Privacy Policy (GDPR)

1. Introduction

Synthetix AI ("we", "us", "our") is committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application (collectively, the "Service"). This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable data protection laws.

2. Data Controller

Synthetix AI is the data controller responsible for your personal data. For any data protection inquiries, contact us at: matej.granulic@gmail.com

3. Personal Data We Collect

We collect the following categories of personal data:

• Account Data: Name, email address, password (hashed).
• Usage Data: IP address, browser type, device information, pages visited, timestamps.
• Conversation Data: Messages exchanged with AI employees, generated reports, and files.
• Payment Data: Processed by PayPal; we do not store your full card or PayPal account details.
• Cookies: As described in our Cookies Policy.

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data on the following legal bases:

• Consent: You have given consent for specific processing (e.g., marketing, non-essential cookies).
• Contract: Processing is necessary to provide the Service you requested.
• Legal Obligation: We must comply with applicable laws.
• Legitimate Interests: For security, fraud prevention, and Service improvement.

5. How We Use Your Data

• To provide, operate, and maintain the Service.
• To create and manage your account and process payments.
• To generate AI responses, reports, and files based on your conversations.
• To communicate with you about updates, support, and policy changes.
• To ensure security, prevent fraud, and comply with legal obligations.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Payment Processors: PayPal, to process your payments securely.
• AI Providers: To generate responses and reports.
• Service Providers: Hosting, analytics, and email delivery.
• Legal Authorities: When required by law.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the EU/EEA. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. You may request deletion of your data at any time.

9. Your GDPR Rights

Under the GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
• Right to Restrict Processing: Limit how we process your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: At any time, without affecting prior processing.
• Right to Lodge a Complaint: With your local Data Protection Authority.

To exercise any of these rights, contact us at: matej.granulic@gmail.com

10. Data Security

We implement enterprise-grade technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security assessments, and secure payment processing through PayPal. However, no method of transmission over the internet is 100% secure.

11. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at: matej.granulic@gmail.com