Privacy Policy
Last updated: February 25, 2026
1. What We Collect
SynaptiQ stores structured facts that your AI application writes on behalf of its users — things like preferences, decisions, project context, and goals. Each fact may also include the source text it was derived from, used to improve retrieval accuracy.
We do not store full conversation transcripts. Only the specific text segments associated with individual facts are retained.
Each fact includes metadata such as a confidence score, a timestamp, and lifecycle state. Facts are always associated with an authenticated tenant and subject identifier — never stored anonymously.
2. How We Store and Protect It
All data is hosted on enterprise-grade cloud infrastructure with the following protections:
- Encryption in transit — all connections between clients, services, and databases are secured with TLS, enforced by default at the infrastructure level.
- Tenant isolation — each tenant's data is logically isolated at the database level. Row-level security policies prevent cross-tenant access.
- Authentication required — every API request must include a valid bearer token. No anonymous access is possible. Without valid credentials, no data is readable, writable, or discoverable.
- Audit logging — administrative actions are logged with timestamps and actor identifiers.
3. Who Can Access Your Data
Only authenticated requests bearing a valid credential for your tenant can read or modify your data through the API. Tenant isolation is enforced at the database level using row-level security policies.
We do not sell, share, rent, or trade your data with any third party. Your facts are never used to train language models or any other machine learning system.
4. Data Retention
Facts are retained for as long as your account is active or until you delete them. SynaptiQ supports per-fact TTL (time-to-live) policies: facts marked as volatile automatically expire, while permanent facts persist indefinitely until you explicitly remove them.
When a fact is deleted — either by you, by your application, or by an expiry policy — it is marked as deleted in the system. Deleted facts are excluded from all retrieval queries immediately.
5. Your Rights
- Right to access — you can view all facts stored under your account at any time through the User Data Portal.
- Right to erasure — you can delete all your stored facts instantly from the portal. This action is irreversible.
- Right to portability — contact us to request a machine-readable export of your stored facts.
- Right to rectification — if any stored fact is inaccurate, you or your application can update or supersede it at any time through the API.
6. Cookies and Tracking
The SynaptiQ marketing website does not use cookies or third-party trackers. The User Data Portal uses a browser session token (stored in sessionStorage) to maintain your login state. This token is never sent to third parties and is cleared when you close the tab or sign out.
7. Third-Party Services
SynaptiQ uses a third-party identity provider for authentication on the User Data Portal. When you sign in, that provider's own privacy policy applies to the authentication step. We receive only your name, email, and a unique identifier — no other account data from the provider.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through the website. Continued use after changes are posted constitutes acceptance of the revised policy.
9. Service Changes and Discontinuation
To operate the platform responsibly and securely, SynaptiQ reserves the right to modify, suspend, or discontinue any part of the service at any time.
We may also delete data when required for legal, security, operational, or policy-enforcement reasons, including abuse prevention, account misuse, or prolonged inactivity.
When practical, we aim to provide advance notice for material service changes. Continued use of the service after such updates constitutes acceptance of those changes.
10. Contact
For questions about this policy, data requests, or privacy concerns: