Privacy Policy

Last updated: 10 July 2026

This page explains what Synora ("we") collects when you use joinsynora.com, why, and the choices you have. Synora is the data controller for personal data you submit to the platform.

1. Data we collect

  • Account data: name, email, password hash, role (job seeker or recruiter), country.
  • Profile & application data: CVs, cover letters, chat with the AI coach, saved jobs, applications sent.
  • Recruiter data: company details, job postings, messages, hiring pipeline notes.
  • Billing data: handled by Stripe. We store your customer ID and subscription status, not your card number.
  • Technical data: IP address, browser, device, pages viewed, click events (used for security, product analytics and outbound-click tracking).

2. How we use it

  • Deliver the Service — matching, applications, messaging, coaching.
  • Process payments and subscriptions (Stripe).
  • Send transactional emails (account, billing, job alerts you opted in to).
  • Improve the product and prevent abuse.
  • Comply with legal obligations.

3. Legal bases (GDPR / UK GDPR)

Contract (to provide the Service you signed up for), legitimate interests (security, product improvement), consent (marketing emails, non-essential cookies), and legal obligation (tax, fraud).

4. AI processing

The AI career coach and CV/cover-letter features send the text you provide to our AI model provider(s) to generate a response. We do not permit those providers to use your data to train foundation models. Do not include information you would not want processed by an AI system.

5. Sharing

We share data only with:

  • Employers — when you submit or approve an application.
  • Sub-processors — hosting and database (Lovable Cloud / Supabase), payments (Stripe), email delivery, AI providers, analytics.
  • Authorities — where legally required.

We never sell your personal data.

6. International transfers

Data may be processed outside your country (including in the EU, UK and US) under appropriate safeguards such as Standard Contractual Clauses.

7. Retention

Account data is kept while your account is active and for up to 24 months after deletion for legal and anti-fraud purposes. Billing records are kept as long as tax law requires (typically 7 years).

8. Your rights

You can access, correct, export or delete your data, object to processing, and withdraw consent at any time. Email support@joinsynora.com. You may also complain to your local supervisory authority.

9. Security

Data is encrypted in transit (TLS) and at rest. Access is restricted, logged and reviewed. No system is perfectly secure — please use a strong, unique password.

10. Children

Synora is not intended for anyone under 16.

11. Changes

We will notify material changes by email or in-app notice.

12. Contact

Privacy questions: support@joinsynora.com.