Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Account information, such as your name, email address, and login details.
• Conversation content, prompts, instructions, uploaded files, and generated outputs.
• Usage information, such as feature activity, timestamps, IP address, browser type, and device information.
• Billing and subscription information processed through our payment provider (Stripe). We do not store your full credit card number on our servers.
• Support communications you send to us.

2. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how you use the service. Our payment provider (Stripe) may also set cookies for fraud prevention and payment processing.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect some features of the service.

3. How We Use Information

• Provide, maintain, and improve the platform and its features.
• Generate reports, images, and other AI-assisted outputs you request.
• Authenticate users, manage accounts, and process subscriptions.
• Monitor performance, prevent abuse, investigate incidents, and enforce our terms.
• Respond to support requests and communicate service updates.

4. AI Processing and Third-Party Providers

To deliver our AI features, your prompts and related content may be sent to third-party providers for processing. We work with the following categories of providers:

• AI model providers: OpenAI, DeepSeek, Alibaba Cloud (Qwen)
• Cloud infrastructure: Amazon Web Services (AWS), Alibaba Cloud
• Payment processing: Stripe

These providers process data on our behalf under their respective data processing agreements. We select providers that maintain appropriate security and privacy standards.

While we take steps to protect your data, please be mindful when submitting highly sensitive information (such as government IDs, medical records, or financial credentials) through AI features, as this data will be processed by third-party AI models.

5. Legal Bases and Consent

We process information when necessary to provide the service, comply with legal obligations, pursue legitimate business interests such as security and service improvement, or based on your consent where required by law.

6. Data Retention

We retain information for as long as needed to provide the service, maintain business and legal records, resolve disputes, enforce agreements, and protect the platform. Retention periods may vary depending on the type of data and the purpose of processing.

If you delete your account, we will remove or anonymize your personal data within 30 days, except where we are required by law to retain certain records (such as billing history). Your uploaded files and conversation history will be permanently deleted upon account deletion.

7. Sharing of Information

We may share information with:

• Service providers that help us operate the platform (listed in Section 4).
• Professional advisors, auditors, or legal authorities when required.
• Successors or counterparties in a merger, acquisition, financing, or asset sale.

We do not sell your personal information.

8. Security

We use reasonable administrative, technical, and organizational safeguards to protect your information, including encryption in transit and at rest. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict the processing of your personal information. You may also have the right to object to certain processing or withdraw consent where consent is the basis for processing.

To exercise these rights, you can use the relevant options in your account settings or contact us at support@synraa.com. We will respond to your request within 30 days.

10. Children's Privacy

The service is not intended for children under the age of 16. If you believe a child has provided personal information to us, please contact us and we will promptly delete such information.

11. International Transfers

Your information may be processed in countries other than the one where you live, including the United States and Singapore, where our cloud infrastructure providers operate. Where required, we will use appropriate safeguards for cross-border data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the revised version on this page and updating the effective date above. For significant changes, we may also notify you by email.

13. Contact Us

Synraa Tech is the data controller responsible for your information. If you have questions about this Privacy Policy, contact us at support@synraa.com.