Privacy Policy

1. Who We Are

Synetic Studio Pty Ltd (ABN 52 696 129 049) (“we”, “us” or “our”) operates the Synetic Studio platform — an AI-powered video editing tool accessible at https://www.syneticstudio.com/ (“the Platform”).

We are committed to protecting your personal information and handling it responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights in relation to it.

We operate in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”). This Policy also applies to our website and all associated services.

Our Terms & Conditions also apply to your use of the Platform and are incorporated into this Privacy Policy by reference.

2. What Personal Information We Collect

The personal information we collect depends on how you interact with us. It may include:

• Account information: your name and email address when you register for an account;
• Authentication data: if you sign in via Google or GitHub, we receive your name, email address, and profile picture from those providers in accordance with your OAuth permissions. We do not receive or store your passwords for those external services;
• Payment information: billing name and email address. We do not store your card number, CVV, or full payment details — these are processed and held securely by Stripe, our payment provider;
• Media content: video footage, audio files, and images that you upload to the Platform for AI-assisted editing;
• Project data: prompts, editing instructions, captions, metadata, and other inputs you provide while using the Platform;
• Usage data: pages visited, features used, editing actions performed, session duration, and general interaction patterns within the Platform;
• Device and technical information: browser type, operating system, screen resolution, IP address, and referring URL; and
• Waitlist and feedback submissions: name, email address, and any responses you provide through our waitlist form, feedback surveys, or support communications.

3. How We Collect Your Information

3.1 Directly from You

We collect information directly from you when you:

• create an account or sign in;
• upload content to the Platform;
• interact with the AI editing tools or provide prompts;
• make a payment or update billing details;
• contact us for support; or
• join our waitlist or complete a feedback form.

3.2 Automatically

We collect certain information automatically when you visit or use the Platform, including through cookies, log files, and analytics tools. This includes IP address, browser and device information, pages accessed, and session activity.

3.3 From Third-Party Providers

If you sign in using Google or GitHub OAuth, those services provide us with basic profile information (name, email, and profile image) based on your account permissions with them. We only use this information to create and manage your account.

We may also receive limited information from Stripe regarding the status of transactions (e.g. payment success or failure) to manage your subscription.

4. Cookies

We use cookies and similar tracking technologies to operate and improve the Platform. Cookies are small files placed on your device that help us recognise you, maintain your session, and understand how the Platform is used.

We use cookies for:

• session management (keeping you logged in);
• analytics and performance monitoring; and
• remembering your preferences.

Most browsers accept cookies by default. You can configure your browser to reject cookies or to alert you before accepting them. Please note that disabling cookies may affect the availability and functionality of some parts of the Platform.

We may use analytics providers such as Vercel Analytics or PostHog to understand how users engage with the Platform. These tools collect anonymised or aggregated usage data.

5. How We Use Your Information

We use the personal information we collect to:

• Provide the service: create and manage your account, process your uploads, run AI editing pipelines, and deliver Platform functionality;
• Process payments: manage subscriptions, billing, and invoicing through Stripe;
• Communicate with you: send operational notices, security alerts, product updates, and support responses. Where you have opted in, we may also send marketing communications. You can opt out of marketing communications at any time;
• Improve the Platform: analyse usage patterns, test new features, fix bugs, and enhance the overall experience. We use only de-identified or anonymised data to improve AI models for all users — see Section 6 below;
• Maintain security and integrity: detect, prevent, and investigate fraud, abuse, security incidents, and other misuse of the Platform;
• Comply with legal obligations: meet our obligations under applicable laws and regulations, and respond to lawful requests from government or regulatory bodies; and
• Business operations: administer our business, manage relationships with service providers, and support internal planning and reporting.

6. AI Model Improvement

We may use data derived from your use of the Platform to develop, test, and improve our AI models and features. When we do this:

• We only use de-identified or anonymised data for improvements that benefit all users. We will not use your unmodified personal content or media files for general model training.
• Unmodified content containing personal information is used only to improve your own individual experience on the Platform (for example, personalising how the AI responds to your prompts).
• You may opt out of having your content used for general AI model improvement at any time in your account settings. If you opt out, we will not use your data for this purpose, although we may still retain basic feedback signals (such as thumbs up or thumbs down ratings) to improve relevance for your account.

7. Who We Share Your Information With

We do not sell your personal information. We may share it with the following categories of third parties where necessary to provide or improve the Platform:

7.1 Service Providers

• Stripe — payment processing. Stripe handles all card data and transactions. We only receive transaction status information. Stripe’s privacy policy is available at stripe.com/privacy.
• Cloudflare — web infrastructure, content delivery network (“CDN”), DDoS protection, and performance optimisation. Cloudflare may process request metadata (including IP addresses) as part of routing and security services.
• Google (OAuth) — if you use Google to sign in, Google provides us with your account profile information. Google’s use of that data is governed by Google’s Privacy Policy.
• GitHub (OAuth) — if you use GitHub to sign in, GitHub provides us with your account profile information. GitHub’s use of that data is governed by GitHub’s Privacy Policy.
• Cloud hosting and storage providers — we use cloud infrastructure providers to store data and run the Platform. These providers process data on our behalf under data processing agreements.
• AI model providers — we use third-party AI and machine learning APIs to power editing features. These providers process content for the purpose of returning outputs to you. We contractually restrict them from using your content for their own model training unless you have separately consented to that under their terms.
• Analytics providers — we use analytics tools (such as Vercel Analytics or PostHog) to understand usage patterns. These tools receive anonymised or aggregated data only.

7.2 Legal and Compliance

We may disclose your personal information to government authorities, law enforcement agencies, or regulators if required to do so by law, court order, or enforceable government request, or if we reasonably believe disclosure is necessary to protect the safety or rights of any person.

7.3 Business Transfers

If we are involved in a merger, acquisition, asset sale, corporate restructure, or change of ownership, your personal information may be transferred to the relevant third party as part of that transaction. We will notify you of any such transfer via your registered email address or a notice on the Platform.

8. Overseas Transfers

Some of our service providers are located outside Australia, primarily in the United States and the United Kingdom. When we transfer personal information to these providers, we take reasonable contractual steps to ensure your information receives a level of protection that is comparable to Australian privacy standards.

By using the Platform, you consent to your personal information being transferred to and processed in countries outside Australia. You acknowledge that, in relation to overseas recipients, we may not always be able to take steps to ensure compliance with Australian Privacy Principles, and that you may have limited recourse under Australian law for any mishandling by those overseas recipients.

We primarily store data in servers located in Australia. Where data is also stored or processed overseas, it is in connection with the operation of the third-party service providers listed in Section 7.

9. Your Rights

Under the Australian Privacy Act and the Australian Privacy Principles, you have the right to:

• Access your data: request a copy of the personal information we hold about you;
• Correct your data: ask us to correct any information about you that is inaccurate, incomplete, or out of date;
• Delete your data: request that we delete the personal information we hold about you. Note that some information may need to be retained for legal or regulatory reasons;
• Opt out of AI training: disable the use of your de-identified content for general AI model improvement in your account settings (see Section 6);
• Opt out of marketing: unsubscribe from marketing emails at any time using the unsubscribe link in each email, or by contacting us directly; and
• Make a complaint: if you are concerned about how we handle your personal information, you may contact us and we will endeavour to address your concern.

To exercise any of these rights, please contact us at hello@syneticstudio.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

10. Data Security

We implement industry-standard security measures to protect your personal information from unauthorised access, disclosure, alteration, and destruction. This includes:

• encrypted data transmission (TLS/HTTPS);
• access controls and authentication requirements for our team;
• use of reputable cloud infrastructure providers with their own security certifications; and
• regular security reviews as part of our development process.

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of your information. If you believe your account has been compromised, please contact us immediately.

We comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth). If a data breach occurs that is likely to result in serious harm to you, we will notify the Office of the Australian Information Commissioner (“OAIC”) and affected individuals as required by law.

11. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected and to meet our legal obligations. Specifically:

• Your uploaded content (media files): deleted within 7 days of account cancellation or termination. You can also delete your content at any time from within the Platform;
• Account data: retained for as long as your account is active, and for a reasonable period after closure to comply with legal, tax, or regulatory obligations;
• Payment records: retained as required by applicable financial and tax laws; and
• Analytics and usage data: retained in accordance with the retention policies of the relevant analytics provider, generally up to 2 years in anonymised form.

When your information is no longer required, we take reasonable steps to destroy, de-identify, or render it inaccessible in a secure manner.

12. Beta and Waitlist Data

If you join our waitlist or participate in the Platform during its beta period, your contact information (name and email address) is used solely to:

• notify you when access is available;
• communicate product updates and developments; and
• invite you to provide optional feedback during the beta period.

We will not use waitlist or beta data for unsolicited commercial communications or share it with third parties for marketing purposes. You may unsubscribe from any communications at any time using the unsubscribe link included in our emails.

13. Third-Party Links

The Platform may contain links to third-party websites, tools, or services. We are not responsible for the privacy practices of those third parties. We recommend reviewing the privacy policy of any third-party service you access through or in connection with the Platform.

14. Children

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18 without appropriate consent, we will take steps to delete that information promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasonable reasons. When we make material changes, we will notify you by email or by posting a notice on the Platform before the changes take effect.

Your continued use of the Platform after the updated Policy takes effect constitutes your acceptance of the changes. The date at the top of this page indicates when the Policy was last updated.

16. Contact & Complaints

If you have any questions, concerns, or complaints about how we handle your personal information, please contact us at:

SyneticStudio Pty Ltd
Email: hello@syneticstudio.com
Website: syneticstudio.com/contact

We will acknowledge your inquiry promptly and aim to respond fully within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (“OAIC”):

Office of the Australian Information Commissioner
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Website: www.oaic.gov.au