Privacy Policy

1. Privacy contact

For questions or requests about your personal information, contact synchatica@proton.me.

2. Information we process

Account and sign-in

An anonymous account identifier and session information; if you choose Google or Yandex sign-in, your email address and account identifier from that provider.

Conversations

Your messages, uploaded files, images and voice messages, conversation preferences and the context used to continue your conversations.

Support

Your support messages, the operator’s replies, message dates and times, and the status of your request.

Technical information

Device and browser information, request dates and times, session identifiers and technical records of service operation. Network requests involve an IP address; the application uses a hash of the address in its abuse-prevention counters.

Payments

Payment amount, date, status and transaction identifier. Full payment card numbers and security codes are entered on the payment provider’s page and are not received or stored by the service operator.

Notifications

Your browser’s push subscription address and associated technical subscription information when you enable push notifications.

Campaign links

An advertising or referral code from the link used on your first visit, to measure the operator’s own campaigns.

You choose what to include in your messages and uploads. Please avoid sending sensitive personal information, such as health information, criminal records, political or religious beliefs, or unnecessary information about other people. The service does not intentionally request special-category or biometric data.

3. Google sign-in data

Google sign-in requests only the openid and email scopes. It provides your Google account identifier and email address so that the service can sign you in and link your service account. This sign-in flow does not request access to Gmail messages, contacts or Google Drive files, or request offline access to your Google account.

The account identifier and email address are stored with your linked service account and used for authentication and account continuity. When payment receipts are enabled, a linked sign-in email address is also shared with YooKassa to issue and deliver the receipt. Google sign-in data is subject to the access, sharing, retention and deletion practices described in this policy. The service does not sell personal information or share it for advertising purposes.

4. Why we use information and the basis for processing

• Provide the service, generate responses and maintain conversation context and preferences: to perform the service contract and deliver the features you request.
• Authenticate you, link your account and protect access to it: to provide your account under the service contract.
• Process payments and record charges: to perform the paid-service contract. Issue receipts and keep required financial records: to meet applicable legal obligations.
• Operate and secure the service, diagnose problems and prevent automated abuse: to provide and protect the service. The applicable legal basis depends on the processing and the law that governs it.
• Deliver optional notifications: with your permission where consent is required; you can withdraw that permission. Respond to support requests: to provide the requested service.
• Handle legally required disclosures and privacy requests: to meet applicable legal obligations.

Where Russian personal data law applies, Article 6 of Federal Law No. 152-FZ describes grounds for processing and Article 9 addresses consent. Russian payment receipt requirements are addressed in Federal Law No. 54-FZ. These references concern that jurisdiction and do not establish the legal basis for processing in every country.

Where processing depends on your consent, you may withdraw it by contacting us. A withdrawal does not by itself remove obligations to retain information under applicable law or make it possible to provide a feature without the information that feature needs.

5. Service providers and international processing

Information is shared as needed to provide the service, including with the following categories of providers:

YooKassa (YooMoney)

Payment processing and payment receipts when you use a paid feature.

Google and Yandex

Authentication when you choose the corresponding sign-in option.

AI model providers and access providers

Processing messages, relevant conversation context and user-provided materials to generate responses and operate the features you use. Message content and materials can themselves contain personal information you include.

Infrastructure providers

Hosting and operating the service and delivering browser push notifications when enabled.

Providers may process information in other countries. The applicable transfer requirements depend on the processing, the recipient’s location and the relevant law. Where Russian law applies, localization and cross-border transfer requirements are addressed in Articles 18(5) and 12 of Federal Law No. 152-FZ. The language you select does not indicate where data is hosted.

Processing and storage by AI providers depend on the provider, the feature and its terms. You can request information about the providers used and their processing arrangements at synchatica@proton.me. Information may also be disclosed to public authorities where required by applicable law.

6. Retention and deletion

Personal information is retained for the purposes for which it is processed. Deleting your account revokes sessions, removes linked sign-in identities and push subscriptions, and removes conversation content, saved memory and support-message content from active service data. Limited pseudonymous account and support records, payment records and hashed bonus and trial claims are retained for payment settlement, security and preventing repeated claims. Payment records are retained for the periods required by applicable tax and accounting rules.

The Account section provides controls to clear conversation history or delete your account. Account deletion also removes the content of support correspondence. For a request that you cannot complete through these controls, contact the privacy address above.

7. Your privacy requests

Depending on applicable law, your rights may include access to your information and information about its processing, correction, deletion, restriction of processing, data portability, objection to processing and withdrawal of consent. You may also complain to the competent data protection authority or seek a judicial remedy. The availability of a particular right depends on the applicable law and the processing involved.

Send requests to synchatica@proton.me. Requests are handled within the time limits required by applicable law. For requests governed by Russian law, the response period stated in the Russian policy is no more than 10 working days from receipt; Article 14 of Federal Law No. 152-FZ addresses access rights, and Roskomnadzor (rkn.gov.ru) is the supervisory authority. Your choice of interface language does not limit your applicable rights or determine your competent authority.

8. Security

The service uses HTTPS, account access checks and request limits to help protect information and prevent abuse. Its abuse-prevention counters use hashed IP addresses. Keep your account and device secure and contact support if you suspect unauthorized access.

9. Policy updates

The current version of this policy is published on this page. Material changes are communicated through the service interface. The update date appears at the top of the document.