SINDICATO

Privacy Policy

Last updated: October 2026

This page describes what the platform does today. It is being reviewed by a lawyer and will be updated when anything changes.

Who is responsible

Sindicato is the controller of personal data processed on this site. Details of the legal entity will be published here once the organisation is registered. Contact: hello@sindicato.report.

What we collect

  • Your email address, verified with a one-time code, so you can sign in and manage your cases.
  • The case you file: display name, company, country, work dates, amount claimed, your story, timeline events and, if you choose, age range and project.
  • Your sharing choices: contact by lawyers, collective action interest, company notification and company contact.
  • An anonymized alias email address created for your case, which forwards to your email.
  • Technical data such as IP address and browser details, used briefly for security and rate limiting. If you donate, we store the amount, your optional name and email, and the IP address and browser details with the donation record. Payments are processed by Stripe.
  • Privacy-friendly analytics (Umami, which does not use cookies), aggregate view counters for cases and companies, and Cloudflare Turnstile to block bots on forms.

What is public

The story you write, your timeline events, tags, company, country, amount claimed and a partially redacted version of your display name are shown on the public Cases wall and can be copied by anyone. Do not include information you want to keep private. You can withdraw a case yourself at any time from your account page, but copies others already made, such as screenshots or archives, are outside our control. The same goes for text that was public before you marked it private: it may already have been copied, cached or indexed elsewhere (by search engines, archives or other sites), and a shared cache can keep serving the old text for a short while.

AI processing

We use AI models to suggest tags, write neutral summaries, analyse cases, translate stories and power the Clerk assistant. To do this, your story and timeline text are sent to AI providers through OpenRouter. We ask providers not to store this data or use it for training. We cannot control every provider, and formal data-processing agreements are being finalised.

AI output can be wrong. It is information, not verified fact and not legal advice.

Who can see what

Approved lawyers, companies and media can read public case content. Contact details are reachable only through an anonymized alias, and only where you opted in. Sindicato does not sell or rent personal data.

How long we keep data

Account and case data are kept until you withdraw a case, delete your account, or we take a case down. One-time sign-in codes expire after 10 minutes, and expired codes are deleted every day.

Donation records are kept as needed for accounting and legal obligations. The IP address and browser details stored with a donation are removed after 30 days.

A draft of your filing is saved in your browser while you type. It stays on your device and is deleted when you submit.

When you withdraw a case it leaves the public wall at once, its contact alias is switched off, and AI tags, summaries and cached translations are deleted. The story, timeline text, display name and email stored on that case are erased 30 days after withdrawal. If you delete your account instead, they are erased immediately. A short audit record that the case existed and was withdrawn is kept, without your IP address after account deletion.

Your rights

Under the GDPR you can ask to access, correct, delete, restrict, export or object to the processing of your personal data, and to withdraw any consent you gave at any time.

You can download your data and delete your account yourself from your account page. For anything else, such as correction or objection, write to hello@sindicato.report and we aim to reply within one month. You can also complain to your national data protection authority.

Security

Data travels over HTTPS and is stored on managed infrastructure with access controls. It is not end-to-end encrypted, so Sindicato's operators can technically read it. No system is perfectly secure.

Age

Sindicato is for people aged 18 and over.

Contact

Questions or requests about your data: hello@sindicato.report.