Cynergi Privacy Policy (draft)

For questions about your data, requests (see "Your rights") or complaints, email privacy-contact@example.com.

• Your account: your email address, how you sign in (an email code or Google), and the date you confirmed you are 18 or older and accepted the terms. If you sign in with Google, we also keep the web address of your Google account picture (not the picture itself; see "Who can see what").
• Your profile: your display name, what you write about yourself, links, languages, time zone, and what we understood from your description (skills, interests, goals, availability), which you can correct.
• Matching: what you ask for on Discover, the people we suggested and why, and intros you send or receive (with your note).
• Chat: the messages you send to people you are connected with.
• Pair spaces: the pair spaces you make or join (a name, what it is for, a short description and, if the owner lists it, who it is looking for), the messages you send in its chat, the goals, skills you want to grow and progress notes you add in it, and any invite or request to join.
• Safety: the people you block, reports you make, and copies kept with reports about you (see "Reports, blocks and moderation").
• Security and running the service: a log of sign-in activity (with your IP address and browser), and a record of emails we send you (the time and a scrambled form of your address, not the email itself).

Matching is automated. When you write or change your profile, our servers turn your description into numbers (an "embedding") that let us find people with related skills and interests. This step runs on our own servers.

To understand your description, choose your best matches and explain each suggestion, we also send text to an AI provider: currently Groq, Inc., with Cloudflare, Inc. as a backup. We send your description with email addresses, phone numbers, links, social handles and your name removed. When someone else asks for matches, a short summary of your profile (skills, interests, goals and availability, without your name or contact details) may be sent so the AI can compare candidates. We never send your name, email address or contact details.

These providers process the text only to return a result to us. Their terms don't allow them to use it to train AI models. We have asked Groq not to retain it.

We keep the results (your structured profile, your matches and the reasons shown), but not the messages exchanged with the AI provider. If the AI service is unavailable, we suggest matches using our own scoring and a simpler explanation.

Suggestions are only suggestions: nobody can contact you unless you both agree. Deleting your account deletes your profile, its embeddings and your matches (see "Deleting your data").

We don't use AI to read your chat messages.

• When you are suggested to someone, or send them an intro, they see your summary, skills, interests and availability, and why you were matched, but not your name or links.
• Your name and links are shown only to people you are connected with.
• Your Google account picture is shown to nobody unless you turn on "Show my Google photo". If you do, only people you are connected with see it, and you can turn it off at any time. The picture stays on Google's servers: when someone sees it, their browser fetches it from Google, so Google receives that person's IP address and browser details.
• A pair space (up to 6 people), with its chat, goals, skills and notes, can be seen only by the people in it. They see your name, whether or not you are connected with them, and a new member can read the pair space's earlier messages. We don't use AI to read a pair space's chat, goals or notes, and they aren't used for matching.
• If a pair space's owner lists it, anyone signed in can see its name, what it is for, its description, how many people are in it and who it is looking for, but not who is in it. If you ask to join, the owner sees your name and your note.
• Joining a pair space is always your own choice: you accept an invite, use an invite link, or ask to join. With an invite link or a listed pair space, the people already in it don't each approve you, and you may not be connected with them.
• Nobody can contact you unless you both agree to the introduction.
• We don't sell your data or show you advertising.

Only you and the person you're talking to can read your chat. We don't use AI to read it. Each message is deleted 90 days after it's sent, and the whole conversation is deleted if either of you deletes your account.

You can report a message, an intro, a profile, or a goal or note in a pair space. If a message is reported, we keep a copy of that message so our moderator can review it. When you report someone from a chat, you can attach up to 5 messages from it, and we copy only the ones you choose. For an intro we keep its request and note; for a profile, what the person reporting could see; for a goal or a note, its text. Only the moderator sees this copy. It is deleted 180 days after the report is resolved, even if the account or the original messages were deleted sooner. The reported person isn't told who reported them.

In a pair space you can also report a chat message, and you can report a pair space itself (its name, description and who it is looking for). We keep a copy of only what you report: one message, never the rest of the pair space's chat. A report about a pair space is about its owner. If our moderator acts on it, the pair space is taken off the list of pair spaces. Blocking someone in your pair space takes you out of it; if you own the pair space, it takes them out instead. They aren't told why.

If you block someone, neither of you can message the other, and you won't be suggested to each other. They aren't told. We keep the block until you remove it or one of you deletes your account.

Our moderator can suspend accounts that break the terms. We keep a record of each moderation action (who did what and when, without message text) for 365 days.

• Sign-in codes, whenever you ask for one.
• If our moderator warns, suspends or bans your account after a report, we email you, with a link to appeal a suspension or ban, and we email you the outcome of an appeal.
• We email you when someone sends you an intro or accepts yours. This is on when you create your profile; turn it off in Settings (Account settings, Emails). You'll still see intros in Notifications.

Our emails never name the other person or include message text.

We use two cookies, both required for signing in: a session cookie and a security (CSRF) cookie. We do not use advertising or tracking cookies.

• Sign-in activity log: 90 days.
• What you ask for on Discover, with its suggestions and intros: 90 days.
• Notifications: 90 days.
• Chat messages: 90 days after each is sent.
• Pair-space chat messages: 90 days after each is sent. Pair-space progress notes: 90 days after each is written.
• A pair space: hidden from everyone as soon as it is closed, and deleted with everything in it 90 days later. When you leave a pair space, what you wrote stays with it until then; if you delete your account, it is deleted with the account.
• Pair-space invites and requests to join: they run out after 14 days and are deleted 90 days later.
• Report copies: 180 days after the report is resolved.
• Moderation records: 365 days.
• Records of emails sent: 30 days.
• Your account and profile: until you delete them (see below). Connections and blocks last until you remove them or delete your account.

Deleting your account from Account settings signs you out everywhere and permanently removes your account, profile, embeddings, matches, intros, connections, messages and pair spaces 30 days later. The only exception is copies kept with a report (see Reports, blocks and moderation), which are deleted 180 days after the report is resolved.

• Render (runs our servers, in Singapore) and Neon (our database, in Singapore).
• Vercel (serves the website).
• Google (sends our emails, "Sign in with Google" if you use it, and keeps and serves Google account pictures).
• Groq and Cloudflare (AI processing, as described above).
• Cloudflare (runs our scheduled housekeeping).

We intend to meet India's Digital Personal Data Protection Act 2023 and, for users in the EU and UK, the GDPR. You can see and correct your profile in the app, delete your account at any time, and email privacy-contact@example.com to ask for a copy of your data or to raise a concern.