Privacy Policy

1. Controller

Syvorex

Sonnhalb 38

5511 Huettau

Austria

Email: support@syvorex.com

Website: https://syvorex.com

2. General information

Protecting your personal data is important to us.

We process personal data only on the basis of applicable legal requirements, including the GDPR.

3. Data we process

Depending on your use of Syvorex, we may process the following categories of data:

• Name
• Email address
• Encrypted password
• Payment information
• User account
• Projects
• AI inputs
• Generated content
• Usage statistics
• Server log data

4. User account

During registration, we store account information such as email address, encrypted password, user ID, selected plan and account status. This data is required to provide your account.

5. AI-generated content

To generate marketing content, Syvorex processes the information you provide, such as company name, products, services, target groups, websites, descriptions and marketing information.

6. Payments

Payments are processed by Stripe Payments Europe Ltd. Stripe processes payment data independently.

More information: https://stripe.com/privacy

7. Authentication and database

We use Supabase for user management, authentication and account-related storage.

More information: https://supabase.com/privacy

8. Hosting and security

Syvorex is hosted on Vercel. Domain and security services may be provided by Cloudflare. Technical access data can be processed when visiting the website.

9. Connected providers

If you connect services such as TikTok, YouTube, Facebook, Instagram, WordPress or Pinterest, Syvorex stores the required server-side connection metadata and tokens only as needed to provide the integration.

10. Cookies

Syvorex uses technically necessary cookies for login, security, session management and account functionality.

11. Social login and voluntary account connection

Users may voluntarily connect only their own accounts on TikTok, YouTube (Google), Facebook and Instagram through the respective platform provider's OAuth process. A social-media connection is not required for other Syvorex functions.

Before authorization, the respective platform provider displays the requested permissions. Syvorex receives and processes only the data and permissions explicitly authorized by the user. Syvorex does not read, connect or manage third-party accounts and does not process content or data from accounts the user did not connect.

12. Social-media data and processing purpose

To identify a voluntary connection, Syvorex processes the account or channel identifier, display name, profile image and any other basic information authorized by the user and supplied by the respective provider. For TikTok, this may include the Open ID and, if supplied, the Union ID. Syvorex also processes granted scopes and technical token and connection metadata.

The sole purposes are to display the user's own connected TikTok, YouTube, Facebook or Instagram account in Social Publishing, prepare user-selected content for that account and perform platform functions requested by the user.

Publication or transmission to a platform occurs only after the user's explicit action or approval and within the granted permissions. Syvorex does not publish without such action or approval and does not read, import or manage third-party accounts.

13. OAuth tokens, security and retention

Access and refresh tokens for TikTok, YouTube (Google), Facebook and Instagram are encrypted and stored server-side in the database provided by Supabase. Vercel provides application hosting and server-side processing. OAuth tokens are not displayed publicly, sold, disclosed to unauthorized third parties or used for advertising.

Tokens and connection metadata are retained only while the respective connection remains active and they are needed for the user-requested function. A technically necessary encrypted connection cookie is limited to a maximum of 90 days. Expired or revoked tokens are not used; a new authorization may technically replace them.

14. Disconnecting accounts and deleting data

Users can remove any connection at any time in Syvorex under Social Publishing by choosing Disconnect for the respective TikTok, YouTube, Facebook or Instagram account, or revoke access in the respective platform account settings. Disconnecting deletes the stored OAuth tokens and related connection metadata from active server-side storage and removes the connection cookie.

Users can request full account deletion or deletion of additional integration-related data at https://syvorex.com/data-deletion or by email to support@syvorex.com. Content already published to TikTok, YouTube, Facebook or Instagram remains on the respective platform and must be deleted there by the user.

15. Processors and platform providers

Vercel Inc. processes technical requests and provides hosting for the website and application. More information: https://vercel.com/legal/privacy-policy

Supabase, Inc. provides authentication and database services; encrypted OAuth tokens and connection metadata are stored there and assigned to the Syvorex user account. More information: https://supabase.com/privacy

TikTok processes data as an independent platform provider under its own privacy policy. More information: https://www.tiktok.com/legal/page/eea/privacy-policy/en

Google LLC processes data for YouTube and Google OAuth as an independent platform provider under its own privacy policy. More information: https://policies.google.com/privacy?hl=en-US

Meta Platforms Ireland Limited processes data for Facebook and Instagram as an independent platform provider under the Meta Privacy Policy. More information: https://www.facebook.com/privacy/policy/

16. Your rights and privacy contact

You have rights of access, rectification, deletion, restriction, portability and objection. Send privacy and deletion requests to support@syvorex.com.