Privacy Policy

01. Scope and applicability

This Privacy Policy applies to personal data and other information we process in connection with customer accounts, website visits, audit workflows, support requests, marketing activities, and business operations. If you access third-party tools linked from our Services, those services are governed by their own privacy notices.

02. Information we collect

• Account and profile data: name, email address, organization details, user role, authentication identifiers, and account preferences.
• Billing and transaction data: subscription plan, invoice metadata, payment status, and limited billing contact information (processed by payment providers).
• Service usage data: audit URLs, prompts/inputs, generated reports, analysis history, dashboard interactions, configuration settings, and export events.
• Technical and device data: IP address, timestamps, browser and device information, operating system, referrer data, cookie identifiers, and log events.
• Support and communications data: messages, attachments, feedback, and records of communications with our support, sales, or success teams.
• Security and compliance data: risk signals, abuse reports, and records needed for fraud prevention, legal compliance, and incident response.

03. How we use information

• Provide, operate, maintain, and improve the Services.
• Process audits and deliver dashboards, recommendations, and downloadable reports.
• Authenticate users, manage access controls, and secure customer environments.
• Administer subscriptions, credits, invoices, and account lifecycle changes.
• Respond to support requests and communicate product, legal, and security notices.
• Monitor performance, troubleshoot issues, detect abuse, and protect against fraud or unauthorized access.
• Conduct analytics, research, and service optimization using aggregated or de-identified data where possible.
• Comply with legal obligations and enforce our Terms of Use.

04. Legal bases for processing

Depending on your location, we process personal data under one or more legal bases: contractual necessity (to provide Services), legitimate interests (security, product improvement, and fraud prevention), consent (where required for marketing or optional cookies), and legal obligations (tax, accounting, compliance, and lawful requests).

05. Cookies and tracking technologies

We use cookies and similar technologies for session management, security, analytics, and performance optimization. You can manage cookie preferences through browser settings and, where available, in-product consent controls. Disabling certain cookies may affect product functionality.

06. Sharing and disclosures

We do not sell personal data. We may share information with trusted service providers and partners who support hosting, infrastructure, authentication, billing, analytics, customer support, and communications. We may also disclose information when required by law, to protect rights and safety, in connection with a merger/acquisition, or with your explicit direction.

07. International transfers

Your information may be processed in countries where we or our service providers operate. When required, we use appropriate safeguards for cross-border transfers, including contractual protections and equivalent transfer mechanisms.

08. Data retention

We retain data for as long as necessary to provide the Services, maintain account records, resolve disputes, enforce agreements, and satisfy legal obligations. Retention periods depend on data category, service configuration, and applicable law. When no longer needed, data is deleted or anonymized in accordance with our retention schedule.

09. Security measures

We implement reasonable administrative, technical, and organizational safeguards to protect information from unauthorized access, loss, misuse, or alteration. No internet transmission or storage system is completely secure; therefore, we cannot guarantee absolute security.

10. Your privacy rights

Subject to local law, you may have rights to:

• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete information.
• Request deletion of personal data.
• Restrict or object to certain processing activities.
• Withdraw consent where processing is based on consent.
• Request portability of your data.
• Submit a complaint to a data protection authority.

To exercise your rights, contact us at privacy@syntetix.ai or support@syntetix.ai.

11. Children's privacy

The Services are not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided information, contact us so we can take appropriate action.

12. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be communicated by updating the "Last updated" date and, when appropriate, by additional notice in the Services or by email.