Privacy Policy

1. Scope and binding language

This policy covers synoriaai.com, our product pages and demos, the customer panel and the community programme. The English text is binding; the other languages are provided for information only.

2. No account, no membership

There is no membership and no user account. An order and community-programme participation are identified by an e-mail address plus a code. Nothing else is required to buy or to take part.

3. What we collect

• E-mail address — when you place an order, and if you join the community programme.
• Order record — product, plan, amount, timestamps and the payment reference.
• Visit measurement — page reached, referring site, campaign parameter and browser user-agent, recorded first-party so we can see which pages lead to a purchase. Requests identified as automated are flagged and left out of the counts. We do not store your IP address in these measurement records, we do not track you across other websites, and we use no advertising or third-party analytics.
• Server logs and security events — ordinary request and error logs, which do contain IP addresses, and sign-in events for the community panel, which record the IP address and browser used. These exist to operate and secure the service.
• Product data you enter — stays inside your own isolated instance. Each licence runs in its own container with its own data directory; customers never share an instance or a database.

4. Cookies

Only first-party technical cookies: a session cookie; a signed demo-access cookie that expires after 6 hours; a referral attribution cookie if you arrive through a community-programme link; and a signed session cookie if you open the community panel. No advertising cookies and no third-party analytics cookies are set.

5. API keys you provide (BYOK)

A few products let you use your own provider API key. The key is encrypted at rest with AES-256-GCM inside your own instance, is never displayed in full again after you save it, and is redacted from that instance's logs.

6. How long we keep data

Order and payment records are kept as long as accounting and legal obligations require. When a licence ends, your instance data is kept for a 7-day grace period so the licence can be resumed, and is then deleted. A final archive is taken before deletion and stored on our server with restricted access, and is automatically deleted 30 days later. You can ask us to delete it sooner.

7. Who else processes your data

• Lemon Squeezy — card payment processing and the related order record.
• Backblaze B2 — off-site encrypted backups of our systems.
• Social platforms — we publish our own posts there. No visitor or customer data is sent to them.

On-chain payments in USDT or USDC settle on a public blockchain, so the payment address and amount are public by the nature of that network. We do not sell or rent your data.

8. Access, correction and deletion

To see, correct or delete the data we hold about you, contact [email protected] with your order reference, or use the support form. We reply to the address the order or programme entry was made with.

9. Changes

If this policy changes, the updated version is published on this page.

← Synoria AI Corporation