Privacy Policy

1. Who this policy applies to

This Privacy Policy applies to [LEGAL ENTITY] (“Persynt,” “we,” “us”) and the Persynt websites, apps, browser extensions, and services that link to it (the “Service”).

Persynt is intended only for people who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. See “Children’s privacy” below.

2. Our privacy commitments

These commitments shape every decision we make about your data:

• Your persona belongs to you. We treat the model of who you are as your property, not our asset.
• Private by default. Nothing about your persona is published, shared, or licensed unless you choose to.
• Export anytime. You can download your persona and the data behind it whenever you want.
• Delete for real. When you delete something, we delete it — we don’t just hide it.
• Revocable. If you ever license part of your persona, you can pull that access back.
• Never sold. We do not sell your personal information, and we don’t use your private Persona Data to build other people’s personas without your explicit consent.

3. Information we collect

Information you give us

• Account information — your name, email address, and either a password or an identifier from Google or Apple if you sign in with them.
• Persona Data — the memories, writing, voice recordings, interview answers, preferences, and other material you provide so Persynt can learn your voice and judgment (your “Persona Data”).
• Imported content — when you choose to connect or upload exports from other platforms (for example, social or messaging exports), the content you bring in.
• Communications — messages you send us, support requests, and survey or feedback responses.
• Payment information — if and when paid plans are offered, billing details are handled by a third-party payment processor; we do not store full card numbers.

Information we collect automatically

• Usage and device data — pages and features used, actions taken, approximate location derived from your IP address, browser and device type, and log data.
• Cookies and similar technologies — used to keep you signed in, secure the Service, and (if enabled) understand product usage. See “Cookies and tracking” below and our Cookie Policy.

Information from third parties

• Sign-in providers — if you use Google or Apple, we receive basic profile information such as your name and email to create and secure your account.
• Connected platforms — if you authorize an import, we receive the data those services make available based on the permissions you grant.

4. How we use your information

• To build and operate your persona — capturing, compiling, and improving the model of your voice, judgment, and preferences so it can act for you and help AI understand you.
• To provide the Service — authentication, security, saving your work, and delivering the features you use.
• To improve the Service — diagnosing problems and understanding what’s working, using the least identifiable data necessary.
• To communicate with you — service messages, security alerts, and (where permitted) product updates you can opt out of.
• To keep people safe and comply with law — preventing abuse and fraud, enforcing our Terms, and meeting legal obligations.

We do not sell your personal information, and we do not use your private Persona Data to train models that serve other users unless you explicitly license it or consent.

5. AI processing and service providers

Delivering Persynt requires trusted service providers (“sub-processors”) who process data on our behalf under contract. Today these include:

• Supabase — database, authentication, and storage hosting.
• Vercel — application hosting and content delivery.
• Anthropic — AI model processing used to compile and run your persona.
• Cloudflare — bot protection (Turnstile) and network security.
• Loops — transactional and waitlist email delivery.
• Google and Apple — optional sign-in.
• Product analytics — privacy-conscious usage analytics, when enabled.

Where our AI providers support it, we configure processing for zero data retention, meaning your content is not retained by the model provider after a request is served. If you connect your own AI provider key (“bring your own key”) to run a Construct on another platform, that provider processes the request under its own terms, which you control.

6. Licensing and the Commons

Persynt lets you choose to license aspects of a persona to other people or companies. When you do, the licensee receives an ongoing relationship and their own private notes — not a copy of your identity. The core of who you are is re-projected for each use and is never handed over at rest, and you can revoke a license at any time, which ends future access.

If you participate in a shared space (for example, a Circle), the people you invite can see what you choose to share there. You control what goes in and can remove it.

7. How we share information

We share personal information only in these situations:

• With service providers who process it on our behalf under confidentiality and data-protection obligations.
• At your direction — when you license your persona, join a Circle, or otherwise choose to share.
• For legal and safety reasons — to comply with law, respond to lawful requests, or protect the rights, safety, and security of people and the Service.
• In a business transfer — if Persynt is involved in a merger, acquisition, or sale of assets, subject to this policy; we’ll notify you of any change in control of your information.
• In aggregated or de-identified form that cannot reasonably identify you.

We do not sell your personal information and do not share it for cross-context behavioral advertising.

8. Cookies and tracking

We use strictly necessary cookies to keep you signed in and to protect the Service (including Turnstile bot protection). With your choices honored, we may also use optional analytics cookies to understand usage. You can control non-essential cookies through your browser and our cookie controls. For details, see our Cookie Policy.

9. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete content or your account, we delete the associated personal information from our active systems and purge it from routine backups within a reasonable cycle, except where we must retain limited information to comply with law, resolve disputes, or enforce our agreements.

10. Your rights and choices

You can exercise these at any time from within the Service or by emailing us:

• Access and export — get a copy of your persona and the data behind it.
• Correction — fix inaccurate information, including by correcting your persona directly.
• Deletion — delete specific content or your entire account.
• Restriction and objection — limit or object to certain processing.
• Withdraw consent — including revoking any persona licensing you’ve granted.

If you are in the EEA, UK, or Switzerland

We process your personal data to perform our contract with you, to pursue legitimate interests (such as securing and improving the Service), to comply with legal obligations, and with your consent where required. You have the rights above and may lodge a complaint with your local data protection authority. [LEGAL ENTITY] is the controller of your personal data.

If you are in California

We do not sell or share (as those terms are defined under California law) your personal information, and we have not in the preceding 12 months. You have the right to know, access, correct, and delete your personal information, and not to be discriminated against for exercising these rights. You may use an authorized agent to submit requests.

To make any request, email privacy@persynt.ai. We will verify your request and respond within the time required by applicable law.

11. Security

We protect your information with encryption in transit and at rest, row-level access controls, scoped authentication, and least-privilege practices. No system is perfectly secure, but we work hard to safeguard the trust you place in us, and we’ll notify you and regulators of a breach where required by law.

12. International data transfers

We are based in the United States and process information there and in other countries where our providers operate. Where we transfer personal data internationally, we use appropriate safeguards, such as Standard Contractual Clauses, as required by applicable law.

13. Children’s privacy

Persynt is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has provided us information, contact us and we’ll act promptly.

14. Changes to this policy

We may update this policy as the Service evolves. If we make material changes, we’ll post the updated policy here, update the “Last updated” date, and notify you through the Service or by email where appropriate.

15. Contact us

[LEGAL ENTITY], [BUSINESS ADDRESS].

Privacy questions and requests: privacy@persynt.ai.