Privacy Policy
Last updated: May 2026
Sincro is a digital platform owned by Diogo Filipe Fernandes Palos, Tax ID (NIF) 234743131. We act as a software service provider for short-term rental management and guest data reporting to SIBA.
Sincro values your trust and is committed to protecting the personal information you share with us, in compliance with the General Data Protection Regulation (GDPR) 2016/679.
When you voluntarily provide us with personal information, it will only be accessed by our services. We consider personal information to be anything that can identify a user (name, e-mail, address, among others).
User Data (Owners/Managers)
- Name and email
- Property information
- SIBA credentials (encrypted)
Guest Data
- Full name
- Date of birth
- Nationality
- Type and number of identification document
- Country of issue of the document
- Place of residence
- Arrival and departure dates
- Image of the identification document/passport (only when the guest uses the optional automatic data scanning feature - OCR)
Guest data belonging to the User's customers is provided through a form developed exclusively for submitting it to the authorities, via a web service connected to the SIBA platform. This data can be reviewed by the User after transmission, and can also be deleted by them. When a guest chooses to photograph their document for automatic form filling, the reading (OCR) is performed directly on the guest's own device (in their browser) - the image is not sent to Sincro's servers or to any third party at that point. Only the final image, already watermarked, is then submitted and kept for the same period as the guest's other data.
The User may request an export file containing the personal data held, as well as its rectification or permanent deletion ("right to be forgotten"). Where processing is based on consent, this may be withdrawn at any time, without affecting the lawfulness of processing carried out before that date.
Access
Obtain confirmation and a copy of your data
Rectification
Correct inaccurate or incomplete data
Erasure
Request deletion of your data (subject to legal limitations)
Restriction
Restrict processing under certain circumstances
Portability
Receive your data in a structured format
Objection
Object to processing based on legitimate interest
If stored data is subject to a security breach, Sincro undertakes to notify the users involved within a maximum of 72 hours.
We maintain internal monitoring for the immediate detection and correction of any security breaches.
We implement technical and organizational security measures to protect your data:
- Data encryption in transit (TLS) and at rest
- Role-based access control
- Watermark applied to identification document images submitted via OCR
- Regular backups and redundancy
- Continuous security monitoring
- Employee training in data protection
| Data Type | Retention Period |
|---|---|
| Guest data | 3 years (as required by law) |
| Account data | For the life of the account + 5 years |
| Billing data | 10 years (tax obligation) |
| Usage data | 2 years |
Sincro cannot be held liable for damages (direct or indirect) arising from the correct or incorrect use of its services, including unauthorized access to the User's computer system by third parties (malware/hacking).
The display of legal provisions on the website does not exempt users from consulting the legal rules in force as published by the official bodies.
If you wish to stop communications or request the deletion of identifiable information, please contact us at: suporte@sincro.pt. This address is also used to report any fact that may compromise the security of the platform.
Questions about data processing should be sent to the same email contact.
Data Controller
Diogo Filipe Fernandes Palos
Tax ID (NIF)
234743131
Address
Rua dos Engenhos 10, 2730-279 Barcarena, Portugal