Privacy Policy

1. Who We Are

This Privacy Policy explains how Saynovo, a product of SyntroAI ("Saynovo", "we", "us", "our"), collects, uses, shares, and protects personal information when you visit saynovo.com, create an account, connect a Google Business Profile, generate and edit a website, or publish a site on your own domain. For questions or requests about your data, email [email protected].

2. Information We Collect

Information you provide directly:

• Account information - your email address and basic profile details when you create a Saynovo account. Sign-in is by emailed link; we do not store passwords.
• Business details - the business name, address, phone number, hours, services, photos, and other content used to build and publish your website, whether you enter it yourself, import it, or it is drawn from your connected Google Business Profile.
• Edit instructions - the prompts and messages you send to the Saynovo editor when you talk to your site to change it, along with the resulting versions of your site content.
• Subscription and billing details - your plan, billing email, and payment records. Payments are processed by Stripe; we never receive or store your full card number.
• Messages and requests - support emails and service requests you submit.

Information from Google Business Profile:

When you choose to connect your Google Business Profile, you authorize Saynovo through Google's official sign-in to read profile information such as your business name, address, phone number, hours, categories, description, reviews, and photos. We use this information only to generate, populate, and keep your website current, and to operate features you ask for. We request the narrowest access needed and you can disconnect at any time, as described in Section 9.

Google Limited Use disclosure. Saynovo's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely, this means we (1) use Google Business Profile data only to provide and improve the features you asked for - generating and maintaining your website; (2) do not transfer that data except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or asset sale with notice to you; (3) do not use it for serving advertisements; and (4) do not allow humans to read it, except with your consent for support you request, to comply with law, for security, or where the data has been aggregated and anonymized. We do not sell Google user data, and we do not use it to train AI or machine-learning models.

Information from visitors to your published site:

When you publish a website with Saynovo, visitors to that site may submit information through it, for example by using a contact or quote form. For that visitor data, you are the controller and Saynovo acts as your service provider or processor. Requests from a visitor about their data should be directed to the business that operates the site; we will assist that business in honoring such requests.

Information collected automatically:

• Essential cookies - a session cookie to keep you signed in. We do not use third-party advertising cookies.
• Logs - standard server logs (IP address, browser type, pages requested) used for security and troubleshooting.
• Preferences - settings such as theme choice, stored in your browser.

3. How We Use Information

• to provide, operate, host, and secure the Saynovo service, your account, and your site;
• to generate a website from your business details and your connected Google Business Profile;
• to apply the changes you request when you talk to your site in the editor;
• to publish your site on your own custom domain and provision and renew SSL for it;
• to process subscriptions, deliver receipts and billing notices, and provide support;
• to send service notices, and, with your consent or as otherwise permitted by law, product updates you have asked for;
• to comply with legal obligations and enforce our terms.

4. AI Processing and Edit Prompts

Saynovo uses AI to generate your website and to make the edits you request when you talk to your site. To do this, some content - such as your business details and your edit instructions (the prompts you speak or type) - is sent to third-party AI model providers (currently Anthropic) to generate the site and changes. We send only what is needed for the feature to work. We do not use your personal information or your site content to train our own AI models, and our API-based providers do not train their models on this data under the terms of our agreements with them.

We retain your edit prompts and the related processing logs for a default window of 90 days so we can apply your changes, show you your edit history, troubleshoot, and protect against abuse, after which they are deleted or anonymized on a rolling basis. You can delete this data sooner by deleting your account, as described in Section 9.

5. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only with:

• Service providers (sub-processors) that help us operate, under contracts limiting their use of the data: Stripe (payments), Anthropic (AI processing), our hosting and custom-domain infrastructure providers (for site hosting and SSL), our managed database host, our source-repository host, and email delivery providers. Our current list is published at Sub-processors;
• Google - only as needed to read the profile data you authorized when you connect your Google Business Profile;
• The public - content you choose to publish on your website is, by its nature, public once the site is live on your domain;
• SyntroAI - Saynovo is a SyntroAI product and shares infrastructure and staff with its parent. If you engage SyntroAI to expand your site into custom software, information needed for that engagement is shared internally for that purpose;
• Legal and safety - when required by law, legal process, or to protect rights, safety, and the integrity of our services;
• Business transfers - in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Your Website and Its Source

Saynovo is a hosted service. We build, host, and maintain your website as a platform asset on your behalf; you do not receive or download the underlying source code. You retain ownership of the business content you provide and publish (such as your text, photos, and logo). If you later engage SyntroAI to expand your site into custom software, that is a separate engagement under its own agreement.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this policy:

• Account and site data - for the life of your account and subscription, and deleted when you delete your account as described in Section 9;
• Edit prompts and processing logs - for a default rolling window of 90 days, after which they are deleted or anonymized;
• Google Business Profile data - retained only while your profile stays connected; when you disconnect it, the data derived from it is purged from your site as described in Section 9;
• Billing records - retained as required for tax, accounting, and legal obligations even after account deletion;
• Server and security logs - retained for a limited rolling window (default 90 days) for security and troubleshooting.

If you cancel without deleting your account, we retain your data for a reasonable wind-down period and then delete or anonymize it, except where we must keep records to meet a legal obligation.

8. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, SSL on published sites, access controls, signed sign-in links, and secrets kept out of our database. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you and regulators as required by law.

9. Your Rights, Deletion, and Disconnecting Google

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. United States state privacy laws (such as the CCPA/CPRA) and the GDPR/UK GDPR may give you additional rights, including the right not to be discriminated against for exercising them and the right to complain to your local supervisory authority.

Delete my account and all data (self-service).

You can delete your account and all of your data yourself, without contacting us, from your account settings using the "Delete my account and all data" action. When you confirm it, we revoke any connected Google authorization, take down and delete your published site, and delete your account, business details, generated site content, edit prompts, and associated logs from our active systems. We complete this deletion promptly and in any case within 30 days, except for the limited records we are legally required to keep (such as billing and tax records) and routine backups, which are purged on their normal rolling cycle. This action is permanent and cannot be undone.

Disconnect Google Business Profile (delete on disconnect).

You can disconnect your Google Business Profile at any time from your account settings, or from your Google account's connected-apps controls. When you disconnect from within Saynovo, we revoke the OAuth token and purge the data derived from your Google Business Profile from your site and our active systems; your site keeps only the content you have entered or edited yourself, which you can change or remove. Disconnecting stops all further access to that profile.

To exercise any other right, or if you need help, email [email protected]. We will verify your request and respond within the time required by applicable law. Where we hold visitor data as a processor for one of our customers, we will refer the request to that customer and assist them in responding. Marketing emails we send include an unsubscribe link; service emails needed to operate your account and site cannot be opted out of while your account is active.

10. International Transfers

We process data in the United States and other countries where our service providers operate. If you access the service from outside those countries, your information will be transferred to and processed in them, which may have different data protection laws than your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

11. Children

Saynovo is for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date, and for significant changes affecting active accounts we will provide notice by email or in the product.

13. Contact

Saynovo, a product of SyntroAI
Email: [email protected]