Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Account information, such as your name, email address, and login details.
• Conversation content, prompts, instructions, uploaded files, and generated outputs.
• Usage information, such as feature activity, timestamps, IP address, browser type, and device information.
• Campaign attribution information, such as GCLID, GBRAID, WBRAID, UTM parameters, the first landing page, and your analytics or advertising consent choices.
• Billing and subscription information processed through our payment provider (Stripe). We do not store your full credit card number on our servers.
• Support communications you send to us.

2. Cookies and Similar Technologies

We use essential cookies to keep you signed in, protect the service, and remember your privacy choices. With your permission, we also use analytics cookies to understand visits and product usage, and advertising cookies to attribute Google Ads clicks and measure campaign performance. Our payment provider (Stripe) may set cookies for fraud prevention and payment processing.

Optional analytics and advertising storage is denied by default until you make a choice. You can accept, reject, or customize these categories in the privacy banner and reopen "Cookie settings" at any time. You can also manage cookies through your browser settings. Disabling essential cookies may affect some service features.

3. How We Use Information

• Provide, maintain, and improve the platform and its features.
• Generate reports, images, and other AI-assisted outputs you request.
• Authenticate users, manage accounts, and process subscriptions.
• Monitor performance, prevent abuse, investigate incidents, and enforce our terms.
• Measure registrations, successful content creation, checkout activity, subscription payments, and advertising campaign effectiveness when permitted.
• Permit a limited number of authorized personnel to review conversations and generated outputs when necessary to troubleshoot issues, respond to support requests, evaluate quality, and improve the service. Access is restricted and logged.
• Respond to support requests and communicate service updates.

4. AI Processing and Third-Party Providers

To deliver our AI features, your prompts and related content may be sent to third-party providers for processing. We work with the following categories of providers:

• AI model providers: OpenAI, DeepSeek, Alibaba Cloud (Qwen)
• Cloud infrastructure: Amazon Web Services (AWS), Alibaba Cloud
• Payment processing: Stripe
• Analytics and advertising measurement: Google Analytics and Google Ads, when enabled and permitted by your consent choices

These providers process data on our behalf under their respective data processing agreements. We select providers that maintain appropriate security and privacy standards.

While we take steps to protect your data, please be mindful when submitting highly sensitive information (such as government IDs, medical records, or financial credentials) through AI features, as this data will be processed by third-party AI models.

5. Legal Bases and Consent

We process information when necessary to provide the service, comply with legal obligations, pursue legitimate business interests such as security and service improvement, or based on your consent where required by law. Optional analytics and advertising technologies are controlled by the choices available in our privacy banner. Withdrawing consent does not affect processing that occurred before withdrawal.

6. Data Retention

We retain information for as long as needed to provide the service, maintain business and legal records, resolve disputes, enforce agreements, and protect the platform. Retention periods may vary depending on the type of data and the purpose of processing.

Campaign attribution linked to an account is retained while the account remains active and is deleted with the account, except where a limited record must be retained for security, billing reconciliation, or legal compliance. The browser cookie that remembers your privacy choice expires after 180 days unless you update it sooner.

If you delete your account, we will remove or anonymize your personal data within 30 days, except where we are required by law to retain certain records (such as billing history). Your uploaded files and conversation history will be permanently deleted upon account deletion.

7. Sharing of Information

We may share information with:

• Service providers that help us operate the platform (listed in Section 4).
• Professional advisors, auditors, or legal authorities when required.
• Successors or counterparties in a merger, acquisition, financing, or asset sale.

We do not sell your personal information.

8. Security

We use reasonable administrative, technical, and organizational safeguards to protect your information, including encryption in transit and at rest. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict the processing of your personal information. You may also have the right to object to certain processing or withdraw consent where consent is the basis for processing.

Use the "Cookie settings" control in the site footer or on this page to change or withdraw optional analytics and advertising consent. Rejecting these categories does not prevent you from using the core service.

To exercise these rights, you can use the relevant options in your account settings or contact us at support@synraa.com. We will respond to your request within 30 days.

10. Children's Privacy

The service is not intended for children under the age of 16. If you believe a child has provided personal information to us, please contact us and we will promptly delete such information.

11. International Transfers

Your information may be processed in countries other than the one where you live, including the United States and Singapore, where our cloud infrastructure providers operate. Where required, we will use appropriate safeguards for cross-border data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the revised version on this page and updating the effective date above. For significant changes, we may also notify you by email.

13. Contact Us

Synraa Tech is the data controller responsible for your information. If you have questions about this Privacy Policy, contact us at support@synraa.com.