Privacy Policy & Data Notice

Synodic-AI Corp. ("Synodic-AI", "we", "our", or "us") is dedicated to strong security, transparency, and data protection. This Privacy Notice outlines how we process and safeguard information collected through our public websites (synodic-ai.tech, synodic.biz, and associated publication subdomains) and developer integrations.

1. Information We Collect

We believe in minimal data collection. When you visit our website, our edge security infrastructure records technical request metadata strictly for service delivery, infrastructure integrity, and intrusion prevention:

• Technical Metadata: the time, the site and page requested, the response status, your country, the Cloudflare data center that served you, whether the request looked automated, and the connection's TLS and HTTP versions. We do not store your IP address, browser user-agent or network Autonomous System Number (ASN) in these records. For requests our security rules flag as attacks, we also keep the full requested address.
• Service Providers: Cloudflare hosts and protects this site and runs bot detection on every page, which can set a security cookie. Pages load fonts from Google Fonts, which receives your IP address when your browser requests them. Sentry receives an error report when the site's server code fails: the error, where in the code it happened, the time, and the page address without its query string. Error reports contain no IP address, cookies, request headers or form contents.
• Inbound Inquiries & Lead Forms: When you voluntarily submit a request for enterprise access, whitepaper download, or contact inquiry (via web form or LinkedIn Lead Gen), we collect your name, corporate email address, organization name, job title, and the substance of your inquiry.

2. Purpose & Lawful Basis for Processing

We process your data under the following lawful bases:

• Legitimate Interests (GDPR Art. 6(1)(f)): Protecting our infrastructure against denial-of-service (DDoS) attacks, automated scrapers, and malicious intrusion attempts.
• Contractual & Business Inquiries (GDPR Art. 6(1)(b)): Responding to authorized access inquiries, licensing evaluations, and non-disclosure agreements (NDAs) initiated by you.

3. No Sale or Commercial Exploitation of Data

We do not sell, rent, monetize, or trade your personal information. We do not track visitors across third-party websites or share telemetry data with commercial advertising brokers.

4. Data Retention

Page-visit records are automatically deleted after 45 days, and security event records after 90 days. Inbound business inquiries and contact requests are retained for the duration of the commercial or research relationship.

5. Enterprise Security & Encryption

All data in transit is encrypted using modern TLS cryptographic protocols. Database records are encrypted at rest with strict least-privilege role-based access control (RBAC).

6. Your Data Protection Rights

Under GDPR, CCPA, and applicable data privacy statutes, you have the right to request access to, correction of, or deletion of personal data we maintain about you. To exercise these rights, please contact our data governance team at:

Email: inquiry@synodic-ai.tech