointments and meetings with your connected calendar and video conferencing tools.
  • Send transactional emails: account confirmations, password resets, booking notifications, and billing receipts.
  • Generate analytics reports about chatbot performance and lead activity.
  • Detect, prevent, and respond to fraud, abuse, or security incidents.
  • Comply with applicable laws and enforce our Terms of Service.

3. Third-Party Services & Integrations

SyncBridge integrates with the following third-party services. When you connect an integration, that service's own privacy policy also applies to data processed through it. We only request the permissions necessary to operate the features you enable.

Calendar & Booking

Google Meet / Google Calendar: Used to schedule video calls and read/write calendar availability for AI-powered booking. Governed by Google's Privacy Policy.
Zoom: Used to generate meeting links and manage video sessions. Governed by Zoom's Privacy Policy.
Calendly: Used to create scheduling pages and sync booking availability. Governed by Calendly's Privacy Policy.

Messaging Channels

Meta — Facebook & Messenger: Used to receive and reply to Facebook Page DMs and post comments via your connected Page. Governed by Meta's Platform Terms.
Meta — Instagram: Used to receive and reply to Instagram Direct Messages and post/reel comments. Governed by Meta's Platform Terms.
Twitter / X: Used to receive and reply to X (Twitter) Direct Messages and tweet mentions. Governed by X's Developer Agreement and Policy.
WhatsApp Business: Used to sync WhatsApp Business conversations for mobile management and follow-ups. Governed by Meta's Business Messaging Terms.
Slack: Used to post notifications for new leads, conversations, and bookings to your Slack workspace. Governed by Slack's Privacy Policy.
Microsoft Teams: Used to post notifications for new conversations, leads, and bookings to your Teams channels. Governed by Microsoft's Privacy Statement.
Email (SMTP): Your own email provider credentials (host, port, username) are used to send and receive emails directly in the SyncBridge inbox. Credentials are encrypted at rest and never shared.

Advanced Integrations

Salesforce: Captured leads are pushed directly into your Salesforce CRM pipeline. Governed by Salesforce's Privacy Statement.
Zapier: Connects SyncBridge to 5,000+ apps via webhooks and automated workflows. Data sent to Zapier is governed by Zapier's Privacy Policy.
WooCommerce: Allows the AI to look up order status, products, and shipping information for your customers in real time. Data is retrieved from your own WooCommerce store via API.

Infrastructure & Payments

Vercel: Our frontend hosting provider. All web traffic to sync-bridge.app passes through Vercel's infrastructure. We also use Vercel Analytics and Vercel Speed Insights, which collect aggregate page-view data, referrer information, and Core Web Vitals performance metrics to help us improve the platform. No personally identifiable information is collected by these tools. Governed by Vercel's Privacy Policy.
Stripe: Primary payment processor for SyncBridge subscriptions. We never store your full card number; all payment data is handled by Stripe under PCI-DSS compliance.
PayPal: Alternative payment option for SyncBridge subscriptions. Payment data is handled entirely by PayPal and governed by PayPal's Privacy Statement.
Lemon Squeezy: Alternative payment and billing platform. Order and subscription data processed through Lemon Squeezy is governed by their Privacy Policy.
Supabase: Our primary database, authentication, and storage provider. All data is stored in encrypted, access-controlled databases on Supabase infrastructure.
Google reCAPTCHA v3: Used on public-facing forms to detect and block automated bot submissions. When you interact with a form on our site, Google reCAPTCHA collects browser and behavioral signals (such as your IP address, mouse movements, and interaction patterns) and sends a risk score to our servers. No data is stored by SyncBridge from this process. Governed by Google's Privacy Policy.
OpenAI: Powers AI chatbot responses. Conversation context may be sent to OpenAI's API to generate replies. Governed by OpenAI's Usage Policy.
Anthropic (Claude): Powers AI chatbot responses and agent-assist features. Conversation context may be sent to Anthropic's API to generate replies. Governed by Anthropic's Privacy Policy at anthropic.com.
Resend: Handles transactional email delivery for account notifications, receipts, and booking alerts.
Browserless.io: When you add a URL to your AI Knowledge Base and that page is JavaScript-rendered (a single-page application), SyncBridge sends that URL to Browserless.io's headless browser API to retrieve the fully rendered page content. Only the URL you provide is transmitted; no personal data or conversation history is sent. Governed by Browserless's Privacy Policy at browserless.io.
Playwright: An open-source browser automation library by Microsoft, used internally by SyncBridge at build time to pre-render our own public pages into static HTML. Playwright runs within our own infrastructure and does not process or transmit any user data.

4. Data Sharing

We do not sell your personal information. We share data only in these limited circumstances:

  • With the third-party services listed above, strictly to provide the features you've enabled.
  • With our hosting and infrastructure providers (Supabase, Vercel/Cloudflare) that process data on our behalf under appropriate data processing agreements.
  • When required by law, court order, or governmental authority.
  • In connection with a merger, acquisition, or sale of assets, in which case you will be notified.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

  • Account data is retained until you delete your account.
  • Conversation and message history is retained for the duration of your subscription. You may delete individual conversations from the dashboard at any time.
  • Analytics data is aggregated and retained for up to 24 months.
  • After account deletion, we remove personal data within 30 days, except where we are required to retain it by law.

6. Cookies & Tracking

SyncBridge uses cookies and similar technologies to:

  • Maintain your authenticated session in the dashboard.
  • Remember your preferences (theme, sidebar state).
  • Measure aggregate usage patterns to improve the product.

The SyncBridge widget placed on your website uses a session cookie scoped to your domain to persist conversation state. It does not track visitors across other websites. See our Cookie Policy for full details.

7. Security

We implement industry-standard security measures including TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, row-level security policies so each user's data is isolated at the database level, and OAuth 2.0 for all third-party integrations.

If you discover a vulnerability, please report it to info@xoryotech.com. See our Security page for full details.

8. Your Rights (GDPR & Privacy Laws)

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. See our GDPR page for full details on how to exercise these rights.

To make a request, email info@xoryotech.com. We will respond within 30 days.

9. Children's Privacy

SyncBridge is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you by email or a prominent notice in the dashboard. Continued use of SyncBridge after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

SyncBridge — Xoryo Technologies

info@xoryotech.com

https://www.sync-bridge.app