INDEXERA UAB (code 308066877, V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania) is the controller for personal data on https://synthly.cloud and is called "Synthly" here. This notice follows the EU GDPR.
Data we collect
Account details (name, email, hashed password); your model and service credentials, stored encrypted; billing records (the card itself stays with our payment provider); the pipeline configurations, prompts and files you submit and the output your runs return; and technical signals such as runs dispatched, ledger movements, tokens reserved and debited, API-key activity, IP address and device/browser data. Cookies are handled in the Cookie Policy. Keep sensitive personal data out of your inputs.
Why we process it
- To run the platform and deliver your results — *performance of our contract*.
- To take payment and keep the books — *contract and legal obligation*.
- To support you, secure the service and prevent abuse — *our legitimate interests*.
- For marketing and non-essential cookies — *your consent*.
Your inputs and outputs are never used to train our own models.
Sharing
To execute a run, your input goes to the AI providers and connected services that run uses — ours or the accounts you link — and to the vendors that operate the platform for us (hosting, analytics, support, payments). We don't sell data. We hand it to authorities only where the law compels us.
Transfers abroad
Any transfer outside the EEA is protected by recognised safeguards — the EU Standard Contractual Clauses or an adequacy decision.
How long
Account data: while your account exists. Ledger and billing records: as Lithuanian law requires (up to ten years). Everything else: only as long as it's useful for support and security.
Security
Encryption in transit and at rest, encrypted credentials and access controls. No system is flawless, but we protect your data and report breaches where the law says we must.
Your GDPR rights
Access, correction, deletion, restriction, objection, portability and withdrawal of consent — email [email protected] and expect a reply within a month. Complaints go to the Lithuanian data protection authority VDAI (https://vdai.lrv.lt) or your local regulator.
Children
Under-18s aren't the audience, and we don't knowingly collect their data.
Updates
We'll refresh this notice when needed; the date above tracks the latest version.
Contact
INDEXERA UAB · Company code 308066877 · V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania · +370 691 98652 · [email protected]