Syndicate
Privacy Protocol

1.1 — Identity Credentials. When you register as an Agent, we collect your email address for authentication. This is your Syndicate login vector. We do not require your real name unless you volunteer it. Your handle is your identity here.

1.2 — Operational Imagery (Drops). When you submit a Drop to the Daily Drop cycle, the raw, unedited photograph is transmitted to Syndicate servers for community evaluation in The Pit. This is the mission. The image is associated with your Agent account and timestamped at upload.

1.3 — Performance Intelligence. We record your operational statistics: XP earned, INK balance, streak count, Pit vote scores, Set membership records, and participation timestamps. This data powers the Leaderboard and your Agent profile.

1.4 — Device & Network Telemetry. Standard technical data is logged automatically: IP address, device type, operating system, browser/app version, and crash reports. This is used solely for Platform security, abuse prevention, and infrastructure stability. We do not build advertising profiles from this data.

1.5 — Voluntary Communications. If you contact Syndicate Command (support), we retain those communications to resolve your issue. We will not use them for any other purpose.

2.1 — Operating the Network. Your data is used to run the Platform: authenticate your login, display your Drops in The Pit, calculate your XP and INK, maintain your Set connections, and serve you the daily Drop challenge.

2.2 — Community Integrity. We analyse usage patterns and Drop metadata to detect inauthentic behaviour — AI-generated imagery, filtered content, staged or recycled photographs. Violations result in Drop purges and Account sanctions as defined in the Rules of Engagement.

2.3 — Platform Improvement. Aggregated, anonymised analytics help us understand how Agents use the Network so we can improve it. No individual Agent is identifiable in this analysis.

2.4 — Legal Compliance. We may process your data when required to do so by law, court order, or to protect the rights, safety, and property of the Syndicate, its Agents, or the public.

4.1 — Third-Party Infrastructure. Your data is stored in highly encrypted, industry-standard cloud infrastructure. SnapPact uses Supabase for database and authentication services. Supabase complies with SOC 2 Type II standards. Data is encrypted at rest (AES-256) and in transit (TLS 1.3 minimum). For Supabase's own privacy policies, refer to supabase.com/privacy.

4.2 — No Corporate Data Sales. We do not sell, rent, trade, or monetise your personal data to advertisers, data brokers, or third-party corporations. Your intelligence is not a product. The Syndicate's only product is the Network itself.

4.3 — Service Providers. We may share data with vetted third-party service providers who assist in operating the Platform (e.g., email delivery services for transactional emails, cloud storage for imagery). These providers are contractually prohibited from using your data for any purpose other than providing services to SnapPact.

4.4 — Data Location. Syndicate servers may be located in multiple jurisdictions. By using the Platform, you consent to your data being transferred to and processed in these locations in accordance with this Protocol.

Subject to applicable law (including GDPR, CCPA, and equivalent local legislation), you have the following rights regarding your personal data:

The Syndicate Network is not directed at individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you are between 13 and 18, you must have verifiable parental or guardian consent to use the Platform in jurisdictions where this is required. If we become aware that an Agent under 13 has registered, we will immediately purge that account and all associated data. If you believe a minor has registered without appropriate consent, contact [email protected] immediately.

We retain your personal data for as long as your Agent account is active or as needed to provide Platform services. Upon account deactivation or an Account Purge request, data is scheduled for deletion within 30 days, except where retention is required by law (e.g., financial records, legal disputes). Backup copies may persist for up to an additional 90 days in encrypted cold storage before permanent destruction.

We use strictly necessary cookies and local session tokens to keep you authenticated and maintain your session state. We do not use third-party advertising cookies, tracking pixels, or behavioural analytics cookies. We may use anonymised, first-party analytics to understand aggregate Platform usage patterns. You can clear session data at any time via your device or browser settings; doing so will log you out of the Network.

This Protocol may be updated when operational requirements change, when laws are amended, or when the Syndicate expands its infrastructure. When material changes are made, Agents will be notified via the email address on file and/or a prominent in-Platform alert at least 14 days before the changes take effect. Your continued use of the Network after the effective date constitutes acceptance of the revised Protocol. The "Effective" date at the top of this document reflects the most recent revision.