CenterSync Privacy Policy

Effective Date: August 1, 2026

Last Updated: August 1, 2026

CenterSync LLC (“CenterSync,” “we,” “us,” or “our”) provides childcare management software to licensed childcare facilities.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with:

• the CenterSync website at centersync.ai;
• the CenterSync software platform and related services;
• account registration, billing, support, and communications; and
• information processed on behalf of childcare facilities that use CenterSync.

At launch, CenterSync is offered to licensed childcare facilities in Massachusetts.

1. Our Roles

CenterSync handles personal information in two different roles.

Information We Process for Childcare Facilities

Licensed childcare facilities and other organizational customers use CenterSync to manage their records and operations.

For personal information submitted or controlled by those customers, the customer determines why and how the information is processed. CenterSync processes that information on the customer’s behalf as a service provider or processor.

We refer to this information as “Customer Data.”

When a request concerns Customer Data, the applicable childcare facility is generally responsible for responding to the request.

Information We Collect for Our Own Business Purposes

CenterSync also collects certain information directly for account administration, billing, security, support, website operation, communications, and improvement of our business.

For that information, CenterSync determines the purposes and means of processing.

2. Information We Collect

The information we collect depends on how a person interacts with CenterSync.

Account and Professional Information

We may collect:

• names;
• business email addresses;
• telephone numbers;
• job titles and roles;
• account usernames;
• authentication information;
• facility names and addresses;
• facility license or regulatory identifiers;
• account permissions; and
• communication preferences.

Facility and Regulatory Information

We may collect or retrieve:

• facility license information;
• Massachusetts “P” numbers or similar identifiers;
• inspection information;
• licensing history;
• corrective-action information;
• regulatory status information; and
• information available through government or regulatory sources.

Information obtained from a government or third-party source may be incomplete, delayed, inaccurate, or outdated.

Children’s Information Processed for Customers

Customers may use CenterSync to process information concerning children enrolled in or associated with a licensed childcare facility.

This may include:

• names;
• dates of birth;
• photographs, where enabled and authorized;
• enrollment information;
• attendance information;
• classroom or program assignments;
• parent or guardian relationships;
• emergency-contact information;
• authorized pickup information;
• allergies;
• health conditions;
• immunization records;
• medication information;
• accommodation information;
• dietary information;
• injury, accident, illness, behavior, or incident records;
• care instructions;
• forms and supporting documents; and
• other information the customer determines is necessary for childcare operations, health and safety, or licensing.

Children do not create CenterSync accounts, and CenterSync does not intentionally collect personal information directly from children.

Parent and Guardian Information

Customer Data may include:

• names;
• home or mailing addresses;
• email addresses;
• telephone numbers;
• relationships to children;
• emergency-contact information;
• authorized-pickup information;
• communications and forms; and
• consents, acknowledgments, or authorizations.

Staff and Applicant Information

Customers may use CenterSync to process information about employees, contractors, applicants, volunteers, directors, teachers, caregivers, and other personnel.

This may include:

• names;
• contact information;
• dates of birth;
• employment information;
• position and role information;
• work history;
• training records;
• certifications;
• professional credentials;
• licensing information;
• background-check status and related records;
• disciplinary or corrective-action information;
• health information;
• immunization or medical-clearance information;
• accommodation information;
• emergency-contact information; and
• documents uploaded by the customer.

Customers should not upload Social Security numbers, complete government-identification numbers, biometric templates, passwords, complete payment-card information, unmasked financial-account information, or other information prohibited by the CenterSync Terms of Service.

Billing and Transaction Information

We may collect:

• billing-contact information;
• subscription plan information;
• transaction amounts;
• payment status;
• invoice information;
• tax information; and
• limited payment-method information received from our payment processor.

Payment-card and bank-account information may be collected directly by Stripe, Inc.. CenterSync does not intend to store complete payment-card numbers.

Support and Communications

We may collect information contained in:

• support requests;
• emails;
• telephone or video calls;
• survey responses;
• product feedback;
• training sessions; and
• other communications.

Support communications may contain Customer Data if a customer includes records, screenshots, attachments, or account information.

Device, Log, and Usage Information

We may automatically collect:

• Internet Protocol addresses;
• device identifiers;
• browser type;
• operating system;
• date and time of access;
• pages or features used;
• referring URLs;
• session activity;
• error and diagnostic information;
• login records;
• approximate location derived from an IP address; and
• security and audit logs.

Cookies and Similar Technologies

We may use cookies, local storage, pixels, software development kits, and similar technologies to:

• maintain sessions;
• remember preferences;
• authenticate users;
• protect accounts;
• understand website and product usage;
• diagnose technical problems; and
• improve the Service.

CenterSync uses the following analytics, support, or cookie providers: None.

CenterSync does not use advertising or cross-site behavioral tracking technologies.

3. Sources of Information

We may obtain personal information:

• directly from customers and Authorized Users;
• from documents, records, and forms uploaded by customers;
• from integrations authorized by customers;
• from regulators, government agencies, and public records;
• from payment processors and service providers;
• automatically from devices and browsers; and
• from communications with us.

CenterSync does not independently determine which children’s, parent, guardian, or staff records a customer should collect. Customers choose what Customer Data to submit, subject to the Terms of Service and product configuration.

4. How We Use Information

We may use personal information to:

• provide and operate the Service;
• create and administer accounts;
• authenticate users;
• maintain user permissions;
• process subscriptions and payments;
• provide customer support;
• retrieve and organize regulatory information;
• generate reports, reminders, tasks, checklists, and operational insights;
• maintain, troubleshoot, and improve the Service;
• develop new features;
• protect accounts and prevent fraud, misuse, and security incidents;
• monitor performance and reliability;
• communicate about accounts, subscriptions, security, and product updates;
• enforce contracts and policies;
• comply with applicable law and valid legal process;
• establish, exercise, or defend legal claims; and
• create aggregated or de-identified analytics and research.

We do not use Customer Data to advertise to children, parents, guardians, staff members, or customers.

We do not use Customer Data to make independent medical, employment, licensing, eligibility, or legal decisions.

Customers remain responsible for reviewing information and making decisions concerning their facilities, children, families, and staff.

5. Artificial Intelligence and Automated Features

CenterSync may use automated or artificial-intelligence-supported features to organize information, generate summaries, suggest tasks, identify possible gaps, or produce reminders and recommendations.

These features may produce incomplete, inaccurate, or outdated results.

CenterSync does not use automated features as a substitute for the customer’s professional judgment.

Customers must review automated outputs before relying on them for licensing, employment, health, safety, disciplinary, or regulatory decisions.

CenterSync does not use identifiable Customer Data to train general-purpose artificial intelligence models.

6. How We Disclose Information

We may disclose personal information as described below.

Service Providers and Subprocessors

We may disclose information to vendors that provide:

• cloud hosting;
• data storage;
• security;
• authentication;
• email and communications;
• customer support;
• analytics;
• software monitoring;
• payment processing;
• document processing; and
• other services supporting CenterSync.

These vendors may process information only for authorized purposes and are subject to contractual obligations appropriate to their role.

A current list of Subprocessors is available at https://centersync.ai/subprocessors.

Customer-Authorized Users

Customer Data may be disclosed to Authorized Users according to permissions configured by the customer.

The customer is responsible for determining which users may access particular records.

Customer-Directed Integrations

We may disclose information to third-party applications, systems, or services when a customer enables or directs an integration.

Third-party services are governed by their own terms and privacy practices.

Regulators and Government Sources

Where instructed by a customer or permitted by law, CenterSync may exchange information with regulators, licensing authorities, or government systems.

CenterSync does not submit filings or communications to regulators on a customer’s behalf unless the Service expressly provides that feature and the customer authorizes it.

Corporate Transactions

We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.

The recipient will be required to handle personal information consistently with applicable law and any binding contractual obligations.

Legal, Safety, and Security Purposes

We may disclose information when reasonably necessary to:

• comply with applicable law, legal process, or governmental requests;
• protect the rights, safety, and property of CenterSync, customers, users, children, or others;
• investigate fraud, abuse, or security incidents;
• enforce agreements and policies; or
• establish, exercise, or defend legal claims.

With Consent or at Direction

We may disclose information when the applicable customer, user, or authorized individual directs or consents to the disclosure.

7. Sale and Advertising

CenterSync does not sell Customer Data.

CenterSync does not share Customer Data for cross-context behavioral advertising.

CenterSync does not use children’s personal information for targeted advertising.

CenterSync does not sell or share website visitor information or advertising cookies.

8. Children’s Privacy

The Service is designed for use by licensed childcare facilities and their adult personnel.

Children may not create accounts or use the Service directly.

CenterSync processes children’s information only when a childcare facility or its Authorized Users submit or authorize the information for facility operations.

The customer is responsible for:

• determining which children’s information may be collected;
• providing required notices to parents or guardians;
• obtaining required consents or authorizations;
• limiting access to authorized personnel;
• complying with childcare, educational, health, privacy, and recordkeeping laws; and
• responding to parent or guardian requests concerning Customer Data.

A parent or guardian seeking access to, correction of, or deletion of a child’s information should first contact the childcare facility that collected the information.

CenterSync may refer the request to that facility unless applicable law requires CenterSync to respond directly.

9. Health and Sensitive Information

Customer Data may contain health, immunization, medication, allergy, incident, staff-health, background, and other sensitive information.

CenterSync processes that information only to provide the Service, follow customer instructions, protect the Service, or comply with law.

The Service is not offered as a HIPAA-compliant service unless CenterSync and the applicable customer have entered into a separate Business Associate Agreement.

Customers must not submit protected health information subject to HIPAA unless CenterSync has expressly agreed in writing to process it.

Information may be subject to other federal or Massachusetts confidentiality requirements even when HIPAA does not apply.

10. Data Security

CenterSync uses reasonable administrative, technical, and physical safeguards designed to protect personal information.

Depending on the nature of the information and Service, safeguards may include:

• access controls;
• authentication;
• encryption;
• logging and monitoring;
• vulnerability management;
• backups;
• incident-response procedures;
• personnel confidentiality obligations; and
• vendor-security requirements.

No security method is completely effective, and CenterSync cannot guarantee absolute security.

Customers are responsible for maintaining secure devices, networks, credentials, permissions, and account configurations.

Suspected security issues should be reported to security@centersync.ai.

11. Retention and Deletion

We retain personal information for as long as reasonably necessary to:

• provide the Service;
• maintain the customer relationship;
• comply with contracts;
• protect security;
• resolve disputes;
• enforce agreements;
• comply with legal, tax, audit, licensing, and regulatory obligations; and
• establish, exercise, or defend legal claims.

During an active subscription, customers may use available export tools.

After termination or expiration, Customer Data will generally remain available for export for 30 days.

CenterSync will delete Customer Data from active systems within 30 days after the export period and from routine backups within 90 days, subject to legal-retention obligations and technical limitations.

We may retain billing records, contract records, audit logs, security logs, and other limited information where required for legitimate legal, security, accounting, or compliance purposes.

Aggregated or de-identified information may be retained indefinitely where it does not identify and is not reasonably capable of being linked to a customer or individual.

12. Individual Requests and Choices

Requests Concerning Customer Data

A child, parent, guardian, employee, applicant, contractor, or other individual whose information was submitted by a childcare facility should direct requests to that facility.

CenterSync may assist the facility in responding to a request as required by contract or applicable law.

CenterSync generally cannot independently verify, correct, or delete Customer Data without the facility’s instruction because the facility controls that information.

Requests Concerning Information CenterSync Controls

A person may contact CenterSync to request access to, correction of, or deletion of personal information that CenterSync maintains directly about that person.

Requests may be sent to privacy@centersync.ai.

CenterSync may:

• verify the requester’s identity;
• request additional information;
• deny or limit a request where permitted by law;
• retain information required for legal, security, contractual, or recordkeeping purposes; and
• refer a Customer Data request to the applicable customer.

Communications

Account administrators may receive operational, billing, security, and contractual communications that are necessary to provide the Service.

Users may unsubscribe from optional marketing communications by using the unsubscribe link or contacting CenterSync.

Unsubscribing from marketing messages does not stop necessary account, transaction, security, or service messages.

Cookies

Browser settings may allow users to block or delete cookies.

Blocking essential cookies may prevent parts of the Service from functioning properly.

The Service uses only essential and functional cookies. No cookie-preference tool is required at this time.

13. Data Location

CenterSync primarily stores and processes information in the United States.

At launch, the Service is intended for Massachusetts childcare facilities.

A customer must not use the Service to transfer Customer Data outside the United States unless CenterSync has authorized that use and appropriate legal safeguards are in place.

14. Third-Party Services and Links

The Service may link to or integrate with third-party websites, software, government systems, or services.

CenterSync does not control the privacy, security, availability, or accuracy of third-party services.

This Privacy Policy does not apply to information processed independently by those third parties.

Customers and users should review the third party’s terms and privacy policy before enabling an integration or providing information.

15. Changes to This Privacy Policy

CenterSync may update this Privacy Policy to reflect changes in the Service, legal requirements, data practices, or security measures.

The “Last Updated” date will identify the most recent revision.

If a change materially affects how CenterSync uses or discloses personal information, CenterSync will provide reasonable advance notice through email, the Service, or another appropriate method.

16. Contact CenterSync

Questions, requests, or complaints concerning this Privacy Policy may be directed to:

CenterSync LLC

Address: 145 Great Rd Ste 6 Farm Hill Plaza #1026, Acton, MA 01720

Privacy email: privacy@centersync.ai

Security email: security@centersync.ai

Website: https://centersync.ai

For Customer Data, individuals should ordinarily contact the childcare facility that collected or submitted the information.