Encryption in transit. Data moving between you, Syntheo, and our providers is encrypted in transit.
Security & data
Public data, handled with care.
Syntheo monitors only publicly available competitor mentions and ads. Here's exactly what we collect, the providers we rely on, and the controls you have over your data.
Public-only monitoring · Encryption in transit · Delete your data on request
This page describes our current setup honestly. Syntheo is an early-stage product. Where something is aspirational, it's marked as planned. We don't claim certifications we don't have. For full legal detail, see our Privacy Policy.
What we monitor
We track publicly available data, nothing private.
Syntheo retrieves competitor mentions and ads that are already public: posts and threads on social platforms and forums, public ad libraries (Meta Ad Library, Google Ads, LinkedIn Ads, and TikTok Ads), and similar openly available sources. We do not access private accounts, private messages, or anything behind a login that isn't publicly visible. We don't buy or scrape private personal data to power the product.
The inputs you give us (your website, the competitor brands you want to track, and your keywords) are used to run public searches on your behalf and to organize the results in your workspace.
How your data is stored and protected
Storage, encryption, and access.
Reputable infrastructure. We build on established providers rather than rolling our own (see Providers below).
Access controls. Access to production systems and customer data is limited to team members who need it to operate and support the Service, and is removed when no longer needed.
Least data necessary. Please don't enter sensitive personal data into competitor, keyword, or website fields. These are meant for brands and public content.
Placeholder: we will document specific internal access policies, logging, and review cadence as the team formalizes them before launch.
Providers & sub-processors
The services we rely on.
We use a small set of established providers to run Syntheo. Each processes data only to provide their service to us, under their own terms.
Supabase
Database and authentication infrastructure that stores account data and your service inputs.
Railway
Application hosting and infrastructure.
Paddle
Payments, billing, invoicing, and tax handling. Paddle acts as merchant of record; Syntheo does not store full card numbers.
PostHog
Product analytics, funnel tracking, and session replay, used to understand usage and improve the product.
Slack and Telegram
Alert delivery, only where you connect these integrations. We send alerts to the workspace or chat you authorize.
Search and data APIs
Third-party search/data providers we query to retrieve publicly available mentions and ad-library results. We send your keywords and configured competitor brands to return results.
Placeholder: we will maintain a current, named sub-processor list (including specific search/data API vendors) and confirm it with counsel before launch. See our Privacy Policy for the canonical list.
Analytics & session replay
How we use analytics.
We use PostHog to understand how the product is used (pages viewed, feature usage, and funnel events from first visit through signup, onboarding, and payment) and to record session replays that help us diagnose issues and improve usability. We configure replay to mask sensitive input fields where feasible, and replays are used internally for product and support purposes only. Full detail is in our Privacy Policy.
Your controls
You stay in control of your data.
- Access. Request a copy of the personal data we hold about you.
- Correction. Ask us to fix inaccurate or incomplete data.
- Deletion. Ask us to delete your data. When you close your account, we delete or anonymize your account data and service inputs within a reasonable period, except where we must retain records for legal, tax, or dispute-resolution purposes.
- Disconnect integrations. Remove Slack, Telegram, or a webhook at any time to stop sending alerts to those channels.
- Cancel anytime. Cancel your trial or subscription yourself, whenever you want.
To exercise any of these, talk to support and a human will help.
Compliance & current stage
Where we are, honestly.
Syntheo is an early-stage product. We follow sound data-handling practices (public-only monitoring, encryption in transit, limited access, and clear deletion) and our privacy practices are documented in our Privacy Policy, including how we approach GDPR and CCPA/CPRA rights.
We do not currently hold formal security certifications, and we won't claim ones we don't have.
Planned (aspirational, not yet in place): formal certifications such as SOC 2, a published sub-processor page with change notifications, and a documented internal security policy. We'll update this page as these land. Track progress on the changelog.
Questions about how we handle data?
Read the full detail in our Privacy Policy, or reach out. A human will answer. Want a walkthrough? Book a demo.