Privacy Policy

This policy explains what personal data Synergy AI ("we", "us") collects, why, who we share it with, and the choices you have. Synergy AI is operated by [Company legal name], [Registered company address], which is responsible for your data (the "controller"). Questions about privacy: [support@example.com].

What we collect

• Your account. You sign in through our company's shared sign-in service (auth.binom.com), which our other apps use too, either with Google or with a one-time link sent to your email address. With Google, Google tells it your Google account ID, email address, name and profile picture; with an email link, it gets only your email address. The sign-in service stores these, so one account works across our apps, and it lets our apps' pages check whether you are already signed in, to offer you "Get started" instead of "Sign in". Synergy AI itself stores only your email address, which identifies your account, and when you signed up, first got an answer and came back after 7 and 28 days (for counting how many people keep using the service).
• Your questions and answers. The questions you ask, including follow-up questions, and the answers, sources and combined answers the AI models give, so you can see them again in your history.
• Files you attach. Pictures, PDFs and text files you attach to a question, with their names, so the models can read them (again for follow-up questions) and you can open them from your history. Only you can open them.
• Usage records. For every AI request: the time, which model answered, how much text it processed, and what it cost us. These records do not contain your questions or answers. We use them to charge your team's credits, enforce usage limits, prevent abuse, and keep our accounts.
• Teams and credits. Your teams, their members and roles, credit balances and purchases are kept by our shared account service (Binom Account, the same service you sign in with). We ask it which teams you belong to and their balance, and after each AI answer we tell it how many credits to take from your team's balance and what the answer cost us. We never send it your questions or answers. Your team's spending history there shows which app used credits and for what, not which member. Credits are bought there through Stripe; we never see or store your card details.
• Shared links. If you share a conversation, we store the link and when you shared it.
• Product analytics. Which pages you open and what you do in the app, for example asking a question, which models you pick, how long their answers take, opening a tab or source, copying or sharing. These records include a random ID for your browser, your account ID from our shared sign-in service (so we can see how you use our different apps), your approximate location and device type, and the site or ad that sent you to us. They never include your questions, the answers, your name or your email address.
• Technical data. Our hosting provider keeps server logs (such as IP address, browser type and the pages requested) for a short time to keep the service running and secure.

We don't ask for sensitive information, and we ask you not to put it in your questions or attached files (for example health details, or other people's personal data).

How we use it

• Answering your questions and keeping your history, because that is the service you signed up for (for users in the EU/UK, the legal basis is performing our contract with you).
• Running your account, your team's credits and usage limits (contract).
• Understanding how the service is used, to improve it (product analytics; our legitimate interest in a useful product).
• Measuring our ads: if you came from one of our ads, whether you then signed up, asked a question and kept using the service, so we know which ads work (our legitimate interest in advertising efficiently).
• Preventing abuse and keeping the service secure (our legitimate interest in a safe, working service).
• Accounting and tax records (legal obligation).

We do not sell your personal data, we do not show ads in the service, and we do not use your questions to train AI models.

Who we share it with

To answer a question, we send it, with its attached files and your earlier questions, answers and files in the same conversation, to AI companies. We don't send them your email address or your name.

• OpenRouter (USA), which forwards each question to the AI models. For models that can't read PDFs themselves, it turns attached PDFs into text first, using Cloudflare (USA).
• The AI companies whose models answer: OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini), Perplexity, and DeepSeek (based in China). Their models may search the web for your question, through their own search or through Exa (USA).
• Binom Account, our company's shared account service, for signing in, teams and credits; it takes payments for credits through Stripe (USA).
• Resend (USA), which emails sign-in links for our sign-in service.
• Google (USA), for signing in, Google Tag Manager and Google Analytics for product analytics, and Google Ads for measuring our ads.
• Railway (USA), which hosts our servers and database.

Each of these companies handles data under its own privacy policy and terms. Some AI companies keep requests for a limited time, for example to detect abuse.

If you share a conversation, anyone with the link can read the questions and answers in it and see the names of attached files, but not the files themselves (or your email address). You can stop sharing at any time, and the link stops working at once.

We may also disclose data when the law requires it, or to protect our rights or users' safety, and to a buyer if the business is sold (this policy would still apply).

International transfers

Our providers are mostly in the USA, and DeepSeek is in China, so your data may be processed outside your country. Where the law requires it (for example for data from the EU or UK), we rely on safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

• Conversations stay until you delete them from your history. Deleting a conversation removes it (with its attached files and shared link) from our database at once. Files you attach but never send are deleted after a day.
• Your account data stays until you ask us to delete your account.
• Usage and payment records are kept as long as accounting and tax laws require, and are then deleted.
• Server logs are kept for a short time, usually a few weeks.

Cookies and browser storage

We use what the service needs to work, plus analytics:

• A sign-in cookie that keeps you signed in, plus short-lived security cookies used while signing in.

• A cookie from our shared sign-in service (auth.binom.com) that remembers you for up to 3 months, so you don't have to sign in every time.

• Your browser's local storage remembers which models you switched off and your light/dark theme choice. It never leaves your device.

• Analytics cookies and storage from Google Analytics, which recognise your browser between visits so we can count visitors and see how the app is used (see "Product analytics" above).

• Ad measurement cookies from Google Ads, which remember the ad click that brought you here, so the steps above can be credited to the right ad. They are not used to show you ads.

Stripe sets its own cookies on its payment page to prevent fraud.

Your rights

Depending on where you live, you can ask us to:

• show you the personal data we hold about you, or send you a copy;
• correct it;
• delete it, or your whole account;
• stop or limit certain uses of it.

Email [support@example.com] from the address you sign in with, and we'll reply within 30 days. In the EU or UK you can also complain to your data protection authority. California residents have similar rights under the CCPA; we don't sell or "share" personal data for advertising.

Security

Data travels encrypted (HTTPS). Access to our database is limited to the people who run the service. No system is perfectly secure, but we'll tell you and the authorities if a breach affects your data, as the law requires.

Children

Synergy AI is not meant for anyone under 16, and we don't knowingly collect their data. If you think a child has given us data, contact us and we'll delete it.

Changes

If we change this policy, we'll update the date above, and tell you in the app or by email before important changes take effect.