Privacy Policy

1. Introduction

At Synx, we are committed to protecting your privacy and ensuring the security of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management platform.

By using Synx, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our service:

2.1 Account Information

When you create an account, we collect your email address, name, and any other information you choose to provide. This information is used to create and manage your account and to communicate with you about our service.

2.2 Financial Data

To provide our financial management services, we collect financial data from your connected bank accounts through our integration with Plaid, a third-party financial data aggregator. This includes:

• Account balances and transaction history
• Account names and types (checking, savings, credit cards)
• Merchant names and transaction descriptions
• Transaction amounts and dates

This data is collected in read-only mode. We do not have the ability to initiate transactions or modify your accounts.

2.3 Usage Data

We automatically collect information about how you interact with our service, including pages visited, features used, and time spent on the platform. This helps us improve our service and user experience.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our financial management services
• Process transactions and categorize your spending
• Generate insights, reports, and financial summaries
• Send you service-related communications and updates
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms of service

We do not sell, rent, or share your personal or financial information with third parties for their marketing purposes.

4. Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Financial data stored in our database is encrypted at rest using AES-256 encryption.
• Read-Only Access: Our integration with Plaid provides read-only access to your financial accounts. We cannot initiate transactions or modify your accounts.
• Access Controls: We use authentication and authorization controls to ensure only authorized personnel can access your data.
• Regular Security Audits: We conduct regular security assessments and updates to protect against vulnerabilities.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to using commercially reasonable means to protect your data.

5. Data Sharing and Third-Party Services

We share your information only in the following circumstances:

• Plaid: We use Plaid to securely connect to your financial institutions. Plaid's use of your information is governed by their Privacy Policy.
• Supabase: We use Supabase for authentication and database services. Supabase's use of your information is governed by their Privacy Policy.
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Your Rights and Choices

You have the right to:

• Access and review your personal information
• Update or correct inaccurate information
• Request deletion of your account and associated data
• Disconnect bank accounts at any time
• Opt out of non-essential communications

To exercise these rights, please contact us at the email address provided in the Contact section below.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our service after such changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@synx.app