Privacy Policy

1. Overview

EthrylSynth is designed to minimize data retention while providing AI-powered media transformation services. This Privacy Policy describes what data we process, why we process it, and how it is handled throughout its lifecycle.

2. Data We Process

a. User-Provided Content

• Media files uploaded for processing
• Generated outputs resulting from transformations

b. Authentication and Account Data

• Email address
• Account identifiers
• Session and authentication tokens
• Login timestamps

c. Operational and Audit Metadata

• Job identifiers and execution phases
• Timestamps and execution status
• Credit usage and billing records
• Cancellation and audit logs

EthrylSynth does not use user content or personal data for training, advertising, profiling, or marketing purposes.

3. Purpose of Processing

Data is processed strictly for the following purposes:

• Executing requested media transformations
• Delivering generated outputs to users
• Maintaining system integrity and reliability
• Authenticating users and managing sessions
• Resolving disputes, abuse reports, or billing issues
• Complying with applicable legal obligations

4. Cookies and Session Storage

EthrylSynth uses cookies and similar technologies strictly for functional purposes, including:

• Maintaining login sessions
• Enabling automatic sign-in
• Providing a seamless user experience

These cookies are not used for advertising, tracking, or behavioral profiling.

5. Third-Party Services

EthrylSynth uses third-party service providers solely to deliver core functionality, including authentication, cloud storage, and AI execution.

Authentication is handled by trusted providers such as Supabase and Google. EthrylSynth does not store user passwords directly.

These providers are contractually restricted from using data for purposes unrelated to providing their services.

6. Retention and Deletion

User content, including uploaded media, generated outputs, and execution status data, is retained temporarily and automatically deleted using infrastructure-level lifecycle rules.

Retention periods are intentionally limited and typically do not exceed 24 hours, unless extended retention is required for legal, security, or dispute resolution purposes.

Operational metadata such as billing records and audit logs may be retained longer to satisfy legal and compliance requirements.

Deletion is automated and time-bounded; it is not instantaneous.

7. No Data Sales

EthrylSynth does not sell, rent, or trade user data.

We do not share user data with third parties for advertising or marketing purposes.

8. Lawful Disclosure

We may disclose information if required to do so by law, court order, or valid legal process, or where necessary to protect the rights, safety, or integrity of the Service.

9. Changes to This Policy

This Privacy Policy may be updated from time to time. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.