Privacy Policy
This Privacy Policy explains how Sync Projects ("Sync", "we", "us") collects, uses, shares, and protects information when you use the SYNC mobile app for iOS and Android, the SYNC web app, and the sync-projects.com website (together, the "Service").
SYNC is business software for construction companies. Most accounts are created and managed by an employer or organization (a "Customer"). If your account was provided by your employer, your employer controls much of the information in the Service and may have its own policies about how that information is used.
1. Who we are
The Service is operated by Sync Projects. You can reach us about privacy at info@sync-projects.com.
When a Customer uses SYNC to manage its projects and workforce, the Customer decides what information goes into the Service and we process it on the Customer's behalf. For information we collect to run and improve the Service itself — for example account, diagnostic, and support information — we are responsible for it directly.
2. Information we collect
Information you or your organization provide
- Account and profile information: name, email address, phone number, job role or trade, company or organization, password (stored only in hashed form), time zone, and any profile photo or signature you add.
- Work and project records: the content you create in SYNC, such as daily reports, work logs, notes, manpower and hours worked, timesheets, time and materials (T&M) records, tasks, incident reports, job hazard analyses (JHAs), equipment inspections and repair requests, toolbox talks, training records and certificates, and approvals.
- Photos, videos, and files: images you take with your camera or choose from your photo library, and documents you attach (for example PDF, Word, Excel, and text files). Photos may contain embedded details such as the date and place they were taken.
- Project and site information: project names, site addresses, and site coordinates entered for a project.
- Support requests: when you report a problem, the description you write, any screenshots you attach, and your contact details.
- Billing information: if your organization buys a subscription, billing contact details and payment records. Card details are handled by our payment processor; we do not receive or store full card numbers.
Information collected automatically
- Device and app information: device type and model, operating system and version, app version, and platform (iPhone, Android, or web).
- Diagnostics: error messages, crash reports, and performance data, which may include your IP address and user identifier so we can trace a problem back to the session in which it happened.
- Activity records: an audit log of significant actions in the Service — for example creating, approving, or deleting a record — including who performed the action and when.
- Push notification token: a device identifier that lets us deliver notifications to your phone.
Location
If you allow it, the mobile app reads your device's location while you are using the app. This is used on your device to check whether you are working in a different time zone from the one set on your profile, so reminders and report dates line up with your local time. Your device's precise coordinates are not uploaded to our servers for this purpose. We do not track your location in the background. Separately, the site location entered for a project is stored with that project.
3. How we use information
- To provide the Service: create and manage accounts, store and display your records, and generate reports, PDFs, and spreadsheets.
- To support day-to-day project work, such as routing items for approval, assigning tasks and repairs, and tracking hours.
- To show weather conditions for a project site in daily reports.
- To send notifications and service emails, such as approval requests, report deliveries, reminders, and password resets.
- To provide customer support and respond to issues you report.
- To keep the Service secure, detect and prevent abuse, and investigate errors and outages.
- To maintain audit records that your organization relies on.
- To process subscription payments.
- To comply with legal obligations and enforce our terms.
We do not sell personal information, we do not use it for targeted advertising, and we do not show third-party ads in the Service.
4. Device permissions
The mobile app asks for these permissions only when a feature needs them. You can change them at any time in your device settings.
- Camera — to take photos of sites, equipment, and incidents for your reports.
- Photos and files — to attach existing images and documents.
- Location — while using the app, to detect a time-zone difference as described above.
- Notifications — to alert you to approvals, assignments, and reminders.
If you decline a permission, the rest of the app keeps working; only the feature that needs it is unavailable.
5. How information is shared
We share information only in the following ways:
- Within your organization. Information you add is visible to other users in your organization according to their roles and permissions — for example, supervisors can see and approve reports submitted by their crew.
- With people you choose to send it to. When you email a report or request an approval, the recipients you select receive that content.
- With service providers. We use trusted companies to host and operate the
Service on our behalf. They may process information only to provide their services to us:
- Amazon Web Services — file storage and document processing
- MongoDB Atlas — database hosting
- Google Firebase — push notifications
- Microsoft 365 — sending service emails
- Sentry — error and crash monitoring
- OpenWeather — weather for project sites (receives the site's coordinates, not your identity)
- Google Maps Platform — address search and lookup
- Stripe — subscription payment processing
- For legal reasons. If required by law, or where reasonably necessary to protect the rights, property, or safety of our users, the public, or Sync.
- In a business transfer. If Sync is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
6. Where information is stored
Sync is based in Canada. Our service providers store and process information in Canada, the United States, and the European Union. In particular, uploaded files are stored in Canada and our database is hosted in the United States. Information held in another country may be accessible to that country's courts and authorities. We rely on contractual and technical safeguards with our providers to protect information wherever it is processed.
7. How long we keep information
We keep information for as long as your account or your organization's subscription is active, and afterward as needed to meet legal, accounting, and dispute-resolution requirements. Construction records such as daily reports and incident reports are often required to be retained by your organization, so they may remain in your organization's workspace after your individual account is closed.
Database backups are kept for up to 30 days and then overwritten, so deleted information may persist in backups for up to that period before it is permanently removed.
8. Security
Information is encrypted in transit using HTTPS/TLS. Passwords are stored as one-way hashes, and access to the Service requires authentication with role-based permissions. Access to production systems is limited to personnel who need it. No method of transmission or storage is completely secure, but we work to protect your information and to address issues promptly.
9. Your choices and rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct information that is inaccurate or incomplete;
- ask us to delete your information;
- withdraw consent where we rely on it, such as for optional device permissions; and
- complain to a data protection authority — in Canada, the Office of the Privacy Commissioner of Canada.
You can update most profile information in the app. For anything else, email info@sync-projects.com. If your account is managed by your employer, we may refer your request to them, since they control the records in their workspace. We will verify your identity before acting on a request.
10. Deleting your account and data
You can ask us to delete your SYNC account and associated personal information at any time, in either of these ways:
- On the web, without the app: go to sync-projects.com/delete-account, enter the email address on your account, and confirm with the verification code we email you.
- In the SYNC web app: while signed in, choose Delete account at the bottom of the menu.
We will confirm your request by email and complete it within 30 days. If you cannot use either option, email info@sync-projects.com from the address registered to your account.
When your account is deleted, we remove:
- your profile, login credentials, and signature;
- your push notification token; and
- support requests you submitted, including their screenshots and device details.
Business records you created for your organization — such as submitted daily reports, timesheets, incident reports, and approvals — belong to your organization and may be retained by it. Where they are retained, we will remove or de-identify your personal details from them where we can do so without making the records inaccurate. Information in backups is purged within 30 days, as described in section 7.
11. Children
The Service is a workplace tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date above, and where the changes are significant we will notify you through the Service or by email before they take effect.
13. Contact us
Questions or requests about this policy or your information:
Sync Projects
Email: info@sync-projects.com
Website: sync-projects.com