Privacy Policy

Information We Collect

When you interact with our platform, we collect different types of information. Some you give us directly, some we pick up automatically. Here's what we're talking about:

Information You Provide Directly

• Account details when you sign up - your name, email address, and password
• Profile information you choose to add - like a username or avatar
• Payment information if you make purchases (though we don't store your full card details)
• Messages you send through our support system or contact forms
• Any content you create or share within our platforms

Information We Collect Automatically

When you use our services, we automatically gather certain technical information. This helps us keep things running smoothly and figure out what's working (and what isn't).

• Device information - what type of phone or tablet you're using, operating system version
• Usage data - which features you use, how long you spend in different sections
• Log data - IP addresses, browser types, access times
• Location data (only if you grant permission) - helps with regional content and server optimization
• Cookie data and similar tracking technologies

How We Use Your Information

We're not in the business of hoarding data for the sake of it. Everything we collect serves a specific purpose:

We analyze usage patterns to understand what people actually want from our platforms. If everyone's ignoring a feature, that tells us something. If a particular game mechanic is getting tons of engagement, we know we're on the right track.

Sharing Your Information

We don't sell your personal data. Full stop. But we do share information in certain situations:

Service Providers

We work with third-party companies that help us run our business - payment processors, cloud hosting providers, analytics services. These companies only get access to the information they need to do their job, and they're contractually required to keep it secure and not use it for anything else.

Legal Requirements

Sometimes we're legally required to disclose information - if we receive a valid court order, for instance, or if we need to protect someone's safety. We'll always review these requests carefully and only share what's absolutely necessary.

Business Transfers

If Synthera gets acquired or merges with another company (not that we're planning on it), your information would likely be part of that transfer. You'd be notified beforehand, and the new owners would still be bound by the commitments in this policy.

Your Rights Under GDPR and Bulgarian Law

EU privacy laws give you strong control over your personal data. Here's what you can do:

• Access: Request a copy of all personal data we hold about you
• Correction: Ask us to fix inaccurate or incomplete information
• Deletion: Request that we delete your data (with some exceptions)
• Restriction: Limit how we process your information in certain situations
• Portability: Get your data in a machine-readable format to transfer elsewhere
• Object: Opt out of processing based on legitimate interests
• Withdraw Consent: Take back permission you've given us (like for marketing emails)

To exercise any of these rights, just email us at contact@synthera.com. We'll respond within 30 days (usually much faster). If you're not satisfied with our response, you have the right to file a complaint with the Bulgarian Commission for Personal Data Protection.

Data Security

We take security seriously. Your data is protected through multiple layers:

• Encryption in transit (TLS/SSL) and at rest for sensitive information
• Regular security audits and vulnerability assessments
• Access controls - only authorized personnel can access user data, and only when necessary
• Secure data centers located in the EU
• Regular staff training on data protection practices

That said, no system is 100% secure. If we ever experience a data breach that affects your information, we'll notify you and the relevant authorities within 72 hours as required by GDPR.

Data Retention

We don't keep your information longer than necessary. Here's our general approach:

• Account data: Retained while your account is active, plus 90 days after deletion
• Transaction records: Kept for 7 years to comply with Bulgarian tax laws
• Support communications: Deleted after 3 years
• Usage analytics: Aggregated and anonymized after 24 months
• Marketing preferences: Removed immediately upon unsubscribe

Some information we're legally required to keep longer (like financial records). But once the retention period expires, we securely delete or anonymize the data.

International Data Transfers

Our servers are primarily located within the EU, but we occasionally work with service providers in other countries. When we transfer data outside the EU, we ensure adequate protections are in place - either through Standard Contractual Clauses approved by the EU Commission or by working with companies certified under appropriate frameworks.

Children's Privacy

Our services aren't designed for children under 16. We don't knowingly collect information from kids. If we discover that we've accidentally collected data from someone under 16 without proper parental consent, we'll delete it immediately.

Parents - if you believe your child has provided us with personal information, please contact us right away at contact@synthera.com.

Cookies and Tracking

We use cookies and similar technologies. Some are essential for the platform to work (like keeping you logged in). Others help us understand how people use our services or remember your preferences.

You can control cookies through your browser settings. Just know that blocking certain cookies might affect functionality - you might have to log in more often, or some features might not work properly.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through email or a prominent notice on our platform. The "Last Updated" date at the top shows when the most recent version took effect.

Continuing to use our services after changes go into effect means you accept the updated policy.