Privacy Policy

1. Introduction

This Privacy Policy explains how AINAD LTD (“we”, “us”, “our”) collects, uses, discloses, and safeguards your personal data when you use Syntropicity (the “Service”), an AI-powered digital search tool that returns cited, synthesised answers from live web sources.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Data Controller

The data controller responsible for your personal data is:

AINAD LTD
Registered in England and Wales
Email: privacy@syntropicity.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Account data: name, email address, password (hashed), and authentication identifiers.
• Usage data: search queries you submit, generated answers, citation interactions, search history, and feature usage.
• Billing data: subscription plan, billing address, and payment metadata processed via Stripe (we do not store full card details).
• Technical data: IP address, browser type, device identifiers, operating system, time zone, and access logs.
• Communications: any correspondence you send to us by email or support form.

4. How We Use Your Data

We use your personal data on the following lawful bases under UK GDPR:

• Performance of a contract — to create and manage your account, process searches, deliver answers, and administer your subscription.
• Legitimate interests — to improve and secure the Service, prevent fraud and abuse, conduct analytics, and communicate service updates.
• Consent — for optional marketing communications and non-essential cookies, where applicable.
• Legal obligation — to comply with applicable laws, tax obligations, and lawful requests from authorities.

5. AI Processing of Search Queries

When you submit a query, your input is transmitted to third-party large language model providers (including Anthropic) and to web search providers in order to generate a cited answer. We do not sell your queries. We do not use your queries to train third-party foundation models, and we contractually require our AI providers not to use your data for model training.

We may retain anonymised or aggregated query data for service quality, abuse prevention, and analytics.

6. Sharing Your Data

We share personal data only with trusted processors who act on our instructions:

• Cloud hosting and database providers
• AI model providers (e.g. Anthropic)
• Web search and indexing providers
• Payment processors (Stripe)
• Email and communications providers
• Analytics and error-monitoring providers

We do not sell your personal data. We may disclose data where required by law, court order, or to protect our legal rights.

7. International Transfers

Some of our processors are based outside the United Kingdom. Where personal data is transferred outside the UK, we rely on adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Account data: for the lifetime of your account, plus 30 days after deletion.
• Search history: until you delete it or close your account.
• Billing records: 6 years, as required by HMRC.
• Server logs: typically 30–90 days.

9. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, email privacy@syntropicity.com. You can contact the ICO at ico.org.uk or on 0303 123 1113.

10. Cookies

We use strictly necessary cookies to operate the Service (authentication, session management). Non-essential cookies for analytics or marketing are only set with your consent in accordance with PECR.

11. Security

We apply industry-standard technical and organisational measures, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No system is perfectly secure; please use a strong, unique password.

12. Children

The Service is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notice. The “Last updated” date at the top reflects the latest version.

14. Contact

Questions about this policy? Email privacy@syntropicity.com.