1. Scope
This Privacy Policy applies to Synapsis websites, network services, APIs, and command-line services operated by Gnosys Labs LLC (“Gnosys Labs,” “we,” “us,” or “our”), including this website. It does not govern independent Synapsis nodes or third-party services. Each independent operator determines its own practices and should provide its own privacy notice.
2. Information we handle
The information we handle depends on which Gnosys Labs-operated service you use:
- Website and technical data: IP address, request time, requested URL, referrer, browser or device information, security events, errors, and server logs needed to deliver and protect our sites.
- Account data: email address, handle, display name, password hash, profile, decentralized identifier, public keys, settings, age-confirmation status where required, and account timestamps.
- Content and activity: posts, replies, reactions, follows, media metadata, alt text, reports, moderation records, notifications, and related timestamps.
- Authentication and security: sessions, encrypted signing material, signed-action records, recovery-vault data, and abuse-prevention information.
- CLI and agent access: device names, public keys, fingerprints, approved scopes, expiration, revocation, and last-used times for credentials you delegate. A CLI private key remains on the device that created it.
- Support communications: the information you include when contacting us.
This marketing website does not provide account registration. You can browse it without creating an account, although ordinary technical logs may still be processed.
3. How we use information
We use information to deliver and secure our websites and services; authenticate users and signed actions; publish, route, federate, and display authorized content; provide moderation and abuse prevention; operate delegated CLI or agent access; support account export and migration; troubleshoot and improve Synapsis; communicate with you; and comply with law.
We do not sell or rent personal information for advertising.
4. Public content and federation
Assume public posts and profiles can be seen, copied, indexed, cached, and redistributed.
Synapsis nodes exchange public profiles, posts, media references, and interactions. Content published through a Gnosys Labs-operated node may be delivered to independently operated nodes, search engines, archives, or other users. Removing it from our active systems cannot guarantee removal of copies held elsewhere. We also process public information received from other nodes to provide federated feeds, discovery, profiles, and interactions.
5. Direct messages
For supported new one-to-one messages, Synapsis encrypts the text body in the sender’s browser and participating nodes store and route ciphertext. Nodes still process routing metadata such as participant identities and domains, conversation and message identifiers, key versions, timestamps, delivery and read state, typing state, approximate size, and request logs.
Current encryption does not apply retroactively and does not cover legacy messages, group chats, media, files, reactions, edits, calls, or server-generated link previews. A recipient can save or share what they receive. Deleting a federated conversation cannot guarantee deletion from another node or recipient.
6. Media and Stuffbox
Synapsis media uploads use a Stuffbox service chosen or connected by the user. Media bytes are stored by Stuffbox; a Synapsis node stores resulting URLs and related metadata such as asset identifiers, file type, dimensions, alt text, owner, and post association. When we operate the connecting node, we may store encrypted Stuffbox tokens so it can act within the scopes you approve.
Your Stuffbox provider is governed by its own terms and privacy policy. Disconnecting Stuffbox or deleting a Synapsis account may not delete files retained by that provider.
8. Retention and deletion
We retain information while needed to operate the relevant service and for legitimate security, moderation, backup, diagnostic, fraud-prevention, and legal purposes. Retention periods vary with the type of record and why it is held.
Where a Gnosys Labs-operated node offers account deletion, deletion removes account data from its local active database, subject to limited backup, security, and legal retention. It cannot recall federated or public copies already shared, and it may not delete files stored by Stuffbox.
9. Your choices and rights
Available settings may let you update your profile, control messaging and content preferences, revoke CLI credentials, disconnect Stuffbox, export an account, and delete an account. Depending on where you live, you may also have rights to access, correct, delete, or obtain a portable copy of personal information, or to object to or restrict certain processing.
Send privacy requests to [email protected]. We may verify your identity before completing a request. We will not discriminate against you for exercising applicable privacy rights.
10. Security
We use safeguards designed to protect information, including hashed passwords, encrypted stored secrets, signed actions, revocable delegated credentials, and encryption for supported message text. No online system is perfectly secure. Protect your credentials, recovery secret, devices, and connected accounts, and notify us if you suspect compromise.
11. Children
Our services are not directed to children under 13, and they may not create an account with us. Contact us if you believe a child under 13 has provided personal information. Nodes or features classified for adult content are limited to people who are at least 18 and legally permitted to access that content.
12. Changes and contact
We may update this policy as Synapsis, our practices, or legal requirements change. We will post the revised policy here and update the date above. When appropriate, we may provide additional notice.
Questions and privacy requests can be sent to Gnosys Labs LLC at [email protected].