Privacy Policy
Last updated October 14, 2026
This policy explains what personal information Aroka Worldwide LLC (“SyncKart”, “we”) collects through SyncKart Studio, why, and the choices you have. We collect only what we need to run the Service, and we don't sell personal information.
What we collect
- Account details: name, email, optional company name, what you told us you want to create, and a securely hashed password (we never store the password itself). If you use Google sign-in, we receive your name, email and a Google account identifier.
- Your Content: product lists, images you upload and images the Service creates for you.
- Billing: plan, credit history and invoices. Card details are collected and stored by Stripe; we never see your full card number.
- Usage and technical data: jobs you run, credits used, sign-in times and basic logs our hosting provider keeps for security and troubleshooting.
- Messages: what you send us through the contact form or by email.
How we use it
- To provide the Service: run your jobs, store results, keep your account secure and process payments.
- To send account and service emails, such as sign-in links, receipts and important changes.
- To support you and respond to messages.
- To prevent abuse, such as repeated free trials, and to meet legal obligations.
- To improve the Service using aggregated usage information. We do not use Your Content to train AI models.
We send marketing emails only if you've agreed to receive them, and every marketing email has an unsubscribe link.
Who we share it with
We share data only with providers that help us run the Service, under contracts that limit how they use it, or where the law requires it:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Website and application hosting | United States |
| Neon | Database (accounts, jobs, usage records) | United States |
| Amazon Web Services | Storage of images you upload and create | Canada (Central) |
| Stripe | Payments, invoices and subscription management | United States |
| Twilio SendGrid | Account and service emails | United States |
| Anthropic | AI analysis that checks images against your products | United States |
| Serper | Web image search for catalogue matching | United States |
| fal.ai | AI image generation and background removal | United States |
| Optional "Continue with Google" sign-in | United States |
AI providers receive only the images and product text needed for a job, and process them to return a result to us.
How long we keep it
- Account data and Your Content: while your account is open.
- After you ask us to close your account: deleted within 30 days, except records we must keep for tax, accounting or legal reasons (such as invoices).
- Sign-in links expire within 20 minutes to 48 hours and are kept briefly for security.
Security
Data is encrypted in transit (HTTPS). Passwords are hashed with scrypt. Access to production systems is limited to staff who need it. See Security & data for more.
Your rights
Depending on where you live (for example under Canada's PIPEDA, the GDPR or California law), you may have the right to access, correct, download or delete your personal information, and to object to or restrict some uses. Email studio@synckart.com and we'll respond within 30 days. You can also complain to your local data protection authority.
International transfers
Our providers process data in the countries listed above. Where required, we rely on appropriate safeguards for transfers.
Children
The Service is for businesses and adults. It isn't directed to children and we don't knowingly collect their information.
Cookies
We use only essential cookies. See the Cookie Policy.
Changes and contact
We'll post updates here and notify you of material changes. Questions or requests: studio@synckart.com.