Privacy policy

Last updated 2026-10-27: added error records.

SyncSquirrel is made and run by Blue Dot Apps ("we"). It keeps the unsubscribes and email consent in your Zoho CRM Leads and Contacts and one Mailchimp audience in step. This page says what we store, what we send to Zoho and Mailchimp, how long we keep it, and how to have it deleted.

What we store

• Your Zoho organization: its Zoho id and company name.
• People who sign in: the Zoho user id, name and email address of each person who signs in with Zoho.
• Zoho and Mailchimp access tokens, encrypted in our database (Active Record encryption), with your Mailchimp account id and your Zoho data center. We use them only to run the sync.
• The Mailchimp audience you picked and your sync settings: which Zoho modules to sync, which Zoho checkbox means "agreed to marketing email", what to do with records without that consent, the field rule and the Zoho workflows switch.
• Connection details we set up: the ids and signing secrets of the two webhooks we add to your Mailchimp audience, and the id and token of the Zoho notification channel (secrets and tokens encrypted).
• Consent state per email address: the email address, its Mailchimp status and when that last changed, whether Email Opt Out and your consent checkbox are ticked in Zoho and when we first saw them ticked, and which Zoho Lead or Contact owns the address (its module and record id). We do not store names, phone numbers or other fields from your records.
• Activity rows: one row for each thing the app did or chose not to do: the time, the email address, what was done and why in plain words, the Zoho record ids written to, and errors in Zoho's or Mailchimp's own words. You see them on the Activity page.
• Recent writes: each email address or Zoho record id we just changed, so the change Zoho or Mailchimp then reports back to us is not synced back again.
• Incoming changes waiting to be handled: what Mailchimp sends us about a change (the email address, the name and other audience fields, and the signup IP address) and what Zoho sends us (the changed record ids and values) wait in our job queue for a few seconds until they are handled.
• A sign-in cookie that keeps you signed in. It is encrypted and holds your user id (and, during sign-in, a one-time check value).
• Error records, with personal data removed, so we can fix problems. Kept up to 90 days.

How long we keep it

• Activity rows are kept until your account is deleted. The Activity page shows the newest 500.
• Consent state, settings, tokens and the people who signed in are kept until your account is deleted.
• A recent write is deleted when the matching change comes back from Zoho or Mailchimp. One that never comes back is kept until your account is deleted.
• Handled jobs in the queue, with what Mailchimp and Zoho sent, are deleted about a day after they finish. A job that fails is kept until we look at it.

What we send

• To Zoho we send: Email Opt Out ticked or unticked on your Leads and Contacts, and the address and token of the notification channel that tells us about changes. We read the email address, Email Opt Out, your consent checkbox and the created time of your Leads and Contacts, your organization's id and name, the name and email address of the person signing in, and the names of your checkbox fields.
• To Mailchimp we send: an email address and a subscription status (subscribed, unsubscribed or non-subscribed), a request to archive a member when the Zoho record was deleted (never a permanent delete), and the addresses of our two webhooks. We read your audiences' names, and each member's email address, status and when it last changed.
• We do not sell or share your data with anyone else.

Where it is kept

The app and its database are hosted on Render, in Oregon, USA. Our request logs on Render leave out email addresses and names sent to us by Zoho and Mailchimp.

No tracking

No analytics, no ads, and no tracking cookies.

Deleting your data

Email support@syncsquirrel.com from an address of someone who signs in to your account. We delete your account and everything above within 7 days and reply when it is done.

Disconnecting

• Zoho: at accounts.zoho.com, open Sessions, then Connected Apps, and remove this app. Zoho then stops sending us changes within 6 days, when the notification channel ends.
• Mailchimp: in Mailchimp, open Integrations, then Manage, then Other connections, and remove this app. To stop Mailchimp sending us changes at once, also delete the two webhooks that point to sync.bluedotapps.com in your audience's settings, under Webhooks.
• Disconnecting stops the sync. It does not delete what we store; email us for that.

Changes

If this policy changes, we post it here with a new date.