Privacy Policy

1. Introduction

Synthetic AI (synthetic.actor) is operated by Jurij Malovrh ("we", "us", "our"). We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

2.1 Account Information

When you sign up through Clerk (our authentication provider), we receive:

• Email address
• Name (if provided)
• Profile picture (if provided)
• Unique user identifier

2.2 Content You Upload

• Reference images for AI character creation
• Prompts and text inputs for image generation
• Character profiles and configuration data

2.3 Generated Content

• AI-generated images created through the service
• Metadata associated with generations (model used, resolution, timestamps)

2.4 Usage & Analytics Data

• Feature usage patterns (which tools you use, how often)
• API consumption metrics (token counts, credit usage)
• Page views and navigation patterns
• Device type, browser, and general location (country-level)
• Session recordings (anonymized interactions for UX improvement)

Analytics are collected via PostHog. You can opt out of analytics tracking by enabling "Do Not Track" in your browser settings or using an ad blocker.

2.5 Payment Information

We do not directly collect or store credit card numbers, bank details, or other payment credentials. All payment processing is handled by Polar (polar.sh) as our Merchant of Record. Polar's privacy policy applies to payment data. We receive from Polar:

• Subscription status and plan type
• Polar customer ID (for linking payments to your account)
• Transaction confirmations (purchase amounts, dates)

3. How We Use Your Data

• Provide the service: Generate images, manage characters, process credits
• Process payments: Manage subscriptions and credit purchases via Polar
• Improve the product: Understand feature usage, fix bugs, optimize performance
• Communicate: Send service-related emails (subscription confirmations, important updates)
• Prevent abuse: Detect and prevent fraudulent or abusive use of the service

We do not sell your personal data to third parties. We do not use your uploaded images or generated content to train AI models.

4. Third-Party Services

We use the following third-party services that may process your data:

5. Data Storage & Security

• App data is stored in Convex's cloud infrastructure (US-based servers)
• Authentication is handled by Clerk with industry-standard encryption
• All data in transit is encrypted via HTTPS/TLS
• We do not store raw payment information — this is handled entirely by Polar
• Uploaded images and generated content are stored in Convex's file storage system

6. Data Retention

• Account data: Retained while your account is active. Deleted upon request.
• Generated images: Stored until you delete them or delete your account.
• Usage records: Retained for billing accuracy and analytics. Anonymized after account deletion.
• Analytics data: Retained according to PostHog's data retention policies (typically 12 months).

7. Your Rights (GDPR & International)

Regardless of where you are located, you have the following rights:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to data processing for analytics or marketing purposes
• Restriction: Request that we limit how we process your data

To exercise any of these rights, contact support@synthetic.actor. We will respond within 30 days.

8. Cookies & Tracking

Synthetic AI uses the following types of cookies and local storage:

• Essential cookies: Authentication session tokens (Clerk). Required for the service to function.
• Analytics cookies: PostHog tracking cookies for product improvement. You can opt out via browser "Do Not Track" settings or ad blockers.
• Local storage: User preferences and cached app state for performance.

We do not use advertising cookies or share data with advertising networks.

9. Children's Privacy

Synthetic AI is not intended for use by individuals under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us for immediate removal.

10. International Data Transfers

Your data may be processed in countries outside your own (including the United States) through our service providers. We ensure appropriate safeguards are in place through our providers' compliance with applicable data protection regulations.

11. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact

For privacy-related questions or to exercise your data rights:

Email: support@synthetic.actor
Data Controller: Jurij Malovrh
Website: synthetic.actor