Privacy Policy

1. Data controller and data protection officer

The data controller is SYNAPSE LABS LTDA, CNPJ 63.421.560/0001-30, Rua Rio Grande do Norte, 1435, Suite 708, 7th Floor, Savassi, Belo Horizonte/MG, Brazil, 30.130-138. To exercise your rights or contact our Data Protection Officer (DPO), write to admin@b4ker.io.

2. Data we collect

We collect the following personal data:

• Registration data: name, email, phone, company information, and job title;
• Authentication data: encrypted credentials, access tokens, and device identifiers;
• Payment data: processed via Stripe; we do not store full card details;
• Usage data: session logs, IP address, approximate location (country/city), device type, and features accessed;
• AI Inputs and Outputs: texts, images, briefs, and other content submitted to AI Features, and the content generated;
• Integration data: API credentials and data from third-party services you connect (Google Ads, Meta, TikTok, Google Search Console, Slack, and Discord), as authorized by you;
• Communications: content of messages sent to support.

3. How we use your data

We use your data to:

• Create and manage your account and organization access;
• Operate, personalize, and improve the Platform and its features;
• Process payments and manage billing;
• Send transactional communications and, with your consent, marketing messages;
• Meet legal and regulatory obligations;
• Investigate and prevent fraud, abuse, and security incidents.

4. Use of data for AI model training

By using the AI Features, you agree that Synapse may use your Inputs and Outputs to train, fine-tune, and improve its AI models. Before such use, we apply technical measures to minimize association of data with individual identities.

You may request deletion of your Inputs and Outputs through your account or support channels. Deletion prevents future use for training, but may not reverse processes already completed.

5. Legal bases (LGPD)

We process your data based on:

• Contract performance (Art. 7, V): data necessary to provide the Platform;
• Legal obligation (Art. 7, II): data required by law;
• Legitimate interest (Art. 7, IX): security, fraud prevention, service improvement (including usage analytics and session recording), and model training, always respecting your fundamental rights;
• Consent (Art. 7, I): marketing and optional features, revocable at any time.

6. Data sharing

We share data with:

• Service providers: hosting, payment processing (Stripe), support, and analytics, under confidentiality agreements with access limited to what is strictly necessary;
• Competent authorities: when required by law, court order, or regulatory authority;
• Corporate transactions: merger, acquisition, or asset sale, maintaining the same protections in this Policy;
• With your consent: for any other purpose. We do not sell personal data to third parties for advertising.

7. Third-party integrations and APIs

Integrations with OpenAI, Google Ads, Meta, TikTok, Google Search Console, Slack, Discord, and Stripe are operated by their respective providers under their own privacy policies. By using or connecting an integration, you authorize the transfer of data necessary for its operation. We recommend reading each provider's privacy policy.

8. Data retention

We retain personal data for as long as necessary for the stated purposes, legal obligations (including tax and accounting requirements), dispute resolution, and exercise of rights. After account closure, data is anonymized or deleted within a reasonable period, unless legally required to retain it.

9. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure, including encryption in transit and at rest, and access controls. No system is infallible. In the event of a significant incident, we will notify affected data subjects and the ANPD as required by the LGPD.

10. Your rights

Under the LGPD, you have the right to:

• Confirm the existence of and access your personal data;
• Correct incomplete, inaccurate, or outdated data;
• Request anonymization, blocking, or deletion of unnecessary or non-compliant data;
• Data portability to another service provider;
• Obtain information about data sharing;
• Revoke consent at any time;
• Object to processing based on legitimate interest.

EU users also have rights under the GDPR, including access, rectification, erasure, and portability. California (USA) residents have rights under the CCPA. To exercise your rights, contact us at admin@b4ker.io.

11. Children and minors

The Platform is not intended for users under 16. Access by adolescents between 12 and 16 requires parental or legal guardian consent (LGPD Art. 14). We do not knowingly collect data from children under 12. If we identify improper collection, we will take immediate deletion measures.

12. International transfers

Your data may be transferred to and stored on servers outside Brazil (USA, European Union) by providers such as AWS, Google, Stripe, and PostHog. We ensure such transfers comply with adequate protection mechanisms (standard contractual clauses or other applicable legal basis) in accordance with LGPD Art. 33.

13. Usage analytics, cookies, and session recording

We use PostHog, a product analytics tool, to understand how the site and the Platform are used, find problems, and improve the experience. We collect:

• Usage events: pages visited, clicks and actions taken, the source of the visit (such as campaign parameters), technical errors, and page load performance;
• Session recordings: a visual replay of how the interface was used, to understand where people run into difficulty. Form fields (such as passwords and codes) are always masked. Chat conversations, lead lists, member and account details, integration credentials, and authentication codes are masked or not recorded. The rest of the content shown on screen, such as campaign dashboards and metrics, may appear in recordings;
• Identifiers: an anonymous identifier stored in cookies and in the browser's local storage. When you sign in, it becomes associated with your user (name and email) and your organization.

We process this data on the basis of legitimate interest in improving the service (section 5). It is sent to PostHog servers in the USA through an address on b4ker.io itself (section 12), and is not used for advertising. PostHog honors the browser's "Do Not Track" signal.

On our production domains we also use the Meta Pixel and the Google Ads tag to measure the effectiveness of our ads. They record visits and completed sign-ups and may build remarketing audiences. These providers process data under their own privacy policies; you can adjust your ad preferences directly with Meta and Google.

In addition, our servers record in PostHog business events that happen on the account and do not depend on the browser: account creation, connecting an integration, publishing a campaign, and subscription changes (start, cancellation, payment failure). These records contain only account, project, and user identifiers plus categories such as platform, contracted modules, and plan amount; they include no email, name, or content. Because they are records of the service's own operation, the option below does not turn them off.

You can turn off usage analytics and session recording in this browser at any time:

14. Amendments

This Policy may be updated at any time. Material changes will be notified by email or Platform notice in advance. The current version will always be available on this page.

15. Contact and DPO

To exercise rights, clarify questions, or file complaints: admin@b4ker.io | +55 (31) 7342-4043 | SYNAPSE LABS LTDA, Rua Rio Grande do Norte, 1435, Suite 708, 7th Floor, Savassi, Belo Horizonte/MG, Brazil, 30.130-138.