Privacy Policy

Last updated: April 17, 2026

At SportsSync, we are committed to protecting your privacy. This policy describes how we collect, use, and protect your personal data.

1. Data We Collect

We collect information you provide directly: email address, name, profile data, GPS/telemetry data from your activities, and videos you upload. We also collect usage data automatically: IP address, browser type, device information, and interaction patterns.

2. How We Use Your Data

We use your data to provide and improve our services, process your videos with telemetry overlays, communicate with you about your account, and ensure the security of our platform.

3. Data Sharing

We do not sell your personal data. We share data only with service providers necessary to operate the platform (cloud hosting, video processing, email delivery) under strict data processing agreements.

4. Data Storage and Security

Your data is stored on secure servers in the European Union and United States. We implement industry-standard security measures including encryption in transit and at rest.

5. Your Rights (GDPR)

You have the right to access, rectify, delete, and port your personal data. You can exercise these rights by contacting us at privacy@sportssync.io.

6. Cookies

We use essential cookies for authentication and preferences. See our Cookie Policy for details.

7. Third-Party Integrations: Strava

When you connect your Strava account, SportsSync receives read-only access to your activities, GPS streams, heart rate, power, cadence, temperature, speed and elevation data via the Strava API. We store your OAuth access and refresh tokens encrypted at rest (AES-256-GCM) and use them only to import activities you explicitly select. Imported GPX data is stored alongside the activity you link it to in our database and treated as your personal data under this policy. You can revoke SportsSync's access at any time from your Strava account settings (https://www.strava.com/settings/apps) or by disconnecting from the SportsSync settings page, which deletes the stored tokens. Use of Strava data is subject to Strava's own Terms of Service and Privacy Policy.

8. Third-Party Integrations: Instagram / Meta

When you connect your Instagram account, SportsSync uses the Instagram Business Login API to obtain a limited-scope access token that allows publishing Reels to your account on your behalf. We store your access token encrypted at rest (AES-256-GCM) and your Instagram username. We do not read your Instagram posts, messages, followers, or any other account data — the connection is used exclusively to publish content you explicitly initiate from SportsSync. You can disconnect your Instagram account at any time from the SportsSync settings page, which immediately deletes the stored token. You can also revoke access from your Instagram settings (Settings → Website permissions → Apps and websites). Use of Instagram data is subject to Meta's Terms of Service (https://www.facebook.com/terms) and Privacy Policy (https://www.facebook.com/privacy/policy). SportsSync is an independent product and is not affiliated with, endorsed, or sponsored by Meta or Instagram.

9. Contact

For privacy inquiries, contact us at privacy@sportssync.io.