Privacy Policy

Synthefai is committed to protecting your privacy. We created this Privacy Policy ("Policy") to give you confidence as you visit and use the Services. This Policy covers how we collect, use, store, and share your information which on its own, or in combination with other information, may be used to identify you as an individual ("Personal Data"). The provisions of our Terms of Service (the "Terms") apply to this Policy as well. Do not hesitate to contact us at privacy@doreveal.com if you have any questions or want to discuss this Policy. Capitalized terms used but not defined herein shall have the meanings given to them in the Terms.

This Policy also describes our practices related to information of individuals with whom we communicate for marketing or promotional purposes but who may not otherwise use or access the Software (the "Marketing Recipients"). By using the Services and agreeing to this Policy, or by agreeing to this Policy as a Marketing Recipient, you consent to the privacy practices described in this Policy.

We use your data to provide and improve our Services. By using our Services, you agree to the collection and use of information in accordance with this Policy.

Information Collection and Use

We collect several different types of Personal Data for various purposes in order to provide and improve our Service for you.

Types of Data Collected

Personal Data

While using our Services, we may ask you to provide us with the following Personal Data:

• Email address
• First name and last name
• Location Data (as defined below)
• Usage Data
• Device ID

If you are a Marketing Recipient we may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link or emailing us at privacy@doreveal.com.

Usage Data

We may also collect information that your browser sends whenever you visit our Service or when you access Service by or through a mobile device ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. When you access Service with a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

Location Data

We may use and store information about your location if you give us permission to do so ("Location Data"). We use this data to provide features of our Service, to improve and customize our Service. You can enable or disable location services when you use our Service at any time by way of your device settings.

Other Data

While using our Services, we may also collect information that, on its own, is not Personal Data, but when combined with your Personal Data, could become Personal Data. Such information includes:

• Language
• Country
• Region (state)
• City
• DMA (Designated Market Area)
• Device Type
• OS
• Carrier
• Device ID

Cookies

We use cookies and similar tracking technologies to track the activity on our Service and we hold certain information. Our cookies do not collect Personal Data. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

• Session Cookies: We use Session Cookies to operate our Service.
• Preference Cookies: We use Preference Cookies to remember your preferences and various settings.
• Security Cookies: We use Security Cookies for security purposes.

Use of Data

Synthefai uses the collected data for various purposes:

• To provide and maintain our Services;
• To notify you about changes to our Service;
• To allow you to participate in interactive features of our Service when you choose to do so;
• To provide customer support;
• To gather analysis or valuable information so that we can improve our Service;
• To monitor the usage of our Service;
• To detect, prevent and address technical issues;
• To fulfill any other purpose for which you provide it;
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
• To provide you with notices about your account and/or subscription, including expiration and renewal notices, email-instructions, etc.;
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information;
• In any other way we may describe when you provide the information;
• For any other purpose with your consent.

Retention of Data

We will store your Personal Data for as long as it is needed to provide the Services. However, if required by applicable law, we may retain your Personal Data for such period as may be required by such law. To continue to provide an effective service, we may store non-Personal Data perpetually and may anonymize your Personal Data and store that anonymized information perpetually.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

Transfer of Data

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

Where personal data is transferred outside the European Union or the United Kingdom, including to the United States, we ensure that such transfers are subject to appropriate safeguards as required by applicable data protection laws. These safeguards include reliance on Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-US Data Privacy Framework. We rely on our sub-processors to implement and maintain these safeguards through contractual commitments and appropriate technical and organizational measures.

If you are located outside the United States, please note that your information may be processed in the United States or other jurisdictions where we or our service providers operate.

Disclosure of Data

Information Shared By You Through The Services

You may, now or in the future, be able to choose to voluntarily share Personal Data collected through the Services.

Our Personnel

To be able to effectively provide you with the Services, and to improve the functionality of the Services, we may disclose your Personal Data to our personnel, including our employees, contractors, and agents, to the extent that such persons or entities have a need-to-know such information in furtherance of the Services.

Our Vendors

We work with third-party service providers to provide product analytics, customer analytics, website, application development, hosting, maintenance, data processing, customer service, payment processing, and other services for us in furtherance of the Services. These third parties may have access to or process your Personal Data as part of providing those services for us. However, we limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions.

Sale of Company or Assets

In the event that we sell all or substantially all of our company or its assets, including the Personal Data collected through our Services, we may transfer your information to the acquiring company.

Other Third Parties

In addition to our practices described above, we may share your Personal Data if we have a good-faith belief that such action is necessary to:

• Comply with the law;
• Protect and defend the rights or property of Synthefai;
• Prevent an emergency involving danger of death or serious physical injury to any person.

Security of Data

We use reasonable efforts to secure your Personal Data and to prevent the loss, misuse, and alteration of the information that we obtain from you. However, loss, misuse, and alteration may occur despite our efforts to protect your Personal Data. We are not responsible to our users or to any third party due to any such loss, misuse, or alteration.

Use of Data in AI Models

Synthefai does not use customer data or Personal Data to train artificial intelligence (AI) models. Additionally, subprocessors and third-party service providers engaged by Synthefai are contractually prohibited from using customer data to train AI models or for any purpose beyond the agreed-upon services.

Your Data Protection Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access – to request a copy of the personal data we hold about you

• Right to rectification – to request correction of inaccurate or incomplete data

• Right to erasure – to request deletion of your personal data, subject to legal obligations

• Right to restriction of processing – to request that we limit processing of your data in certain circumstances

• Right to data portability – to receive your personal data in a structured, machine-readable format, where applicable

• Right to object – to object to processing based on legitimate interests or for direct marketing

• Right to withdraw consent – where processing is based on consent, at any time

• Rights related to automated decision-making – including profiling, where applicable

• Right to lodge a complaint – with your local data protection authority

To exercise any of these rights, please contact us at privacy@doreveal.com. We may need to verify your identity before responding. We will respond to your request within the timeframes required by applicable data protection laws.

California Residents

Synthefai does not sell or share personal information as those terms are defined under the California Consumer Privacy Act (CCPA). Based on the nature of our business and applicable statutory thresholds, DoReveal is not currently subject to the CCPA.

Nevertheless, we are committed to respecting user privacy. If you have questions about the personal information we collect or wish to request access, correction, or deletion of your information, you may contact us at privacy@doreveal.com.

Links to Other Sites

Our Services may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Children's Privacy

Our Services are not intended for children under 16 years of age. No one under age 16 may provide any Personal Data to us via the Services or otherwise. If we learn we have collected or received Personal Data from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at privacy@doreveal.com.

Customer End User Data

Synthefai acts as a data controller or data processor depending on the context in which personal data is processed, as described below.

For clarity under applicable data protection law (including the EU General Data Protection Regulation "GDPR"), the roles we play depend on the context and type of personal data involved. Where we decide the purposes and means of processing certain personal data (such as account information, billing information, analytics, support interactions, and website usage), we act as a data controller. Where we process personal data on behalf of and under the documented instructions of our customers (such as customer end-user data submitted through the Services), we act as a data processor. For more detail on the distinction between these roles and the types of data involved, please see our internal GDPR Role Determination documentation or contact us at privacy@doreveal.com.

If you are a Customer End User and wish to access, amend, or delete your personal data processed through our customers’ use of the Services, you should contact the relevant customer directly, as they act as the data controller for such processing.

Customer Privacy Responsibilities

Synthefai provides tools for transcription, synthesis, redaction, and related services, but does not determine how customers collect, process, or use personal data. Customers are solely responsible for ensuring their use of the Services complies with privacy, data protection, and consent requirements.

Customer responsibilities include:

• Prevent re-identification of individuals from synthesized or derived datasets.
• Provide participants with an opt-out for sharing non-sensitive data.
• Obtain explicit, opt-in consent for any processing of sensitive data.
• Respect participants’ right to withdraw consent at any time.
• Obtain verifiable parental or guardian consent when processing data from children.
• Exercise special care when handling data from vulnerable individuals.

Changes to This Policy

We may update this Privacy Policy from time to time, including when our products, data practices, or legal obligations change. The "Last updated" date at the top of this Policy indicates when it was most recently revised. Where required by applicable law, we will provide additional notice of material changes.

Privacy Contact

For privacy-related inquiries, GDPR rights requests, and data protection matters, contact our GDPR Responsible Person at privacy@doreveal.com.

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the GDPR.