Privacy Notice

1. Who we are

Synthaveil Ltd ("Synthaveil", "we", "us") is the controller of the personal data described in this notice. We are registered in England and Wales under company number 17375631, with our registered office at First Floor, Inc, Kings Road, Bury St. Edmunds, England, IP33 3DE. Our ICO registration number is C2019845.

For anything about your personal data, email policies@synthaveil.com.

This notice covers this website. Personal data processed inside the Synthaveil service on behalf of our customers is covered by our agreements with those customers.

2. What we collect, why, and our lawful basis

What	Why	Lawful basis
Waitlist and early access: your email address and, where you give them, your name, the products you are interested in and when you would like to try them	To hold your place, confirm your address and contact you about access	Your consent
Launch notification: your email address	To tell you when Synthaveil launches	Your consent
Beta sign-up: your name, work email and your answers to six setup questions	To check it will work on your setup, hold your beta place and email you about it and the live sessions	Your consent
Beta usage notice: a record that you were told we count how much you use Synthaveil during the beta, and when	To show what you were told, if anyone asks	Our legitimate interest in keeping an accurate record
Live session booking: the session you pick, kept with your sign-up, and your name and email address, passed to Zoom when we invite you	To invite you to the session and send your joining link	Your consent, given when you pick a session
Data Exposure Score: your answers and, if you ask for your result by email, your email address	To work out your score and send it to you	Your consent
Data Exposure Score, combined: answers from everyone who took it, counted together	To understand which situations people report most	Our legitimate interest in understanding demand for our product
Messages you send us	To reply to you	Our legitimate interest in responding to you
Complaints and data requests	To handle them	Our legal obligation
Error reports: when a page or form on this site breaks, the error, the address of the page with any personal link codes removed, and your type of browser. Email addresses are removed from the report and your IP address is not sent. Nothing is sent while the site works normally, and nothing is stored on your device, so this runs whatever you choose in the cookie banner.	To find and fix faults quickly	Our legitimate interest in keeping our website working
Visit counts: the page you visited, the website that sent you, your country and your type of device, counted without cookies. Pages that carry your own details, such as your score report, are never counted. Choosing "Decline" in the cookie banner stops this.	To see which pages people read and how they find the site	Our legitimate interest in understanding and improving our website
Session recording, only if you choose "Allow": how you move around the site	To improve the site	Your consent (see the Cookie Policy)

You do not have to give us any of this. Without an email address we cannot hold your place on the waitlist or send you your score.

Your Data Exposure Score is calculated automatically. It is information for you. We do not use it to make decisions about you.

3. Who handles it for us

We share personal data only with the providers who host, store or send it for us, and only for the purposes above. We do not sell personal data, and we do not share it with advertisers or with any other third party not listed below, except where the law requires us to.

Provider	What they do	Where your data is processed
Vercel	Hosts this website and processes the forms you submit	Forms are processed in Ireland (EU). Vercel may process request logs in the United States of America.
Convex	Stores waitlist, early access, beta and score records	Ireland (EU)
Resend	Sends our emails to you	Emails are sent from Ireland (EU). Resend keeps its records of the emails it sends in the United States of America.
IONOS	Hosts our email inboxes, so receives the messages, requests and complaints you send us	Europe
Plausible Analytics	Counts visits without cookies. It does not store your IP address.	European Union
Sentry	Tells us when part of this website breaks, without your name, email address or IP address	European Union (Germany)
Microsoft Clarity	Session recording, only if you choose "Allow"	United States of America
Zoom	Runs our live sessions and sends your joining link, only when we invite you to one	United States of America

Vercel, Convex, Resend, Sentry, Microsoft and Zoom are companies based in the United States of America, and may access or process data there. Where personal data is transferred outside the UK, we rely on the safeguards UK law provides for those transfers: UK adequacy regulations (including the UK–US data bridge, where the provider is certified under it) or the UK International Data Transfer Addendum.

Plausible Analytics is a company based in the European Union. It processes and stores visit counts in the European Union. Sentry stores error reports in the European Union. The UK's adequacy regulations cover transfers there.

4. How long we keep it

• Waitlist, early access, beta and launch notification records: until you ask us to remove you, or twelve months after the product launches, whichever is sooner.
• Data Exposure Score answers linked to your email: for the same period.
• Messages, complaints and data requests: up to two years after the matter is closed.
• Error reports: 90 days at most.
• Combined score counts: these relate to no identifiable person and may be kept indefinitely.

5. Your rights

You have the right to:

• ask for a copy of your personal data;
• ask us to correct it;
• ask us to delete it;
• ask us to restrict how we use it;
• object to how we use it;
• receive your data in a portable format;
• withdraw your consent at any time. This does not affect what we did before you withdrew it;
• complain to the Information Commissioner's Office (ico.org.uk).

You can see or delete your data yourself on the data request page. For anything else, email policies@synthaveil.com. We respond within one month.

6. Complaints

If you are unhappy with how we have handled your personal data, use our complaint form or email policies@synthaveil.com. We acknowledge every complaint within 30 days and tell you the outcome.

7. Changes

We update this notice when what we collect, who handles it or why changes. The version on this page is the one that applies.