Privacy Policy
Last updated September 7, 2026.
1 · Who we are
CynchUp (contact: privacy@cynchup.com) is the data controller for personal data processed on cynchup.com. This is a business-to-business marketplace; the data we handle is mostly professional contact and transaction data.
2 · What we collect
Account data you provide (name, company, work email, phone, address, password hash). Marketplace activity: listings, media, offers, bids, invoices, payment status records (never card or bank numbers — we don't process payments), messages sent through the platform, and saved-search alerts. AI assistant conversations, stored with your account and metered. Technical data: IP address, user agent and request logs needed to run and secure the service, including rate-limiting counters keyed by IP. Inbound email sent to our listing-ingest addresses, including attachments. Safety records: reports you file about listings or members (kept with the reviewed item, not shown to the person reported) and the list of members you have blocked.
3 · What other members see
Your listings, wanted posts, company name and general location are public. Your email and phone are shown to signed-in members by default so counterparties can connect directly — you can turn this off in Account → contact visibility. After a completed auction, buyer and seller are shown each other's contact details regardless of that setting, because they need them to complete the deal. Bidder names are masked for everyone except the seller.
4 · How we use data
To operate the marketplace (accounts, listings, matching, invoices, notifications), to send transactional email (offers, invoices, password resets) and — with your opt-in — a marketing digest with one-click unsubscribe, to meter and improve AI features, to prevent fraud and abuse, and to comply with law. We do not sell personal data and we do not use it for third-party advertising.
5 · Processors we use
Cloudflare (hosting, storage, AI inference), Anthropic (AI assistant and import mapping — content of AI conversations and imported spreadsheets is sent to their API), and Resend (transactional email delivery). Each processes data on our instructions under their own data-processing terms.
6 · Cookies
One first-party session cookie (cynchup_session) keeps you signed in. No analytics or advertising cookies, no cross-site tracking.
7 · Retention
Account and transaction records are kept while your account is active and as long as needed for legal and accounting obligations (invoices typically 7 years). Sessions expire after 30 days; password-reset links after 60 minutes; expired reset tokens and rate-limit counters are purged daily. Email logs and audit logs are kept for security purposes.
8 · Your rights
Depending on where you are (including under GDPR and CCPA), you may have the right to access, correct, export or delete your personal data, object to or restrict processing, and complain to a supervisory authority. Email privacy@cynchup.com and we will respond within 30 days. You can also delete your account yourself at any time from Account → Delete my account, in the web app or the Android app — see Delete your account for exactly what goes and what is retained. Deleting removes your profile and unclaimed data; invoices and records we must keep by law are retained.
9 · International transfers & security
We run on Cloudflare's global network, so data may be processed outside your country, protected by standard contractual safeguards of our processors. Passwords are stored only as salted PBKDF2 hashes, reset tokens as SHA-256 hashes, and access to production data is limited to operators who need it.
10 · Changes
We'll post changes here and update the date below; material changes are announced by email or on the site. Questions: privacy@cynchup.com.