Privacy Policy

Synapse is an autonomous business profile management platform developed and operated by Trendex Hub, a software company registered in Uganda. This Privacy Policy explains how Synapse collects, discloses, and protects information when you use the platform to manage your Google Business Profile, Google Ads campaigns, and related Google services.

By using Synapse, you agree to the practices described in this policy. If you do not agree, please discontinue use of the platform. For questions, contact us at info@trendexhub.com.

Synapse accesses the following Google APIs on your behalf, solely to provide the features described in this policy:

• Google Business Profile API — to manage your business listing, publish posts, respond to customer reviews, answer questions, update business information, manage photos and media, and retrieve performance insights.
• Google Ads API — to read campaign performance data, monitor ad spend, retrieve impression and click metrics, and surface advertising insights within the Synapse dashboard. Synapse does not create, modify, or delete Google Ads campaigns without your explicit instruction.
• Google OAuth 2.0 — to authenticate your identity and authorise Synapse to access only the Google services you explicitly grant permission for.

Data obtained through these Google APIs is used exclusively to provide and improve the Synapse service to you. Trendex Hub does not use this data to serve advertisements, sell it to third parties, or use it for any purpose unrelated to the functionality described in this policy. Google user data is never used for training machine learning models outside of the direct service.

Trendex Hub collects only the information necessary to operate the Synapse platform:

• Google OAuth credentials — access tokens and refresh tokens that authorise Synapse to act on your behalf. Tokens are stored in encrypted environment variables and are never shared with third parties.
• Google Business Profile data — your business name, address, phone number, category, hours of operation, service list, posts, photos, and customer reviews retrieved via the Google Business Profile API.
• Google Ads data — campaign names, impression counts, click data, cost metrics, and performance summaries retrieved via the Google Ads API. This data is used solely to display advertising performance within your Synapse dashboard.
• Review and Q&A content — customer review text, star ratings, and questions retrieved from your Google Business Profile listing in order to generate AI-assisted responses on your behalf.
• Performance insights — search impression counts, direction requests, phone call counts, and engagement metrics from Google Business Profile Insights.
• Audit log data — a record of autonomous actions taken by the Synapse agent (posts published, replies sent, actions skipped, policy rejections), retained in a server-side ring buffer of approximately 500 entries for your review and cleared on each deployment.

Information collected via Google APIs is used solely to provide the Synapse service as described below. No Google user data is used for any secondary purpose.

• Authenticating your account and maintaining a valid Google API session.
• Autonomously publishing daily business posts to your Google Business Profile.
• Drafting and submitting replies to 4-star and 5-star customer reviews on your behalf.
• Retrieving and displaying Google Business Profile performance data in your Synapse dashboard.
• Retrieving and displaying Google Ads campaign performance data in your Synapse dashboard.
• Logging all autonomous actions to an audit trail accessible only to you.
• Improving the accuracy of AI-generated content through direct service feedback (no data is shared externally for this purpose).

Trendex Hub does not sell, rent, or share your Google API data with any third party, except as required to operate the platform:

• Google LLC — API calls are made directly to Google's servers. Your data is subject to Google's Privacy Policy.
• Google Gemini API — used solely to generate AI-written post drafts and review reply drafts. Prompts include anonymised business context (business name, category, tone). No customer personal data, no review author names, and no Google Ads financial data are included in prompts sent to Gemini.
• Vercel Inc. — Cloud hosting and serverless infrastructure provider. No Google user data is stored in Vercel's persistent storage; data is processed in-memory per request.

We do not share Google user data with any advertising networks, data brokers, analytics platforms, or other third parties beyond those listed above.

Synapse is deployed on Vercel's infrastructure with the following security measures in place:

• All API credentials and OAuth tokens are stored as encrypted environment variables — never in source code or logs.
• All communications between Synapse and Google APIs use HTTPS/TLS encryption.
• All Synapse API endpoints are protected by API key authentication: no endpoint is publicly accessible without a valid key.
• Business profile data retrieved from Google APIs is processed in-memory during each request and is not written to any persistent third-party database.
• Google Ads performance data is fetched on-demand and displayed in-session; it is not stored beyond the duration of the API response.
• The autonomous audit log is maintained as an in-memory ring buffer and is cleared on each redeployment.

Trendex Hub retains your API credentials and configuration for as long as your account is active. To request deletion of your data:

• Revoke Google access — remove Synapse from your Google Account's authorised applications at myaccount.google.com/permissions. This immediately invalidates all OAuth tokens and prevents any further API access.
• Contact us — email info@trendexhub.com to request removal of any stored configuration or credentials. We will process deletion requests within 30 days.

You have the right to:

• Access the configuration data Trendex Hub holds about your business.
• Correct any inaccurate configuration information.
• Request deletion of your data at any time (see Section 7).
• Withdraw consent by revoking Google API access at any time — this will immediately stop all autonomous actions.
• Receive a copy of your audit log data.

Synapse is a business management tool for use by business owners and their authorised staff. It is not intended for use by individuals under the age of 18. Trendex Hub does not knowingly collect personal data from minors.

Trendex Hub may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated by updating the "last updated" date at the top of this page. Continued use of Synapse following any change constitutes acceptance of the revised policy.

For any questions or concerns regarding this Privacy Policy or our data practices, please contact: