Version 3
This Privacy Policy explains how Real Operations, LLC ("we", "us") collects, uses, stores, and shares information when you use SYNDIC HQ (the "Service").
1. Information we collect
- Account information: your name, email address, and role, used to sign you in and control access.
- Workspace information: your workspace name, business profile, brand rules, timezone, and team membership.
- Connected platform data: when you authorize a social account, we receive an access token, a refresh token, your account or page identifier, your display name or handle, and the permissions you granted.
- Content you create: ideas, briefs, captions, hashtags, images, video, schedules, and approval records.
- Distribution results: post identifiers, timestamps, delivery status, and error messages returned by each platform.
- Performance metrics: aggregate post metrics such as impressions, likes, comments, shares, and watch time, where a platform makes them available.
- Billing information: your subscription status, plan, and billing period. Payments are processed by Stripe; we do not receive or store your card details.
- Operational records: job records, usage counters, and audit entries used to run the Service, enforce plan limits, and diagnose failures.
We do not use tracking cookies for advertising.
2. How we use information
- To authenticate you and operate your workspace.
- To generate, review, schedule, and distribute content that you direct us to.
- To identify which accounts are connected and to publish or draft to them at your request.
- To report on distribution results, usage, and content performance.
- To bill your subscription and enforce your plan's entitlements.
- To detect, investigate, and fix errors and abuse.
We do not sell your personal information.
3. Workspace isolation
Each workspace's data is separated at the database level. Members of one workspace cannot read, modify, or publish through another workspace's content, credentials, or connections.
4. AI providers and your content
To fulfill a generation request you make, your content and instructions are sent to the AI providers that power the Service, which process them on our behalf to return the requested result. Providers act under our agreements with them and are not permitted to use the content for any purpose other than delivering that result.
5. Sharing and disclosure
We share information only with:
- Connected social platforms (LinkedIn, Facebook, Instagram, TikTok, Reddit), to publish or draft the content you approve;
- Infrastructure, AI, and payment providers that host the Service, generate content, and process payments on our behalf, under confidentiality obligations;
- Authorities, where required by law.
6. Data retention and deletion
- Content, distribution records, usage counters, and audit logs are retained while your workspace is active, so history and reporting remain available to you.
- Access and refresh tokens are deleted as soon as an account is disconnected.
- After a workspace is cancelled or terminated, its data is retained for 30 days and then permanently deleted, except records we must keep for legal, tax, or accounting purposes.
- You may request deletion of your account and workspace data at any time. We will complete a verified deletion request within 30 days.
7. Security
Data is transmitted over TLS and stored on managed infrastructure with access controls. Platform tokens and provider API keys are stored server-side, are never exposed to the browser, and are read only by server-side processes. No system is perfectly secure, so we cannot guarantee absolute protection.
8. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw authorization for a connected platform. To exercise these rights, contact us below. We do not discriminate against you for exercising them.
9. International transfers
We operate in the United States. If you access the Service from elsewhere, your information is transferred to and processed in the United States under appropriate safeguards.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their information.
11. Changes to this policy
We may update this policy. Each version is published with a version number and effective date, and earlier versions are retained. Material changes will be communicated to workspace owners.
12. Contact
Privacy questions, data requests, and legal notices: legal@realopsllc.com.