1. Scope
This Policy applies to personal information we collect through Synorb's website, Studio, APIs, MCP servers, dashboards, credential flows, support channels, billing flows, and related services. It does not apply to third-party websites, services, sources, integrations, identity providers, payment processors, or customer applications that we do not control.
If you use Synorb through your employer or another organization, that organization may control or administer your account and may receive information about your use of the Service.
2. Information We Collect
We collect information you provide, information generated by your use of Synorb, and information from third parties needed to provide the Service. This may include:
- Account information, such as name, email address, company, role, password-related data, organization membership, authentication state, and account settings.
- Credential and access information, such as API keys, MCP tokens, key metadata, scopes, quotas, rate limits, and related security events.
- Usage information, such as pages visited, endpoints called, MCP tools used, streams requested, manifests returned, timestamps, request identifiers, IP address, user agent, device/browser information, logs, diagnostics, errors, latency, and quota consumption.
- Customer content and instructions, such as prompts, queries, filters, source selections, configuration, Beacon scopes, saved searches, integrations, and support requests.
- Billing information, such as plan, subscription status, invoice metadata, payment status, tax information, and billing contact details. Payment processors may collect payment card or bank details directly; Synorb does not need to store full card numbers.
- Communications, such as emails, support messages, feedback, sales conversations, form submissions, and survey responses.
- Public or source-derived information processed by Synorb to operate the context graph and produce source-backed outputs.
3. How We Use Information
We use information to provide, operate, secure, maintain, debug, monitor, measure, and improve Synorb. This includes authenticating users, provisioning credentials, enforcing quotas and rate limits, returning API and MCP responses, generating or retrieving manifests, operating Studio and dashboards, providing support, billing customers, detecting abuse, preventing fraud, investigating security issues, complying with law, and communicating about the Service.
We may use aggregated or de-identified information to understand product usage, improve reliability, evaluate performance, plan capacity, and develop new features.
5. Public and Source-Derived Data
Synorb's product processes information from public, institutional, corporate, regulatory, marketplace, and other source surfaces to create source-backed graph data and manifests. Source-derived data may include information about people, organizations, places, events, claims, documents, publications, or other matters that appear in source material.
Because Synorb is a context graph and data service, source-derived outputs may be made available to customers through the Service. If you believe Synorb is processing source-derived personal information incorrectly or unlawfully, contact us and include enough detail for us to review the issue.
7. Security
We use administrative, technical, and organizational safeguards designed to protect information. No internet service, API, model, database, or storage system is perfectly secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials, devices, systems, users, agents, and integrations.
8. Retention
We retain information for as long as needed to provide the Service, maintain security and audit logs, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, support customers, and operate the business. Retention periods may vary by data type, account status, plan, source, legal requirement, and operational need.
9. Choices and Rights
You may be able to access, update, export, or delete certain account information through the Service or by contacting us. Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about certain data practices.
We may need to verify your request and may decline or limit requests where permitted by law, including where information is needed for security, legal compliance, billing, fraud prevention, dispute resolution, free expression, public-interest records, source integrity, or operation of the Service.
10. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information to Synorb, contact us.
11. Changes
We may update this Privacy Policy from time to time by posting a revised version. The revised version is effective when posted unless it says otherwise. Your continued use of the Service after the effective date means you acknowledge the updated Policy.
12. Contact
Contact Synorb at team@synorb.com or by mail at Synorb Inc., 101 Hudson Street, Jersey City, NJ 07302.