Privacy Policy

1. Who we are

Synlumex AI ("Synlumex", "we", "us", or "our") is a software product company that builds enterprise AI products, including Synlumex Invoice AI and Synlumex HR. This Privacy Policy explains how we handle personal data when you visit our websites, sign up for an account, or use our services.

2. Data we collect

We collect the following categories of personal data:

• Account data — name, work email, company, role, and credentials you provide when creating a Synlumex AI account.
• Customer content — data you or your organization upload into our products, including invoices, vendor records, candidate profiles, and related documents.
• Usage data — logs, product events, device and browser information, and IP address used to operate, secure, and improve the service.
• Communications — messages you send us through contact forms, email, or support channels.

3. How we use data

We use personal data to:

• Provide, secure, and operate our products and services.
• Authenticate users and enforce access controls.
• Detect and prevent fraud, abuse, and security incidents.
• Improve product performance, reliability, and accuracy.
• Communicate with you about your account, service issues, and updates.
• Comply with legal and regulatory obligations.

We do not sell personal data. We do not use customer content to train foundational AI models, and we do not share customer content with third parties for their own marketing purposes.

4. Legal bases (EEA/UK)

Where GDPR or UK GDPR applies, we process personal data on the following legal bases: performance of a contract, our legitimate interests in operating and securing our services, compliance with legal obligations, and where required, your consent.

5. Sharing and subprocessors

We share personal data only with trusted subprocessors that help us operate our services (for example, cloud infrastructure, email delivery, error monitoring, and payment processing). Subprocessors act on our instructions under written data processing agreements. A current list is available on request via privacy@synlumexai.com.

6. International transfers

Personal data may be processed in the United States, the European Union, and other regions where our subprocessors operate. Where required, we rely on European Commission Standard Contractual Clauses and equivalent safeguards to protect data during international transfers.

7. Data retention

We retain personal data for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Customer content is retained per your workspace configuration and is deleted or returned within a reasonable period after account termination.

8. Security

We apply administrative, technical, and organizational safeguards to protect personal data — including encryption in transit and at rest, role-based access controls, tenant isolation, least-privilege engineering access, and continuous monitoring. See our Security page for details.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. You can exercise these rights by contacting privacy@synlumexai.com. If you are a user of a Synlumex AI product under an organization's account, we may direct your request to the organization acting as data controller.

10. Cookies

We use a small number of strictly necessary cookies for authentication and service reliability, and privacy-respecting analytics to understand how our website is used. You can control non-essential cookies via your browser settings.

11. Children

Our services are intended for use by organizations and business users. They are not directed to children under 16, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and, where changes are material, provide additional notice through the product or by email.

13. Contact

For any privacy questions or requests, contact us at privacy@synlumexai.com.