Legal

Privacy Policy

Last updated 13 October 2026

This Privacy Policy explains how 4N Industries, a business registered in India (GSTIN 07IVUPK1863E1Z3, 4nindustries.org) ("we", "us", "our"), collects, uses, shares and protects personal data when you use Synapsio, including getsynapsio.com, app.getsynapsio.com and the related services, integrations and notifications (the "Service").

It is published in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it (the "DPDP Act"), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. It should be read together with our Terms of Service. Questions: hello@getsynapsio.com.

1. Who is responsible for your data

  1. We are the Data Fiduciary for the personal data of people who sign up for and use Synapsio, such as account owners, team members and people who add notification channels.
  2. Data you put into the Service about others. This includes your customers, staff or the people in your content. We process it on your behalf, as a Data Processor, and only to provide the Service. You are responsible for having a lawful basis for that data and for giving those people any required notice.

2. Personal data we collect

Data you give us

  • Account details: name, email address, company name, profile picture (optional) and password. Passwords are stored only as secure one-way hashes; we can never see them.
  • Team details: email addresses of people you invite, and their roles and client access.
  • Business information: your website, brand details, products, audiences, goals, uploaded files (images, videos, documents, code archives), and the content you create, edit or approve.
  • Notification channels, only if you add them: additional email addresses; your Telegram chat ID (and your bot's token, if you bring your own bot); or your WhatsApp number. Also the messages we send there and the replies you send us.
  • Communications: messages you send to our support or grievance contact.
  • Billing details, when paid plans are billed: billing name, GSTIN (if you give one) and invoices. Card and bank details are collected directly by our payment partner; we do not store full card numbers.

Data from accounts you connect, only when you connect them:

  • Meta (Facebook, Instagram, Meta Ads): the IDs and names of the Facebook Page, Instagram professional account and ad account you choose; access tokens that let us act on your behalf; the posts, comments and ads you publish through Synapsio; and their performance data (such as reach, views, likes, comments, shares, saves, spend, clicks and conversions).
  • X, LinkedIn and YouTube (Google): your account or channel ID, name, username and profile picture; the profile, company Page or channel you choose; access and refresh tokens; and the posts and videos you publish through Synapsio and their results (such as views, likes, comments and shares).
  • GitHub: the names and metadata of repositories you select. Code is read only to make the product videos you ask for; its temporary working copies are deleted within 24 hours.

Data collected automatically

  • Technical and log data: IP address, browser and device type, pages and features used, request times and errors. We use it to run, secure and troubleshoot the Service.
  • Cookies and similar storage: see section 7.

We do not ask for sensitive personal data such as financial account passwords, health or biometric information, and we ask that you do not upload it.

3. How and why we use it

We use personal data only for these purposes:

  1. To provide the Service. This means creating your account, setting up clients and teams, analysing your business, generating content with AI, publishing and scheduling posts, running ads only as you approve them or as your autonomy settings allow, and showing analytics and recommendations.
  2. To act on your connected accounts, within the permissions you grant.
  3. To send you notifications you choose, and to carry out requests you send from a verified notification channel, with the same permissions you have in the app.
  4. To communicate with you about your account, security, billing, changes to the Service and support requests.
  5. To keep the Service secure: preventing fraud, abuse and unauthorised access, and enforcing our Terms.
  6. To meet legal obligations, such as tax and accounting records, responding to lawful requests from authorities, and reporting security incidents.
  7. To improve the Service, using aggregated or de-identified information that does not identify you.

Legal basis. We process your personal data on the basis of your consent, given when you sign up and when you choose to connect accounts or add channels. We also process it for legitimate uses permitted by the DPDP Act: where you have voluntarily provided data for a specified purpose, and where processing is needed to comply with law. You may withdraw consent at any time (section 9). Doing so does not affect processing already carried out, but some features may stop working.

What we never do. We do not sell or rent personal data. We do not use your content or connected-account data for advertising unrelated to the Service, or to train general-purpose AI models.

4. Data from Google, Meta, LinkedIn and X

  1. Data we receive from these platforms is used only to provide the features you use in Synapsio, in line with each platform's terms and developer policies. It is never shared with data brokers or used for unrelated purposes.
  2. Google / YouTube. Synapsio uses YouTube API Services. Synapsio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. You can revoke Synapsio's access at any time from your Google security settings, as well as by disconnecting in Synapsio.
  3. Meta. When you remove Synapsio from your Facebook settings, Meta notifies us and we delete the data we received from Meta about you (see data deletion).

5. Who we share data with

We share personal data only with service providers who help us run the Service, under contracts that restrict them to processing it on our instructions and for that purpose:

  • Hosting and infrastructure: cloud servers and databases (Microsoft Azure), website and app delivery (Vercel or Netlify), and private storage for your images and videos (Cloudflare R2).
  • AI providers, to generate the content you ask for: Anthropic for text; OpenAI for text, only as a backup when our primary provider is unavailable; fal.ai for images; ElevenLabs for voice.
  • Messaging: an email delivery provider (for account and notification emails, and for receiving replies you send us), Meta (WhatsApp Business Platform) and Telegram, for the notifications you turn on.
  • Monitoring: Pydantic Logfire, for performance and error diagnostics. Access tokens, passwords and message contents are kept out of our logs.
  • Payment partners, when paid plans are billed.

We also share data:

  • With the platforms you connect, when you publish or advertise through them. Content you publish there is governed by that platform's own policies.
  • Within your account: team members see the data of the clients they are given access to, according to their role.
  • For legal reasons: with courts, government or law enforcement agencies when required by law, or to protect our rights, users or the public.
  • Business transfers: to a successor in a merger, acquisition or reorganisation, subject to this Policy.

6. Transfers outside India

Some of our providers process data outside India, for example in the United States or the European Union. We transfer data only as permitted under the DPDP Act, and not to any country or territory restricted by the Government of India. We use providers with appropriate security commitments.

7. Cookies and local storage

We use only what the Service needs to work. We do not use advertising or third-party tracking cookies.

  • Sign-in cookies (sAccessToken, sRefreshToken): httpOnly, secure cookies that keep you signed in. They cannot be read by scripts.
  • Signed-in hint (synapsio_signed_in): a non-identifying cookie that lets our website show "Dashboard" instead of "Sign in".
  • Preferences in your browser: your theme, the client you last opened and composer settings. They are stored only on your device.

Blocking these may stop you from signing in or keeping your preferences.

8. How long we keep data

  • Account and business data: while your account is active. After you close it or ask us to delete it, we delete it within 30 days, and it is removed from backups within a further 30 days as they rotate.
  • Connected-account tokens: deleted immediately when you disconnect the account. Notification channel details are deleted when you remove the channel.
  • Messages and replies on notification channels: kept only as long as needed to deliver them and act on replies.
  • Logs and diagnostics: kept for up to 90 days, unless needed longer to investigate a security incident.
  • Billing and tax records: kept for the period required by law, for example under GST law.

When a purpose is complete and you have not asked us to keep data, we delete it, as required by the DPDP Act.

9. Your rights

Under the DPDP Act and other applicable law, you have the right to:

  1. Access a summary of the personal data we process about you and how we process it, and the identities of those we have shared it with.
  2. Correct, complete or update inaccurate or incomplete data. You can do much of this yourself in Settings.
  3. Erase your personal data, unless we must keep it to comply with law. See our data deletion instructions.
  4. Withdraw consent at any time, for example by disconnecting an account, removing a notification channel, or closing your account.
  5. Grievance redressal through our Grievance Officer (section 12).
  6. Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise a right, email hello@getsynapsio.com from the address on your account. We may need to verify your identity, and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

If you live outside India, you may have similar rights under your local law, such as the right to data portability or to object to processing. Contact us and we will help.

10. Security

We follow reasonable security practices and procedures:

  • encryption in transit (HTTPS) everywhere;
  • connected-account and bot tokens encrypted at rest and never shown in the app or sent to your browser;
  • private media shared with platforms only through short-lived signed links;
  • role-based access inside every account;
  • verification of notification channels before they can receive data or act;
  • strict separation between clients;
  • access to production systems limited to authorised personnel.

No system is perfectly secure. If a personal data breach affects you, we will notify you and the relevant authorities, including the Data Protection Board of India and CERT-In, as required by law.

11. Children

The Service is for businesses and people aged 18 or over. We do not knowingly collect personal data of children. If you believe a child has given us data, contact us and we will delete it.

12. Grievance Officer and contact

If you have a question, request or complaint about your personal data or this Policy, contact our Grievance Officer at hello@getsynapsio.com with the subject "Privacy". We will acknowledge your complaint within 24 hours and resolve it within the time required by law, and in any case within 30 days.

13. Changes to this Policy

We may update this Policy from time to time. We will post the new version here and update the date at the top. For material changes, we will notify you by email or in the app before they take effect.