1. Data Controller

Synerva ("we", "us") operates the service at https://synerva.app. We are the data controller for the personal data we collect from users of our platform. For data collected via your launch pages (e.g., waitlist signups), you are the data controller and we act as a processor.

2. Data We Collect

Account data

When you register: name, email address, and password (stored hashed). We may also store your profile image if you connect a third-party account.

Payment data

Payment processing is handled by Stripe. We do not store full card numbers. We store Stripe customer and subscription IDs to manage your billing.

Usage data

We collect information about how you use the Service: projects created, pages published, and interactions with the editor. We use analytics (Umami) to understand usage; this may include IP address, browser type, and pages visited. Umami is privacy-focused and does not use cookies for tracking by default.

Waitlist data

When visitors sign up on your launch pages, we store their email addresses and associate them with your project. You are the controller of this data; we process it on your behalf.

3. How We Use Your Data

We use your data to:

Provide, maintain, and improve the Service
Process payments and manage subscriptions
Authenticate you and manage your account
Send transactional emails (e.g., password reset, billing)
Respond to support requests
Comply with legal obligations
Analyze usage to improve the product

4. Legal Basis (GDPR)

If you are in the European Economic Area, we process your data based on:

Contract — to provide the Service you requested
Legitimate interests — to improve the Service, prevent fraud, and communicate
Legal obligation — where required by law
Consent — where we ask for it explicitly (e.g., marketing emails)

5. Data Sharing

We share data with:

Stripe — payment processing (US, Privacy Shield / SCCs)
Hosting provider — to run the Service (data may be stored in EU or US)
Analytics (Umami) — aggregated usage statistics

We do not sell your personal data. We may disclose data if required by law or to protect our rights.

6. Data Retention

We retain account data for as long as your account is active. After account deletion, we remove your data within a reasonable period, except where we must retain it for legal or legitimate business purposes. Waitlist data is retained until you delete the project or your account.

7. Your Rights

Depending on your location, you may have the right to:

Access — obtain a copy of your data
Rectification — correct inaccurate data
Erasure — request deletion of your data
Restriction — limit how we process your data
Portability — receive your data in a structured format
Object — object to processing based on legitimate interests
Withdraw consent — where processing is based on consent

To exercise these rights, contact us at julien.milants@gmail.com. You may also lodge a complaint with your local data protection authority.

8. International Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards (e.g., Standard Contractual Clauses) where required by law.

9. Children

The Service is not intended for users under 16. We do not knowingly collect data from children. If you believe we have collected such data, please contact us.

10. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy here and updating the "Last updated" date.

11. Contact

For privacy-related questions or to exercise your rights, contact us at julien.milants@gmail.com.