ALLWEB · AUCTIONSYN
Privacy policy
Revised October 22, 2026
Who operates AuctionSyn
AuctionSyn is operated by Allweb, based in Albania. Contact support@auctionsyn.com for privacy, account-data or deletion requests. For DMS connection and export setup, contact integrations@auctionsyn.com.
Information we use
We store account details such as your name, email address, password hash, role and account status. We also store your dealership workspace, plan and usage records, inventory connections, vehicle listing URLs, imported vehicle details and photos, prepared content, captions, selected publication times, posting settings, publication results and operational records. Connected social accounts add the account or channel identifier, name, granted permissions and encrypted authorization tokens needed for the enabled connection.
Dealer signup and setup details
When you register, we collect your name and account email, a password hash, dealership display name, country and time zone. You may also provide business contact and address details, a website and team-size information. If you choose DMS setup, we collect the selected provider, authorized export contact email and any dealer ID you supply. Pending registration details are kept with the one-hour email-confirmation request; expired requests are removed during later signup requests. After you confirm, setup details and the Terms version and acceptance time are stored in your dealership workspace. They can prefill your inventory setup and an export-request draft you choose to download. Registration does not send that draft to your provider, verify the export contact, enable a feed or authorize social publishing.
DMS setup requests and provider contact
When you submit a separate DMS setup request, we store the selected provider, dealership and address details, website, authorized contact name, role, email and phone, optional account ID and provider contact details, notes, and your consent version and time. AuctionSyn reviews each request before sending it. After the team verifies the provider recipient, the request email shares those supplied details with that provider and copies your authorized dealership contact, with replies directed to integrations@auctionsyn.com. We record the recipient verification reference, request status and sending outcome for support and follow-up. Submitting the request does not itself send an email, grant provider approval, establish photo rights, enable an import or authorize publication. Providers may require their own authorization process.
DMS inventory data and sources
A dealer management system (DMS), inventory service or dealership can supply an authorized vehicle export. Depending on the agreed file, this can include the dealer identifier, vehicle or stock identifier, VIN, make, model, year, trim, price and currency, mileage and unit, specifications, condition, descriptions, listing links, availability and photo URLs. We receive this information from the export source or file you authorize, and download photos from the approved image hosts. Inventory descriptions and photos may contain contact details, number plates or identifiable people; provide only material needed for your authorized vehicle advertising. The inventory feed is not intended for customer databases, finance applications, identity documents or payment-card data.
Automatic vehicle and photo imports
Once an authorized connection is enabled, AuctionSyn can receive deliveries into a dedicated folder or retrieve a file through the configured HTTPS or file-transfer connection. The importer validates the delivery, creates or updates vehicle records and downloads original photos for use in the workspace. It stores normalized inventory data, source links, connection settings, the authorization reference, delivery timestamps, import results and usage counts. Original photos and prepared copies can remain stored after cropping, branding or other edits. Importing a file or downloading photos does not by itself publish a social post.
Feed credentials and transfer records
Saved feed addresses, download usernames, passwords and bearer tokens are encrypted in the application. A managed receiving account, when separately provisioned, has its own transfer credentials and dealer-specific destination; authorized administrators manage those credentials. File deliveries and receiving operations can produce operational records such as account identifiers, file names, timestamps, transfer outcomes and import errors. Secure HTTPS and explicit FTPS delivery are supported. A separately selected legacy FTP connection does not encrypt its transfer; use an encrypted delivery method where available. Do not share your DMS administrator password when a dedicated export account is sufficient.
Why we use it
We use the data to provide your workspace, authenticate your account, synchronize authorized vehicle inventory and photos, prepare content, maintain import allowances and job history, connect the social accounts you authorize, and publish content according to your approvals and enabled automation settings. We also use operational records to provide support, diagnose failures and maintain service security. Local caption templates work without an external translation service. If you choose Google Cloud Translation, the selected description text and requested language are sent to Google, with protected vehicle facts replaced by placeholders; you review the result before applying it.
Services involved
Configured DMS and listing-data providers and permitted image hosts receive the requests needed to retrieve your export or vehicle photos. Hosting, storage and file-transfer infrastructure support receipt, storage and processing. For social publishing, the selected network receives the media, captions or video metadata and account identifiers needed to deliver your post. Available destinations may include Instagram, Facebook Pages, YouTube, Pinterest, TikTok and LinkedIn, depending on the connections, permissions and approvals enabled for your account. These providers process the information under their own policies and may operate in other countries. We do not use the current application to sell customer data or run targeted advertising. Contact support@auctionsyn.com for questions about the processing arrangements for your dealership.
Posting queue, approvals and automatic publishing
A feed connection can be configured to add eligible new vehicles with ready photos to the posting queue. Automatic enrollment requires the relevant automation settings to be enabled and manual approval to be off. With those settings enabled and live publishing authorized, eligible posts may be sent on your configured schedule without a separate approval for every new vehicle. Other content remains available for review and scheduling. We store the selected photos, caption or video metadata, destination account, schedule, approval or send-intent records, network response identifiers and delivery status. The social network receives your selected content; text, contact details or personal information you include in that content may become public according to the destination account and post settings. Time-limited media links may be used so the network can retrieve the files.
Dealership controls and service administration
The dealership chooses which inventory source and content to provide, which staff can use its workspace and which social accounts and publishing settings to enable. We process those inventory and publishing instructions to operate the service. Authorized workspace users can access information according to their role. Platform administrators can view account identities, plans, monthly import and API usage, publication states and limited vehicle and photo information for service administration and support. An inventory connection does not automatically grant unrelated dealerships access to your workspace.
Optional post statistics
When you request a statistics refresh for an eligible published post, we retrieve the available engagement counts from the connected network and store the measurements and capture time. These can include likes, comment counts, shares, views or reach. Available measurements depend on the network and granted permissions; unavailable measurements remain unknown.
Optional hosted-video measurement and partner media access
A dealership can enable aggregate measurement on its approved, shared AuctionSyn video pages. We count browser-reported playback sessions, progress milestones and clicks to an already-public vehicle page. This feature does not store viewer IP addresses, names, cookies or cross-site visitor identifiers. A short-lived random playback-session hash deduplicates repeated events; routine activity and worker maintenance remove session rows older than two days and aggregate rows older than 90 days. Counts are not verified people, attention, advertising reach or conversions. Dealerships may also issue expiring, revocable API keys that allow named partners to read approved media, including reviewed files that are not publicly shared. Key access is scoped to that dealership; revoked, changed, unavailable or unapproved material is blocked. Campaign creative packs and budget plans are private preparation tools: they do not connect an advertising account, activate campaigns or incur ad spend.
Optional AI video and narration
When you approve AI photo animation, the selected vehicle photos and camera instructions are sent to Replicate. When you enable narration, your reviewed script and its language are sent to Azure Speech for Albanian or ElevenLabs for other supported languages. Provider keys are encrypted in your workspace. We retain project scripts, provider request identifiers, generated clips, narration and subtitles in your workspace so you can review or download them and avoid repeated submissions. These providers apply their own terms, retention policies and charges. Disconnecting removes the saved key and stops new requests using it; already submitted work may continue at the provider. Generated camera movement can alter vehicle details and is not a 3D scan or evidence of vehicle condition. Review the result before publishing.
YouTube connection and uploads
If you connect YouTube, AuctionSyn uses YouTube API Services to verify your chosen channel and upload the vehicle videos you approve. We store your channel identifier and name, encrypted Google authorization tokens, approved video metadata, upload-session information and delivery status. Google receives the approved title, description and MP4 file. A private video is not described as publicly published. Connecting alone does not upload videos. You can disconnect in YouTube settings to remove the stored Google tokens, channel details, video identifiers, provider links and upload-session data, and stop uploads, or revoke access at https://myaccount.google.com/connections. Active channel details are refreshed by the running service. Cached YouTube result and session data are removed within 30 days; our own vehicle content and send-intent records remain in the workspace to prevent accidental repeat uploads. Videos already uploaded remain on YouTube until you manage or delete them in YouTube Studio. Google processes your data under its privacy policy at https://policies.google.com/privacy. AuctionSyn’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this Google user data for advertising or sell it.
Marketplace listing packages
AuctionSyn can prepare a private downloadable package with the vehicle text and selected photos for manual publication on Facebook Marketplace, MerrJep and other websites. Preparing or downloading it does not publish a listing or send it to those marketplaces. If you record an external listing URL, we store it as your reported link, not independent confirmation of publication. Archiving the record in AuctionSyn does not remove the listing from the external marketplace. Downloaded files and listings you publish there are controlled by you and the respective providers.
Optional Instagram message replies
If a business enables automatic DM replies, we process incoming shared-post identifiers and Instagram sender identifiers to match the post to a vehicle and reply with its previously reviewed public page. We do not store the incoming conversation text or attachments. Sender identifiers are stored encrypted, with limited deduplication and delivery metadata, for up to 30 days and removed by the running service. Businesses can disable replies in Settings; disconnecting Instagram also stops replies and deletes queued sender identifiers. Meta processes incoming and outgoing messages. A reply link exposes only the vehicle page that the business has explicitly made public.
Vehicle inquiries and quotations
When you submit a vehicle inquiry, the business named on the vehicle page receives your name, contact details, destination, optional budget and message in its private AuctionSyn workspace so it can respond. The business may record inquiry status, follow-up dates and private staff notes. Reviewed quotation links contain vehicle information, estimated cost items and quotation notes; anyone holding the link can view them until the business disables it. Customer contact details, inquiry messages and private staff notes are not included in those quotation pages. Public form protection uses expiring signed form tokens and keyed hashes of network addresses for rate limiting; older rate counters are removed during subsequent submissions. WhatsApp click counts record button clicks, not delivered messages or submitted inquiries. Contact support@auctionsyn.com for access, correction or deletion requests.
Cookies and public photos
We use a session cookie for login and security and a language-preference cookie when you select a homepage language. Photos and videos prepared for social delivery may be accessible through time-limited signed URLs so the chosen network can retrieve them. Vehicle pages, quotations and other links you explicitly share may be accessible to their recipients as described above. Content published on a social network is governed by that account, its post visibility and the network’s policies.
Storage and retention
We retain account and workspace data while needed to provide the service, maintain your inventory, preserve publishing history and prevent accidental repeat submissions. The latest received inventory file may remain in a receiving or import folder until replaced or removed. Imported vehicle records, original and prepared photos, captions, import history and publication records are not automatically erased when a vehicle is sold or a feed is disabled. You can request deletion at support@auctionsyn.com. Some operational records or backup copies may need to be retained for security, recovery or applicable legal obligations; we will explain relevant retention and backup limitations when handling your request. Disconnecting a DMS or social account does not automatically delete all workspace data.
Stopping an inventory feed
You can disable an inventory connection in Settings to stop further imports and prevent new feed-based publishing from that connection. Disabling it does not revoke a separate provider export or managed receiving login; arrange those changes with the provider and, for AuctionSyn receiving access, contact integrations@auctionsyn.com. Review and cancel pending posts when stopping a workflow. A send already attempted may still need reconciliation. Existing imported records and photos remain until removed or included in an account-data deletion request.
Your choices and deletion
You can edit draft content, cancel posts that have not already been sent for publication, disable inventory imports and automatic queue enrollment, pause publishing, and disconnect social accounts in their connection settings. To request access, correction or deletion of stored account or workspace information, email support@auctionsyn.com from your account email and identify the request and dealership. Depending on the law that applies to you, you may also request restriction, object to processing, request a portable copy of relevant personal data or complain to a competent data-protection authority. We may verify your identity or refer a request concerning dealership-controlled customer data to that dealership. If inaccurate inventory is still being exported, ask the source provider to correct or remove it as well. Do not send passwords or access tokens. Detailed steps are available on our Data deletion page.
Published content and sold vehicles
Removing a vehicle or data from AuctionSyn, disabling an inventory feed or disconnecting a social account does not automatically edit or delete posts already published on external networks. Manage those posts through the relevant social account. A sold or unavailable vehicle, or a vehicle missing from a configured complete inventory snapshot, can cancel future sends that have not yet been attempted; a previous public post or an in-progress send may still remain. Public copies and provider-held records are also subject to the recipient’s policies.
Updates
If our data practices change, we will update this policy and its revision date. Contact support@auctionsyn.com with any questions.
Contact: support@auctionsyn.com