Privacy
Policy
This policy explains what data we collect, how we use it, and what rights you have. We've written it to be readable — not just legally defensible.
TABLE OF CONTENTS
DATA PROTECTION OFFICER
To exercise your GDPR, CCPA, or HIPAA rights, or for inquiries regarding ticket data processing:
1
.
Who We Are
Synthire, Inc. ("Synthire", "we", "us", or "our") operates the Synthire platform, an AI-powered customer support automation service. This Privacy Policy applies to all data collected through our website, platform, and services.
Our Data Protection Officer can be reached at privacy@synthire.com.
2
.
Data We Collect
# Data you provide directly
When you create an account, subscribe to a plan, or contact us, we collect: name, email address, company name, job title, payment information (processed by our payment provider — we do not store card details), and any information you provide in forms or communications.
# Data collected automatically
When you use the Service, we collect: IP address, browser type and version, pages visited and time spent, referral source, and device information. We use this data to improve the Service and diagnose technical issues.
# Support ticket data
To provide the Service, Synthire processes the content of support tickets submitted by your customers. This data is processed on your behalf as a data processor. You remain the data controller for this information.
# Integration data
When you connect Synthire to third-party platforms (Zendesk, Salesforce, Shopify, etc.), we access only the data necessary to perform the requested actions. We do not store integration data beyond what is required to complete a resolution.
3
.
How We Use Your Data
We use your data to: (a) provide, maintain, and improve the Service; (b) process payments and send billing communications; (c) respond to support requests and inquiries; (d) send product updates and changelog notifications (you can unsubscribe at any time); (e) comply with legal obligations; (f) detect and prevent fraud and security incidents.
We do not use your support ticket data to train AI models without your explicit consent.
4
.
Data Sharing
We do not sell your data. We share your data only in the following circumstances:
Service providers: we share data with third-party vendors who help us operate the Service (payment processing, infrastructure, analytics). All vendors are bound by data processing agreements.
Legal requirements: we may disclose data when required by law, court order, or governmental authority.
Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before this occurs.
5
.
Data Retention
We retain your account data for as long as your account is active. If you cancel your account, your data is retained for 30 days to allow for export, then permanently deleted.
Support ticket data processed on your behalf is retained according to your plan settings. Enterprise customers can configure custom retention periods.
Anonymized, aggregated usage data may be retained indefinitely for product improvement purposes.
6
.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access: request a copy of the data we hold about you.
Correction: request correction of inaccurate data.
Deletion: request deletion of your data, subject to legal obligations.
Portability: request your data in a machine-readable format.
Objection: object to certain types of processing.
Restriction: request that we restrict processing of your data.
7
.
Cookies
We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. You can control cookie settings through your browser.
We use: strictly necessary cookies (required for the Service to function), analytics cookies (to understand how the Service is used), and preference cookies (to remember your settings). We do not use advertising or tracking cookies.
8
.
Security
We implement industry-standard security measures including AES-256 encryption at rest and in transit, role-based access controls, regular penetration testing, and SOC 2 Type II certification. A full description of our security practices is available on our Security page.
Despite our best efforts, no system is completely secure. If you discover a security vulnerability, please report it to security@synthire.com.
9
.
International Transfers
Synthire is headquartered in the United States. If you are located outside the US, your data may be transferred to and processed in the US or other countries. For transfers from the European Economic Area, we rely on Standard Contractual Clauses approved by the European Commission.
Enterprise customers can request data residency in the US, EU, or APAC regions. Contact compliance@synthire.com for details.
10
.
Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact privacy@synthire.com and we will delete it promptly.
11
.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the Service at least 30 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.
12
.
Contact
For privacy-related questions or to exercise your rights, contact us at:
Synthire, Inc.
Legal Department
548 Market St, Suite 48210
San Francisco, CA 94104
United States
Direct legal dispatch: privacy@synthire.com
Need a signed Data Processing Agreement (DPA)?
We sign standard EU SCCs, HIPAA Business Associate Agreements (BAAs), and custom data retention terms.