Syntra («we», «service») respects your privacy and complies with the General Data Protection Regulation (GDPR) and applicable Portuguese law.
1. Data controller
Controller: operator of the Syntra service (syntra.uno). Privacy contact: adaliosemedo@scobovault.org.
2. Data we collect
- Account: email, name (if provided), password (managed by Supabase Auth — not stored in plain text by us).
- Usage: chat and agent messages, sessions, credits consumed, routed model (technical metadata).
- Payments: billing data processed by Stripe; we do not store full card numbers.
- Technical: server logs, approximate IP address, essential session cookies.
3. Purposes and legal bases
- Service provision and contract performance (GDPR Art. 6(1)(b)).
- Billing and legal obligations (Art. 6(1)(c) and (1)(b)).
- Security, abuse prevention and product improvement (legitimate interest, Art. 6(1)(f)).
- Service communications (email confirmation, welcome).
4. AI processing
Content you send may be transmitted to AI model providers (e.g. OpenAI, Anthropic, Google, DeepSeek) only to generate responses. We configure requests not to use your data for model training when the provider supports it. We do not sell your prompts to third parties.
5. Processors and transfers
We use infrastructure in the EU or with adequate safeguards, including: Supabase (database and auth), Vercel (hosting), Stripe (payments), Resend (transactional email). An updated list can be requested by email.
6. Retention
We keep data while your account is active and for the legal period required for billing and claims. You may request account deletion on Delete account and data or by contacting us.
7. Your rights
You have rights of access, rectification, erasure, restriction, portability and objection, and may lodge a complaint with the CNPD (cnpd.pt). To exercise rights: adaliosemedo@scobovault.org.
8. Security
We apply reasonable technical and organizational measures (HTTPS, access control, database RLS). No system is 100% secure.
9. Minors
The service is not intended for users under 16. If you become aware of misuse, contact us.
10. Changes
We may update this policy. The date at the top indicates the current version. Material changes will be communicated by email or in the product.