SyntyAxis AI privacy policy
Effective 3 November 2026.
This policy covers SyntyAxis AI, the service at app.syntyaxis.ai and the website syntyaxis.ai. It is run by SyntyAxis, a sole-proprietor software business in India. Contact: support@syntyaxis.com. Other SyntyAxis apps have their own policies on syntyaxis.com.
What SyntyAxis AI does
You give it your business website. It reads the public pages, builds a brand kit (what you sell, who buys, tone, proof points, prices found on the site, claims it must never make), and you confirm it. Then it drafts replies to leads from your website form, social posts, and a weekly search brief. Nothing is posted or sent until you approve it, unless you turn on autopilot for a channel.
Information we hold
Account. Your email address and, if you sign in with Google, the name Google provides. Sign-in is handled by Supabase Auth, using Google sign-in or an email link. We never see or store a password.
Workspace. Your website address, the brand kit built from your public website (including a logo URL and colors read from your pages), your plan, credits and settings.
Connected channels. When you connect Pinterest, YouTube or Google Search Console, the platform gives us an access token. Tokens are kept in an isolated Cloudflare Durable Object vault, one per channel, on Cloudflare's encrypted-at-rest storage. They are never written to our database or logs, are used only to act on your approved work, and are deleted when you disconnect the channel. You can also revoke access from your Google or Pinterest account settings.
Leads. When someone submits the form you placed on your website, we receive their name, email or phone, message, and the page they wrote from. Their IP address is held in a one-hour counter to limit abuse and is not stored with the lead.
Drafts, decisions and the audit log. Every draft the agent proposes, what you approved, edited or skipped, and a log of events in your workspace (lead received, channel connected, post published, and so on).
Search Console data. If you connect Google Search Console, we read the queries, clicks, impressions and positions for the property you choose. It is used only for your own keyword research and is shown only in your workspace.
Email to us. If you write to support@syntyaxis.com we have your message and address, used to answer you.
How we use it
To run the service for you: build and keep your brand kit, draft and publish approved work, answer leads, produce your weekly brief and report, bill you when billing starts, and keep the service secure. We do not sell personal data, show ads, or use your data to build profiles of your leads for anyone else.
AI drafting
Drafts are written by Anthropic's Claude API. To draft, we send Anthropic the relevant parts of your brand kit, the text of your public website pages, and the lead's message. Under Anthropic's commercial API terms, inputs and outputs are not used to train Anthropic's models. The agent drafts from your brand kit only; when it cannot answer safely the item is marked "Needs you" instead of guessing.
Who else handles data
- Cloudflare (Workers, KV, Durable Objects, Pages): runs the app, with servers worldwide. Cloudflare keeps ordinary request logs to operate the service.
- Supabase: Postgres database and sign-in, hosted in Frankfurt, Germany (EU).
- Anthropic: AI drafting, as above.
- Cloudflare Email Service (planned): sends approved lead replies by email. Replies go from a reply-yourbusiness@syntyaxis.ai address under your business name, with your own address as Reply-To, so the lead's answer comes straight to you.
- Google and Pinterest: when you connect a channel, your approved content and the API calls needed to publish it go to that platform under its own terms.
Each of these processes data on our instructions and under its own privacy policy. Some are outside India; by using the service you accept that transfer.
Analytics
The app at app.syntyaxis.ai has no analytics or advertising scripts. The website syntyaxis.ai uses Cloudflare Web Analytics, which counts visits without cookies and without identifying you.
Google API Services
SyntyAxis AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In plain words: YouTube access (upload and read-only) is used only to publish videos you approved and to show which channel is connected. Search Console access (read-only) is used only to show you your own site's search data and build your keyword list. We do not use Google user data for advertising, do not sell it, do not let humans read it except to fix a problem you ask us about or as the law requires, and do not use it to train AI models.
Retention
We keep workspace data while your account is open and for 30 days after you delete it, then erase it. The audit log is kept for 12 months. Channel tokens are deleted the moment you disconnect. Database backups kept by our host age out within 7 days.
Deleting your data
To delete your account and workspace, email support@syntyaxis.com from your account address; we confirm within 7 days and erase within 30. Disconnecting a channel deletes its token at once.
Your rights
You can ask for a copy of your data, a correction, deletion, or an export, by email. We answer within 30 days.
If you are in India, the Digital Personal Data Protection Act 2023 gives you rights of access, correction, erasure and grievance redressal; the grievance officer can be reached at support@syntyaxis.com.
If you are in the EU, EEA, UK or Switzerland, the GDPR or UK GDPR gives you the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your local data protection authority. Our legal bases are the contract with you (running the service), legitimate interests (security, abuse prevention) and consent where we ask for it.
Leads are your customers
For leads who write to your business through the form, you are the business they contacted and we process their data on your behalf. You are responsible for telling them, in your own privacy notice, that a service provider handles your inbound messages. A data processing addendum is available on request for customers who need one.
Children
SyntyAxis AI is for businesses and is not for anyone under 18. We do not knowingly keep an account for a minor; if you believe we have one, email us and we will delete it.
Security
Traffic is encrypted in transit. Tokens live in isolated vaults, never in the main database. Access to production systems is limited to the owner. No system is perfectly secure; if a breach affects you we will tell you without undue delay.
Changes
We will post changes here with a new date and, for material changes, tell you by email or in the app.