Zyncast legal
Privacy Policy
What Zyncast collects, what we read from each platform you connect and why, who we share it with, and how to get all of it deleted. Written to be read, not to be survived.
Last updated 11 October 2026
1.Who we are
Zyncast is a publishing tool. You send us a message — on WhatsApp, on Telegram, or from the dashboard — and we schedule and publish that post to the social accounts you have connected: Instagram, Facebook, TikTok, LinkedIn, X and YouTube.
Zyncast is developed and operated by CIPHER TECH INNOVATION LABS, Inc., a Delaware corporation (Delaware Division of Corporations file no. 10753451), whose registered office is at 131 Continental Dr, Suite 305, Newark, DE 19713, United States. That company is the data controller for the information described here.
You can reach our privacy contact at privacy@zyncast.com, or by post at the registered office above. Our contact page lists every route.
2.What we collect
Only what the product needs to do its job.
| Category | Examples |
|---|---|
| Account details | Your name, email address, password (stored only as a hash) or the Google account you sign in with, and your WhatsApp number or Telegram chat if you link one. |
| Message content | The messages you send Zyncast on WhatsApp or Telegram, and the photos, videos and voice notes you attach to them. |
| Post content | Captions, hashtags, media and scheduling times for posts you create, including drafts you never publish. |
| Connected account data | Access tokens issued by each platform, the account ID and name of each connected profile, Page or channel, and the permissions you granted. Section 3 lists exactly what we read from each platform. |
| Publishing results | Whether each post succeeded, the platform’s post ID, and any error the platform returned. |
| Insights | Reach, views, likes, comments and similar counts that platforms report for posts published through Zyncast. |
| Billing | If you subscribe to a paid plan: your plan, billing status and invoices. Card details are entered on Stripe’s page and stored by Stripe — we never see or store your card number. |
| Technical logs | IP address, browser, timestamps and error traces, kept for security and debugging. |
We do not buy data about you from anyone, and we do not run advertising or tracking pixels on this website or in the product.
3.Data we access on each platform
When you connect an account, you are sent to that platform’s own login screen and shown exactly which permissions you are granting. We never ask for, see, or store your social media passwords. What we receive is an access token limited to the permissions you approved. This is everything we request, and why:
| Platform | What we access | Why |
|---|---|---|
| Google (sign-in) openid, email, profile | Your name, email address and profile picture. | To create your account and sign you in with Google. |
| YouTube (via your Google account) youtube.force-ssl | Your channel’s ID and name, the videos and playlists on the channel, and view, like and comment counts for videos. | To upload the videos you schedule, set their title, description and privacy, list your uploads so you can pick and edit them, change video details and playlists when you ask us to, and show how videos published through Zyncast performed. |
| Instagram instagram_business_basic, instagram_business_content_publish | Your Instagram professional account ID, username and profile picture, your recent posts, and insights for posts. | To publish the photos, videos, reels and carousels you schedule, to show how they performed, and to read a source post when an automation you set up reposts it. |
| Facebook public_profile, email, pages_show_list, pages_manage_posts, pages_read_engagement, business_management | Your name and email, the list of Facebook Pages you manage, and engagement on posts published to the Page you choose. | To let you pick the Page to publish to, publish your posts to it, and show how they performed. We request the Page’s access token from Facebook each time we publish and never store it. |
| TikTok user.info.basic, user.info.profile, video.publish | Your TikTok open ID, display name and avatar, and the posting options TikTok offers your account (privacy levels and maximum video length). | To show which account you connected, check a video against your account’s limits before it is sent, and publish the videos you schedule. |
| LinkedIn openid, profile, email, w_member_social | Your name, LinkedIn member ID, email address, and likes and comments on posts we published for you. | To publish posts to your LinkedIn profile and show how they performed. |
| X (Twitter) users.read, users.email, tweet.read, tweet.write, media.write, offline.access | Your X user ID, username and email address, and metrics for posts we published for you. | To publish posts with images or video, keep the connection working without asking you to sign in again, and show how posts performed. |
| WhatsApp Messages you send to Zyncast | Your WhatsApp phone number and profile name, and the messages, photos, videos and voice notes you send to the Zyncast business number. | WhatsApp is how you talk to Zyncast: we read your message to draft, schedule and publish the post you asked for, and reply in the same thread. |
| Telegram Messages you send to the Zyncast bot | Your Telegram chat ID, username and display name, and the messages and media you send to the Zyncast bot. | The same as WhatsApp, for people who prefer to use Zyncast from Telegram. |
We use platform data only to provide the features you asked for. We do not sell it, use it for advertising, build profiles from it, use it to train AI or machine learning models, or share it with data brokers. Posts only go out when you approved them or set up the schedule or automation that sends them.
You can disconnect any account from your Zyncast dashboard, or revoke our access from within the platform itself, at any time. Disconnecting in the dashboard deletes the stored token immediately and we stop publishing to that account.
4.Google and YouTube data
Zyncast’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing features described in section 3.
- We do not transfer it to others except as needed to provide those features (for example, to our hosting provider), to comply with the law, or as part of a merger or acquisition with notice to you.
- We do not use it for advertising, do not sell it, and do not use it to develop, improve or train generalised AI or machine learning models.
- Our staff do not read it, except with your permission for support, for security, or where the law requires.
Zyncast uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google’s handling of your data is governed by the Google Privacy Policy.
You can revoke Zyncast’s access to your Google account and YouTube channel at any time from Google’s security settings page, or by disconnecting YouTube in your dashboard. To have the YouTube data we hold deleted as well — your channel’s ID and name and the IDs of videos we published — email privacy@zyncast.com and we will delete it within 7 days.
5.Other platforms’ terms
Our use of information received from Meta APIs (Instagram, Facebook and WhatsApp) adheres to the Meta Platform Terms. Our use of TikTok, LinkedIn and X data adheres to the TikTok Developer Terms, the LinkedIn API Terms of Use and the X Developer Agreement and Policy.
6.How we use it
- To publish what you ask us to publish. Your message becomes a scheduled post; at the scheduled time we send it to each connected platform on your behalf.
- To adapt content per platform. Resizing and cropping media to each platform’s specification, and — when you ask for it — drafting, rewriting, translating or generating captions, hashtags and images, and transcribing voice notes.
- To report back. Confirming in your chat thread or dashboard when a post goes live or fails, and showing performance.
- To run automations you set up. For example, reposting a new Instagram post to LinkedIn, if you have asked for that.
- To bill you, if you are on a paid plan.
- To keep the service working and secure. Diagnosing errors, preventing abuse, and meeting our legal obligations.
7.How AI features handle your content
When you ask Zyncast to write, rewrite, translate, transcribe or illustrate something — or when you talk to Zyncast in chat — the relevant content is sent to a third-party AI provider to produce the result.
- Your content is not used to train the AI provider’s models. We use commercial API terms that exclude training.
- AI features only run when you invoke them or when an automation you created invokes them.
- You review AI-generated content before it goes out. Nothing publishes without your approval.
9.How long we keep it
- Account details, posts, messages and media — for as long as you have an account, so you can reuse and review your content. Closing your account deletes them.
- Access tokens — until you disconnect the account, the platform expires them, or you close your account.
- Publishing records and insights — for as long as you have an account.
- Technical logs — for a limited period, after which our logging provider deletes them automatically.
- Billing records — as long as tax and accounting law requires, even after you close your account.
10.Your rights, and how to delete everything
You can ask us for a copy of your data, or ask us to correct it, restrict how we use it, or delete it entirely. Depending on where you live these rights come from the California Consumer Privacy Act (as amended by the CPRA) and other US state privacy laws, the GDPR, the UK GDPR, or the Nigeria Data Protection Act — we honour them for everyone regardless. We will not treat you differently for using them.
To remove a single connection, disconnect it in your dashboard. To close your account and erase your data, follow the data deletion instructions.
For anything else, email privacy@zyncast.com. We respond within 30 days. If you are in the EEA or UK and think we’ve got it wrong, you have the right to complain to your local data protection authority.
11.How we protect it
- Access tokens are encrypted at rest, and are never shown in the dashboard or logs.
- All traffic is encrypted in transit with TLS.
- Incoming WhatsApp webhooks are signature-verified, so we only act on messages that genuinely came from Meta.
- Access to production data is limited to staff who need it, and staff actions on accounts are logged.
12.Where your data lives
CIPHER TECH INNOVATION LABS, Inc. is a United States company. Our infrastructure runs in the United States and the European Union, and members of our team work from outside the United States, including from Nigeria, and may access data from there under the same controls. Where we transfer personal data out of the EEA or the UK, we rely on Standard Contractual Clauses with the providers involved.
13.Children
Zyncast is a business tool and is not directed at children. You must be at least 18 to use it, and we do not knowingly collect data from anyone under 13. If you believe a child has given us personal data, email privacy@zyncast.com and we will delete it.
14.Changes to this policy
If we change how we handle your data in a way that materially affects you, we’ll email you before the change takes effect. The date at the top of this page always reflects the current version.