Brands.
The surface that wears your name.
A Brand is the trust surface every end-user signs in against. Logo, colors, copy, providers, scopes, and email sender — all scoped to the Brand. One Org runs as many Brands as it has product surfaces, and each one looks like its own company from the first click to the consent screen.
Every surface end-users see
The Brand tier exists because the company that owns the platform and the product surface your end-users care about are different things. A media holding company may own a streaming brand and a sports brand, but sports-brand users don't want to sign in to the holding company — they want to sign in to the sports brand. Every attribute below scopes to the Brand so that experience stays independent.
Identity
Logo, name, primary color, supportEmail, terms URL, privacy URL. The metadata your consent screen reads from.
Sign-in theme
Layout (compact / spacious / split), button styles, color palette, background gradient or image, headline and footer copy. Premium tiers unlock custom CSS, custom font URL, and full-screen background video.
Connections
Which sign-in methods are enabled (Google, Apple, Microsoft, Discord, Facebook, X, Telegram, Matrica, Solana). Plus per-provider BYO OAuth credentials so the consent screen shows your name, not Synq’s.
OIDC scopes
Brand-scoped custom scopes your apps can request (e.g. `wallets:read`, `marketplace:write`). Lives next to the standard OIDC `openid profile email`.
Apps
The OIDC clients your code identifies as. One per platform (web, SPA, native, M2M, agent). All apps under a Brand share the same provider mix and the same scope catalog.
Emails
Sender, subject lines, and body templates for every transactional email Synq sends on the Brand’s behalf (OTP codes, verification, account events). Bring your own transactional provider — Resend, Postmark, SES, any SMTP.
Where the lines are drawn
Some things stay on the Org (so multi-brand companies don't duplicate work), some on the App (so platform deliverables stay independent). Quick map of the boundaries:
- Billing and plan tier (Org)
- Team members and roles (Org)
- Audit log (Org-wide, queryable by Brand)
- Org-level API keys and webhooks (Org)
- OIDC client credentials (App)
- Redirect URIs (App)
One Org, many surfaces — no second account
Independent providers per Brand
Aurora Stream enables Google + Apple. Aurora Sport enables Google + Apple + X + Facebook. Aurora Studios enables Google + Discord + Apple. None of those Brands share a credential — and none of them have to.
BYO credentials scoped to the Brand
Every BYO OAuth credential is per (Brand, provider). Your Google client_secret for Brand A is independent from your Google client_secret for Brand B. The consent screen for each shows the right company name, the right quota, the right rate limit.
Theming that lands at the pixel
Brand-scoped layout, colors, button styles, copy. Premium tiers unlock custom CSS and custom font URLs. The default modal renders against your tokens; the bundled SDK exposes the same set as CSS variables.
Scopes that match your data
Custom OIDC scopes live on the Brand (e.g. `marketplace:write`). Apps under the Brand can request any subset; your backend enforces the rest. Same plane as the standard OIDC scopes, no extra plumbing.
Common questions
Spin up your first Brand in five minutes.
Logo, colors, providers, scopes, emails — all in one Dashboard screen. The default modal picks them up automatically.