Privacy Policy

Version of October 1, 2026 · In force from October 1, 2026

1. Who we are and what this policy covers

[Legal entity OÜ], registration code [00000000], [Street 1], [10111] Tallinn, Estonia, is the controller of your personal data when you use Syntax AI. Full details are on the Company information page.

This policy explains what personal data we process, why, who receives it, how long we keep it and what rights you have.

2. Data we process

Account data: email address, password, confirmation that you are 18 or older, language and theme settings.
Content: your prompts, uploaded files, generated results and previews, chat messages in the code module.
Payment data: orders, receipts, the Credits ledger and payment status. Card data is processed by [Payment provider]. We never see or store card numbers.
Technical data: sign-in session, a random device ID used to prevent fraud, IP address and browser type.
Support data: your messages to support and our replies.
Consent records: your cookie choices and the consents you give at checkout.

3. Purposes and legal bases

Purpose	Data	Legal basis (GDPR)
Create and run your account	account data	contract, Art. 6(1)(b)
Run generations and store results	content	contract, Art. 6(1)(b)
Sell Credits, charge runs, issue receipts	payment data	contract, Art. 6(1)(b)
Keep accounting records	payment data, consent records	legal obligation, Art. 6(1)(c)
Moderate content and report illegal content	content	legitimate interest in a safe service, Art. 6(1)(f); legal obligation, Art. 6(1)(c)
Prevent fraud and abuse	technical data, payment data	legitimate interest, Art. 6(1)(f)
Answer support requests and complaints	support data	contract and legal obligation
Analytics and marketing (not active today)	technical data	consent, Art. 6(1)(a)

We do not train our own models on your content.

4. Recipients and processors

We share data only with service providers that help us run Syntax AI. They act on our instructions. Draft list (to be confirmed by Legal):

Google Cloud: hosting, file storage and the Vertex AI Gemini models, EU region;
Anthropic: Claude models for the code module;
Kling: video generation, Singapore;
ElevenLabs and other voice and music providers;
[Payment provider]: card payments;
a transactional email provider: account and receipt emails;
Microsoft Azure AI Content Safety: content moderation, EU region.

The current list of AI model providers is on the Service Information page. We may also disclose data to authorities where the law requires it.

5. International transfers

Some providers process data outside the European Economic Area, for example Kling in Singapore. Such transfers are made under the Standard Contractual Clauses approved by the European Commission.

6. How long we keep data

Uploaded files: 30 days.
Results and previews: 3 months. You can delete them earlier.
Prompts and job texts: 90 days. Code conversations: 90 days after the last message. Notifications: 180 days.
Account data: while your account is active.
Financial records (orders, receipts, the Credits ledger, consents): 7 years after the account is deleted, as required by Estonian accounting law. The account itself is anonymised.
Support messages: [retention period].

7. Your rights

You have the right to:

access your data and get a copy;
rectification of inaccurate data;
erasure of your data;
portability: download an export of your account in your Profile;
object to processing based on legitimate interest;
restriction of processing;
withdraw consent at any time, without affecting earlier processing;
complain to the Estonian Data Protection Inspectorate: aki.ee.

Some data must be kept by law even after an erasure request, for example accounting records. We answer requests within one month.

8. Contact and cookies

Write to privacy@syntax-ai.example about anything related to your personal data. Data protection officer: [DPO contact, if appointed].

How we use cookies and how to change your choice is explained in the Cookie Policy.