Privacy, in plain language

This policy applies to the Synlecto web app and the Study Companion browser experience.

Direct-to-student use: Synlecto acts as controller for account, product, and billing data.

Standard institutional deployment: the preferred model is that the university acts as controller and Synlecto acts as processor for student, lecture, and guide data processed within the contracted educational service.

Synlecto may remain an independent controller for limited operational data such as account administration, billing, service security, fraud or abuse prevention, and clearly described product-improvement telemetry.

This page is a plain-language summary. Contact us if you need a formal copy for your records.

Account data: email address, auth provider identifiers, and optional profile fields you choose to add.

Study data: guide metadata, study activity, preferences, and sync status.

Extension usage data: video titles, URLs, and transcript or caption text from supported pages when you generate a guide. The standard lecture workflow retains the generated guide and a cleaned source snapshot where needed for source moments, evidence handling, quality checks, and guide continuity. It does not describe itself as retaining the raw original transcript.

Browser-local study data: if you use Study studio or save reflection notes in a guide, transcript snapshots, pins, checklists, study goals, confidence ratings, notes, short-answer drafts, study-pack export counts, pilot pulse feedback, and lightweight study-coach signals may be stored on your device until you clear them.

Study tracks: if you create a study track, its title, goal, due date, focus note, and linked guide references may be stored on your device first and can also sync to your account when you sign in.

Synced study state: if you are signed in, your selected goal, confidence ratings, unclear concept marks, reflection notes, and practice drafts for a guide can also sync to your account so you can continue on another device. This is separate from transcript storage.

Track concept memory: if you are signed in and use study tracks, Synlecto may store account-level concept rollups for those tracks, such as recurring concept keys, unclear counts, due review timings, mastery state, and links back to the source guides or evidence already in your account. This does not store raw learner notes, raw short answers, track titles, or focus notes in reporting storage.

Evidence units: when a guide has strong enough source support, Synlecto may store a small set of short study excerpts or source moments with honest anchors such as a timestamp or document chunk label. This is not full raw transcript retention.

First-party learning reporting: if you are signed in, we may store privacy-bounded learning activity signals such as guide opens, selected study goals, confidence changes, practice interaction counts, track actions, and evidence or trust metadata for reporting and quality review. We do not store raw notes, raw questions, raw short answers, track titles, or focus notes in that reporting layer.

Billing data: subscription status and Stripe customer IDs. Payment card details are handled by Stripe.

Technical data: device identifiers, IP address, browser signals, and diagnostic logs for security and support.

Provide the service, sync data, and deliver support (contract).

Secure and improve reliability (legitimate interests).

Process payments and meet tax or accounting obligations (legal obligation).

Send product updates or optional analytics only when you opt in (consent). You can opt out at any time.

We do not use automated decision making that produces legal effects.

We use essential cookies to keep you signed in, protect sessions, and remember preferences.

Optional product analytics and marketing cookies are used only when you opt in. First-party learning reporting for signed-in study activity is separate from those optional third-party analytics tools.

You can clear cookies in your browser settings, but some features may not work without them.

Synlecto retains the generated guide and a cleaned source snapshot used to support source moments, evidence, quality checks, and guide continuity.

AI processing: source text is sent only to generate guides. Outputs are stored as guides, study materials, and cleaned source snapshots where needed for source checking and guide continuity.

Synlecto does not describe itself as retaining the raw original transcript in the standard lecture workflow.

Synlecto does not describe itself as retaining the raw media file in the standard lecture workflow.

Browser-local transcript snapshots, reflection notes, study-pack signals, and practice drafts: if you open Study studio, save guide reflection notes, export a study pack, answer a pilot pulse card, or start short-answer practice, that local data may remain on your device until you delete local data or remove that guide locally.

Study tracks store short guide references, titles, goals, dates, and notes. They do not store full raw transcripts.

Prep boards store your own scaffold writing, selected concepts, selected evidence, and linked guide or track context so you can continue assignment planning across devices. They do not store full raw transcripts and do not place raw board text into reporting storage.

Track concept memory stores concept keys, due timings, mastery state, and guide or evidence links derived from your existing guides, review state, and track membership. It does not copy full raw transcripts, raw notes, raw short answers, track titles, or focus notes into reporting tables.

Evidence units store only short excerpts or source moments needed for study support and source checking. They do not keep the full transcript or full uploaded document text on Synlecto servers.

Synced study state on your account does not include full raw transcripts. Signing in does not wipe the local study data already saved on your device.

Logs and error tooling (Sentry): redacted to avoid transcript or student content. We record operational metadata only.

Model training: we do not train models on user content, transcripts, or derived study outputs.

Hosting and storage providers (e.g., Vercel and Supabase).

Payments and subscription management (Stripe).

AI processing providers used to generate guides (e.g., OpenAI).

Error monitoring for reliability (Sentry).

We share the minimum data needed to deliver the service and use data processing agreements where required.

Core application data is hosted in European infrastructure. Institutional sub-processor and transfer details are provided in readiness and contract materials.

Core application data is hosted in European infrastructure.

If any third-party processing falls outside that core hosting footprint, it is disclosed in sub-processor and contract materials.

You can request more details through support.

Generated guides and cleaned source snapshots remain available while the related guide remains in the service, subject to account or institutional lifecycle and any contract-specific retention position.

Local data remains on your device until you delete it. This can include Study studio transcript snapshots, pins, task checklists, saved study goals, confidence ratings, reflection notes, short-answer drafts, study-pack export counts, and stuck-card or pilot pulse signals.

Prep board state remains on your account while the board exists and is deleted when you delete your account. Local board copies on a device are removed when you clear local data on that device.

Synced study state remains on your account until you delete the guide everywhere or delete your account. Local data deletion clears only the browser cache on that device.

Track concept memory remains on your account while the related track exists and is deleted when you delete the track everywhere or delete your account.

First-party learning reporting data remains on your account while it is active and is deleted when you delete your account, but it does not contain raw notes, raw questions, raw short answers, track titles, or focus notes.

Account data is retained while your account is active.

Billing records are retained for statutory accounting periods.

Security logs are retained for limited periods to protect the service.

GDPR rights include access, correction, deletion, restriction, portability, and objection.

You can withdraw consent at any time for optional marketing or analytics.

You have the right to lodge a complaint with the ICO (UK) or your local supervisory authority (EU).

To exercise rights, contact support through Help & feedback. We may ask you to verify your identity.

Synlecto uses authenticated access controls, server-side verification, rate limiting, security headers, and privacy-aware observability.

Sensitive content is not sent into analytics by default.

No method of transmission or storage is 100 percent secure.

Synlecto is not directed to children under 13.

If you are under 16, you should have parent or guardian permission where required by local law.

We may update this policy from time to time. Material changes will be shared in-app or by email.

For privacy questions or deletion requests, contact the Synlecto team at hello@synlecto.com or through Help & feedback.