Privacy Policy

Effective Date: October 2026

Introduction

This Privacy Policy describes how Synth-AV ("we," "our," or "us") collects, uses, and shares your personal information when you use our website at synthav.io and the Synth-AV web studio at app.synthav.io (together, the "Service").

Controller Information

Operator: Synth-AV (independent operator)

Jurisdiction: India

Address: Malpani Greens, Kaspate Vasti, Wakad, Pune MH 411057, India

Contact Email: synthavinfo@gmail.com

What Data We Collect and Process

The Service processes the following categories of data:

• Account data: your email address and authentication identifiers, stored by our authentication provider (Supabase).
• Connected-store data: when you connect a store, we read product information (titles, descriptions, prices, product photos) needed to generate your videos. Store access credentials are stored in encrypted form and are used only to read this data.
• Generated content: your videos, scene scripts, narration audio, and thumbnails, stored so you can preview, re-render, and download them.
• Voice data: if you use voice design, the written description you provide; if you use voice cloning, the short audio sample you upload. These are used to create your custom narrator and are stored for that purpose.
• Credit ledger: records of credit purchases and usage tied to your account.
• Support data: anything you send us when contacting support.

How We Use Your Data

We use your data only to operate the Service:

• to authenticate you and secure your account;
• to read your connected store's catalog and generate the videos you request;
• to store and deliver your videos and previews;
• to track credits you purchase and spend;
• to answer support requests.

We do not sell your personal information, and we do not use your product data, videos, or voice samples to advertise to third parties or to train public AI models.

AI Processing Disclosure

Video generation involves AI systems: scripts are written by a large language model, narration is produced by text-to-speech (including voice design and voice cloning), and motion graphics are assembled by our rendering pipeline. Product images come from your connected store and are not generated. Depending on your choices, limited data (your script instructions, your voice description or audio sample) is sent to these AI providers to produce your output.

Third-Party Services

We share the minimum data necessary with the following providers:

Authentication & Database

Supabase: account authentication, database, and storage (Privacy Policy)

Compute & Storage

Modal: backend compute and video rendering (Privacy Policy)

Cloudflare: CDN, static hosting for this website, and storage for your generated videos (Privacy Policy)

AI Providers

Google (Gemini): script generation and voice design, where used (Privacy Policy)

OpenRouter / Google API: routing of script-generation requests, where used (Privacy Policy)

Replicate: voice cloning, where used (Privacy Policy)

Payments

Gumroad: credit-pack sales and payment processing (Privacy Policy). Payment details are processed by Gumroad; we receive order confirmations, not card numbers.

E-Commerce Platforms

Shopify, WooCommerce, Gumroad: your connected stores (Shopify Privacy). We read catalog data under the authorisation you grant when connecting a store.

Support & Forms

Tally: support and feedback forms (Privacy Policy)

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases:

• Contract: to operate the Service you signed up for (authentication, video generation, storage, delivery).
• Consent: voice design/cloning features and marketing communications, where you explicitly enable them.
• Legitimate Interest: service security, abuse prevention, and error monitoring.
• Legal Obligation: where required to comply with law.

Data Retention

Your account data, connected-store credentials, credit ledger, and generated videos are retained for as long as your account is active. If you delete your account or request deletion, we delete your account data, credentials, generated videos, and voice samples from our systems. Some transaction records may be retained where required by law. Error logs retained by our monitoring providers expire automatically.

Data Security

Store credentials are encrypted at rest. Data is transmitted over TLS. Access to production systems is limited to the operator. No system is perfectly secure; if a breach affecting your data occurs, we will notify you as required by applicable law.

Your Privacy Rights

Depending on your location and applicable privacy laws, you have the following rights:

EU GDPR

EU residents have rights of access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with an EU supervisory authority.

UK GDPR

UK residents have similar rights under the UK GDPR. You may contact the ICO regarding complaints.

US (CCPA/CPRA)

California residents have rights to know, access, delete, correct, and opt out of sale or sharing of personal information. We do not sell personal information and do not discriminate for exercising these rights.

Canada (PIPEDA)

Residents of Canada have rights of access and correction subject to limited exceptions.

To exercise any right, email synthavinfo@gmail.com. We respond within the timelines required by applicable law.

Children's Privacy

The Service is not directed at children. We do not knowingly collect personal information from children under 18. If we learn we have collected such data without appropriate consent, we will delete it.

Marketing Communications

If you have consented to receive marketing communications, you can opt out at any time by clicking the unsubscribe link in our emails or contacting us. Transactional messages (receipts, security notices) are not optional.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The effective date above indicates the current revision. Material changes will be announced on the website or by email where required.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please reach out to us:

Email: synthavinfo@gmail.com

Address: Malpani Greens, Kaspate Vasti, Wakad, Pune MH 411057, India