Privacy Policy

01Introduction

Synthesis Intelligence, Inc. ("we," "us," or "our") operates the Synthesis platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

02Information We Collect

Account Information. When you create an account, we collect your email address, name, and organization name.

Brand Data. When you connect data sources (Amazon, Shopify, Meta, etc.), we access and process your business data including sales, orders, advertising metrics, and customer analytics. This data is used solely to provide the Service to you.

Usage Data. We collect information about how you interact with the Service, including queries, session data, and feature usage.

Third-Party Platform Data. We access data from platforms you connect, including:

• Amazon Seller Central (orders, revenue, inventory, customer analytics)
• Shopify (orders, customers, products)
• Meta / Facebook (advertising performance, ad creative data)
• Google Ads (campaign and keyword performance — see below)
• Google Trends (search interest data)

Google Ads. When you connect a Google Ads account, we access your advertising performance data through the Google Ads API using the https://www.googleapis.com/auth/adwords scope. We read campaign and keyword performance only — campaign name, status and channel type; ad group and keyword text and match type; and the metrics impressions, clicks, cost, conversions, all conversions and conversion value, segmented by day. Access is strictly read-only: we never create, edit, pause, bid on, or otherwise modify any campaign, ad, keyword or budget, and we perform no mutate operations of any kind.

How we handle Google user data. Google Ads data obtained through the Google Ads API is used solely to provide reporting and analytics back to the advertiser who authorized the connection. It is stored in that advertiser's dedicated, isolated Google BigQuery dataset in the United States, encrypted in transit (TLS) and at rest. It is never sold, rented, or used for advertising or targeting, and it is never used to train any machine-learning model. It is not combined with, or disclosed to, any other customer. OAuth refresh tokens are stored encrypted in Google Cloud Secret Manager. You may revoke our access at any time from the Connections page in Synthesis, or from your Google Account permissions page at myaccount.google.com/permissions; on revocation we stop syncing immediately. On request or on account termination, Google Ads data is deleted within 30 days. Synthesis Intelligence's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

03How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate strategic intelligence, analytics, and recommendations for your brand
• Process and store your business data in secure cloud infrastructure
• Improve and personalize your experience
• Communicate with you about the Service

04Data Isolation & Security

We implement industry-standard security measures to protect your data:

• Tenant Isolation. Each organization's data is stored in separate, isolated database containers. No organization can access another organization's data.
• Authentication. All API access requires cryptographic JWT tokens verified on every request.
• Encryption. Data is encrypted in transit (TLS/SSL) and at rest (Google Cloud encryption).
• Access Control. Role-based access control limits data access within organizations.
• Secret Management. API credentials and secrets are stored in Google Cloud Secret Manager, not in application code.
• SQL Validation. All database queries are validated against authorized datasets before execution to prevent cross-tenant data access.

05Data Storage

Your data is stored on Google Cloud Platform infrastructure in the United States. We use:

• Google BigQuery for business analytics data
• Google Firestore for application data (sessions, settings, memory)
• Google Cloud Run for application hosting

06Data Sharing

We do not sell, trade, or rent your personal or business data to third parties. We may share data only:

• With your explicit consent
• With service providers who assist in operating the Service (e.g. cloud infrastructure providers), bound by confidentiality agreements
• To comply with legal obligations or protect our rights

07Third-Party Services

Our Service integrates with third-party platforms and AI providers:

• Anthropic (Claude). AI language model for analysis and recommendations. Your queries and brand context are processed by Anthropic's API. See Anthropic's Privacy Policy.
• OpenAI. Secondary AI model for analysis. See OpenAI's Privacy Policy.
• Advertising data and AI providers. Where you have connected Google Ads, Google Ads performance data may be included in the brand context processed by these AI providers in order to generate your analytics. These providers act as our service providers under confidentiality obligations and do not use your data to train their models.
• Google Cloud. Infrastructure and data storage. See Google Cloud Privacy.
• Firebase. Authentication services. See Firebase Privacy.

08Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time by contacting us. Upon account termination, we will delete your data within 30 days, except as required by law.

09Your Rights

You have the right to:

• Access your personal and business data
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect third-party data sources at any time
• Export your data in a machine-readable format

10Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect information from children.

11Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

12Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: