Privacy Policy

1. Data controller and data protection officer

The data controller is SYNAPSE LABS LTDA, CNPJ 63.421.560/0001-30, Rua Rio Grande do Norte, 1435, Suite 708, 7th Floor, Savassi, Belo Horizonte/MG, Brazil, 30.130-138. To exercise your rights or contact our Data Protection Officer (DPO), write to admin@b4ker.io.

2. Data we collect

We collect the following personal data:

• Registration data: name, email, phone, company information, and job title;
• Authentication data: encrypted credentials, access tokens, and device identifiers;
• Payment data: processed via Stripe; we do not store full card details;
• Usage data: session logs, IP address, approximate location (country/city), device type, and features accessed;
• AI Inputs and Outputs: texts, images, briefs, and other content submitted to AI Features, and the content generated;
• Integration data: API credentials and data from third-party services you connect (Google Ads, Meta, TikTok, Slack, Discord, Notion, Google Drive), as authorized by you;
• Communications: content of messages sent to support.

3. How we use your data

We use your data to:

• Create and manage your account and organization access;
• Operate, personalize, and improve the Platform and its features;
• Process payments and manage billing;
• Send transactional communications and, with your consent, marketing messages;
• Meet legal and regulatory obligations;
• Investigate and prevent fraud, abuse, and security incidents.

4. Use of data for AI model training

By using the AI Features, you agree that Synapse may use your Inputs and Outputs to train, fine-tune, and improve its AI models. Before such use, we apply technical measures to minimize association of data with individual identities.

You may request deletion of your Inputs and Outputs through your account or support channels. Deletion prevents future use for training, but may not reverse processes already completed.

5. Legal bases (LGPD)

We process your data based on:

• Contract performance (Art. 7, V): data necessary to provide the Platform;
• Legal obligation (Art. 7, II): data required by law;
• Legitimate interest (Art. 7, IX): security, fraud prevention, service improvement, and model training, always respecting your fundamental rights;
• Consent (Art. 7, I): marketing and optional features, revocable at any time.

6. Data sharing

We share data with:

• Service providers: hosting, payment processing (Stripe), support, and analytics — under confidentiality agreements with access limited to what is strictly necessary;
• Competent authorities: when required by law, court order, or regulatory authority;
• Corporate transactions: merger, acquisition, or asset sale, maintaining the same protections in this Policy;
• With your consent: for any other purpose. We do not sell personal data to third parties for advertising.

7. Third-party integrations and APIs

Integrations with Google Ads, Meta, TikTok, Slack, Discord, Notion, Google Drive, and Stripe are operated by their respective providers under their own privacy policies. By connecting an integration, you authorize the transfer of data necessary for its operation. We recommend reading each provider's privacy policy.

8. Data retention

We retain personal data for as long as necessary for the stated purposes, legal obligations (including tax and accounting requirements), dispute resolution, and exercise of rights. After account closure, data is anonymized or deleted within a reasonable period, unless legally required to retain it.

9. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure, including encryption in transit and at rest, and access controls. No system is infallible. In the event of a significant incident, we will notify affected data subjects and the ANPD as required by the LGPD.

10. Your rights

Under the LGPD, you have the right to:

• Confirm the existence of and access your personal data;
• Correct incomplete, inaccurate, or outdated data;
• Request anonymization, blocking, or deletion of unnecessary or non-compliant data;
• Data portability to another service provider;
• Obtain information about data sharing;
• Revoke consent at any time;
• Object to processing based on legitimate interest.

EU users also have rights under the GDPR, including access, rectification, erasure, and portability. California (USA) residents have rights under the CCPA. To exercise your rights, contact us at admin@b4ker.io.

11. Children and minors

The Platform is not intended for users under 16. Access by adolescents between 12 and 16 requires parental or legal guardian consent (LGPD Art. 14). We do not knowingly collect data from children under 12. If we identify improper collection, we will take immediate deletion measures.

12. International transfers

Your data may be transferred to and stored on servers outside Brazil (USA, European Union) by providers such as AWS, Google, and Stripe. We ensure such transfers comply with adequate protection mechanisms (standard contractual clauses or other applicable legal basis) in accordance with LGPD Art. 33.

13. Amendments

This Policy may be updated at any time. Material changes will be notified by email or Platform notice in advance. The current version will always be available on this page.

14. Contact and DPO

To exercise rights, clarify questions, or file complaints: admin@b4ker.io | +55 (31) 7342-4043 | SYNAPSE LABS LTDA — Rua Rio Grande do Norte, 1435, Suite 708, 7th Floor, Savassi, Belo Horizonte/MG, Brazil, 30.130-138.