Privacy Policy

1. Introduction

At AISynit (“AISynit”, “we”, “us”, “our”), we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights regarding your data.

By using AISynit, you acknowledge this Privacy Policy. Where consent is required under applicable law, we will request it separately.

2. What Data We Collect

We collect the following types of personal data:

a. Account Information

Name, email address, phone number (optional), and password hash.

b. Profile Information

Business name, activity type, certifications, and other professional details (for Providers).

c. Usage Data

Session bookings, interactions with the platform, and device/browser information.

d. Payment Data

Payments are processed by third-party payment providers such as Stripe. We do not store full card numbers, CVV codes, or full bank account details on our own servers.

We may store limited payment-related metadata necessary to operate the platform, such as:

• payment status,
• payout status,
• transaction references,
• and related booking/payment records.

e. Communications

• emails sent through or in relation to the platform
• support requests
• operational messages linked to bookings or accounts

f. Provider and Client Records

Where users use AISynit for professional workflows, the platform may store client-related and provider-related records entered by users as part of the service.

This may include general service records and, in some cases, information that may be considered health-related or otherwise sensitive depending on the type of provider using the platform.

3. How We Use Personal Data

We use personal data for the following purposes:

• to create and manage accounts
• to operate the AISynit platform
• to connect Clients and Providers through platform workflows
• to process bookings, payments, and payouts
• to send transactional and service-related emails
• to provide operational tools, analytics, and AI-powered features
• to improve the platform and user experience
• to protect the platform against fraud, misuse, and security threats
• to comply with legal, regulatory, tax, accounting, and record-keeping obligations

We do not sell personal data to third parties.
We do not use personal data for third-party advertising or targeted advertising.

4. Special Categories of Data / Health-Related Data

Some Providers, such as physiotherapists or other health-related professionals, may use AISynit to store records that include health-related or otherwise sensitive information.

Where such data is processed through AISynit:

• it is processed only for the operation of the platform and the workflows enabled by the relevant user,
• access is restricted based on user roles, permissions, and platform relationships,
• and we take additional care in how such data is stored, accessed, and protected.

Providers are responsible for ensuring that their use of AISynit complies with applicable legal, regulatory, and professional obligations relating to the information they process.

5. Legal Bases for Processing

Depending on the context, AISynit may process personal data on the basis that it is necessary:

• to provide the services requested by users,
• to operate and secure the platform,
• to comply with legal obligations,
• and, where appropriate, for our legitimate interests in improving and managing the platform.

Where consent is required under applicable law, we will request it separately.

6. AI-Powered Features

AISynit may provide AI-powered features such as summaries, business insights, or operational support.

Where user data is used to generate AI-powered features, it is processed for the purpose of providing the requested functionality.

AI-powered features are currently processed through Google Gemini. Where user data is included in AI processing, identifying information is minimised where possible. For example, client names are not transmitted. Health-related and operational data may still be included where necessary to generate the requested output. This processing is subject to appropriate operational controls.

AI-generated outputs are intended to support users and should not be treated as a substitute for professional, clinical, financial, or legal advice or judgment.

7. Third-Party Services

We use third-party services to help operate AISynit. These providers may process personal data on our behalf or as independent service providers, depending on the service.

Current third-party services may include:

Stripe

Used for payment processing, payouts, and related payment operations. See Stripe's Privacy Policy.

SendGrid / Twilio SendGrid

Used for transactional email delivery, such as invitations, confirmations, and account emails. See Twilio/SendGrid's Privacy Policy.

Google Cloud Platform

Used for cloud hosting, infrastructure, and related technical services. See Google Cloud's Privacy Notice.

Google Gemini (Google AI)

Used to provide AI-powered features, including business insights and operational support tools. Limited user data may be processed through Google's Generative AI services to generate these features, with identifying information minimised where possible. See Google's Privacy Policy.

We may update this list from time to time as the platform evolves.

8. International Data Transfers

Depending on where users are located and where our service providers operate, personal data may be processed in countries outside the user's home jurisdiction.

Where required, we take reasonable steps to ensure that such transfers are made with appropriate safeguards.

9. Data Retention

We retain personal data for as long as necessary to:

• provide the platform,
• maintain accounts,
• support bookings and payment records,
• meet legal, tax, accounting, and regulatory obligations,
• resolve disputes,
• and protect the platform.

If you request account deletion, we will aim to remove or anonymise personal data within a reasonable period, unless we need to retain certain information for legal, compliance, security, or financial record-keeping reasons.

Payment-related records may be retained for longer where required by law or accounting obligations.

10. Data Security

We implement technical and organisational measures intended to protect personal data, including measures such as:

• encryption in transit (TLS/HTTPS)
• access controls
• secure password hashing
• infrastructure protections
• role-based or permission-based access where appropriate
• and review of operational security practices

No system is completely secure, and we cannot guarantee absolute security. However, we take reasonable steps to protect the data processed through AISynit.

11. Cookies

AISynit uses cookies and similar technologies necessary for the operation of the platform, including maintaining sessions and core functionality.

We do not currently use third-party advertising cookies. If our cookie use changes materially, we will update this Privacy Policy and any relevant cookie notices.

12. Children's Privacy

AISynit is not intended for children under 18 years old.

We do not knowingly collect personal data from children. If we become aware that we have collected such data, we will take appropriate steps to delete it.

13. Your Rights

Depending on where you are located and the laws that apply to you, you may have rights relating to your personal data, including the right to:

• access the personal data we hold about you
• request correction of inaccurate or incomplete data
• request deletion of personal data
• request restriction of processing
• object to certain types of processing
• request a portable copy of certain personal data
• withdraw consent where processing relies on consent

To exercise any such rights, contact us at hello@aisynit.tech.

We will respond within a reasonable timeframe and, where applicable law requires it, within the legally required period.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will aim to notify users through the platform, by email, or by updating the effective date above.

Continued use of AISynit after an updated Privacy Policy takes effect means you acknowledge the revised Privacy Policy.

15. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: hello@aisynit.tech
Website: aisynit.tech