1. Introduction

Synthize ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

Email address
Name
Date of birth (for age verification)
Password (stored securely hashed)

Content You Create

Notes and ideas you enter
Books and reading progress
Tasks and to-dos
Mood data and journal entries

Usage Data

Feature usage patterns
Device and browser information
Login timestamps

3. How We Use Your Information

To provide and improve the Service
To process your content through AI for synthesis and organization
To send transactional emails (verification, password reset)
To send marketing communications (only with your consent)
To respond to support requests
To detect and prevent fraud or abuse

4. AI Processing

Your notes are processed by OpenAI's GPT models to provide AI synthesis features. This processing is essential to the Service. We send only the content necessary for synthesis (your note text) and do not share your personal information with AI providers.

5. Data Storage and Security

Your data is stored on Cloudflare's infrastructure, which provides enterprise-grade security. We implement:

Encryption in transit (HTTPS)
Secure password hashing (PBKDF2-SHA512)
Rate limiting to prevent abuse
Regular security audits

6. Data Sharing

We do not sell your personal data. We only share data with:

Cloudflare - Infrastructure and hosting
OpenAI - AI processing (note content only)
Stripe - Payment processing
Resend - Transactional emails

7. Your Rights

You have the right to:

Access - Request a copy of your data
Rectification - Correct inaccurate data
Deletion - Request deletion of your account and data
Portability - Export your data
Withdraw consent - Opt out of marketing emails

To exercise these rights, contact us at [email protected]

8. Cookies

We use minimal cookies for essential functionality (authentication session). We do not use advertising or tracking cookies.

9. Children's Privacy

Synthize is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where required for legal compliance or fraud prevention.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the Service.

12. Contact Us

For privacy-related questions or concerns, contact us at [email protected]