Last updated: May 2026
This Privacy Policy explains what personal data Synthio ("we", "us") collects when you use synthio.io, how we use it, and your rights. By using Synthio you agree to the practices described below.
1. Data we collect
| Data | When | Why |
|---|---|---|
| Email address | Account creation / sign-in | Account management, transactional emails |
| Display name | Account creation | Personalisation, review attribution |
| Payment information | Pro subscription purchase | Billing — processed by Stripe, never stored by us |
| Country / currency | Page load (IP lookup) | Show localised pricing — not stored beyond your session |
| Usage analytics | While using the site | Improve the product (via Google Tag Manager) |
2. Third-party processors
We share data with the following services to operate Synthio. Each acts as a data processor on our behalf:
- Google Firebase — authentication and user database. Privacy policy
- Stripe — payment processing. Card details are handled entirely by Stripe and never touch our servers. Privacy policy
- HubSpot — CRM. We send your email, name, and subscription plan to HubSpot when you create an account, so we can send transactional emails and product updates. Privacy policy
- ipapi.co — IP-based country lookup used solely to display localised pricing. No personal data is stored by us from this lookup.
- Google Tag Manager / Analytics — anonymous usage analytics to help us understand how the app is used.
3. Legal basis (GDPR)
If you are in the European Economic Area, our legal bases for processing are:
- Contract performance — processing your email and payment data to provide the service you signed up for.
- Legitimate interests — sending transactional account emails and using anonymous analytics to improve the product.
- Consent — any marketing emails beyond transactional messages. You can withdraw consent at any time by contacting us.
4. Data retention
We keep your account data for as long as your account is active. If you delete your account, your personal data is removed from our systems within 30 days. Anonymised analytics data may be retained indefinitely.
5. Your rights
Under GDPR and similar laws you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your personal data.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, email us at info.synthio@gmail.com. We will respond within 30 days.
6. Cookies
We use the following cookies and local storage:
- synthio-lang (localStorage) — your language preference.
- synthio-currency / synthio-country (sessionStorage) — your detected currency for the current session.
- Google Analytics / GTM cookies — anonymous usage tracking.
- Firebase authentication cookies — keep you signed in.
7. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the latest revision. Continued use of Synthio after changes constitutes acceptance.
8. Contact
Questions about this policy? Contact us at info.synthio@gmail.com or via the contact form.