Privacy Policy
Last modified: July 2026
1. Introduction
SyntheticBrew (“we”, “us”, “our”) operates syntheticbrew.ai. This policy explains how we collect, use, and protect your personal information.
2. Information we collect
- Account data, including your email address and hashed password.
- Payment data processed by Stripe; we do not store card numbers.
- Usage metadata, such as login timestamps and feature usage counts.
- Technical and analytics data, including IP address, device or browser information, page visits, link interactions, and referral information.
3. How we use your data
- Provide, secure, and maintain our services.
- Process payments and manage subscriptions.
- Send transactional messages such as password resets and billing notices.
- Understand and improve product and website performance.
- Prevent fraud, abuse, and unauthorized access.
4. Service providers and sharing
We use service providers only as needed to operate the service, including Stripe for payment processing, Resend for transactional email, Google Analytics 4 for website analytics, Yandex Metrica for website analytics and interaction measurement, and Ahrefs Web Analytics for aggregate website analytics. We do not sell personal data.
5. Analytics and local storage
The website loads Google Analytics measurement ID G-QM8W4T1H8S, Yandex Metrica counter 109861753, and the cookieless Ahrefs Web Analytics script (key 8XmJL3KUhBeIYCJI73sNqg), which measures aggregate page visits without setting cookies. Yandex options currently include click mapping, session replay (Webvisor), link tracking, accurate bounce tracking, and ecommerce events through the site data layer. A pseudonymous account identifier may be associated with usage events. Browser settings, extensions, or provider opt-out tools may limit analytics collection.
The application uses browser localStorage for authentication tokens and interface preferences such as the theme choice.
6. Data retention
- Active-account data is stored while the account exists.
- Personal data associated with a deleted account is targeted for removal within 30 days, subject to backup and legal obligations.
- Billing records are retained as required by law.
- Aggregated or de-identified usage data may be retained longer.
7. Your rights
Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal data. Contact [email protected] to submit a request.
8. Security
We use measures including HTTPS/TLS, bcrypt password hashing, SHA-256 API token hashing, access controls, and security review. No system is completely secure, and we cannot guarantee absolute security.
9. Changes to this policy
We may update this policy. Changes will appear on this page with an updated “Last modified” date.
10. Contact
For privacy questions, email [email protected]. For product support, email [email protected].