Privacy Policy

Privacy Policy

Last Updated: August 15, 2026

This Privacy Policy describes how Syvon.ai ("Syvon.ai," "we," "us," or "our"), operated by Infty Global, a company based in Panama, collects, uses, and discloses your information in connection with the Syvon web platform, including www.syvon.ai and its subdomains (the "Service"). It is intended to comply with Panama's Law 81 of 2019 on Data Protection, and to honour the rights GDPR gives EU/EEA visitors and the CCPA/CPRA gives California residents.

1. Information We Collect

1.1. Information you provide

  • Account information: your email address, name, and profile image. When you sign in with Google or Apple, we receive your name and email address from those providers.
  • Content you create: the brands, compositions, designs, prompts, media, and other material you create, upload, or generate within the Service.

1.2. Information collected automatically

  • Usage data: pages visited, features used, and approximate device/browser information, collected through the analytics tools described in our Cookie Policy.
  • Technical logs: server logs containing request metadata (timestamps, IP addresses as processed by our infrastructure providers) used for security, rate limiting, and abuse prevention.

1.3. Use without an account

Parts of the Service (for example, asking a question, text-to-speech, or transcription) can be used without creating an account. In that case we do not ask for identity; we process a one-way hashed identifier derived from your IP address for rate limiting and abuse prevention only. We do not build profiles of anonymous visitors.

2. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To generate, render, and deliver the content you request, using third-party AI providers listed in our subprocessor list.
  • To authenticate you, manage your account, and provide customer support.
  • To meter usage against your plan or credit balance, and to process payments through our billing providers.
  • To monitor the security and integrity of the Service, and to prevent abuse.
  • To comply with legal obligations.

Our legal bases (where GDPR applies) are: performance of a contract for operating your account and delivering the content you request; legitimate interests for security, abuse prevention, and service improvement; and consent where required (for example, analytics cookies).

3. AI Processing and Your Content

Your prompts and content are transmitted to third-party AI model providers (listed in our subprocessor list) solely to generate the output you request. We do not use your content, prompts, or generated media to train our own models or those of our providers.

4. Data Sharing and Disclosure

We do not sell your Personal Data. We share it only with:

  • Service providers that process data on our behalf — hosting, storage, email delivery, billing, and AI generation — under contractual data-protection terms. See Subprocessors.
  • Authentication providers (Google, Apple) when you use their sign-in.
  • Legal requirements: where disclosure is required by law or valid legal process.
  • Business transfers: in the event of a merger, acquisition, or asset sale.

5. International Data Transfers

Our infrastructure and providers operate primarily in the United States. Where personal data is transferred out of the EEA, UK, or Switzerland, we rely on the provider's certification under the applicable Data Privacy Framework or on Standard Contractual Clauses.

6. Your Rights

Wherever you are, the Service gives you the same practical controls:

  • Access and portability: download a machine-readable copy of your data from Account → Download my data.
  • Erasure: delete your account and its data from Account → Delete my account. Workspaces you own that contain other members must be handled first so collaborators are not locked out.
  • Rectification: correct your profile details from the account page.
  • Objection and restriction: contact us using the details below.

Under the CCPA/CPRA, California residents additionally have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to not have personal information sold or shared — we do not sell or share personal information as those terms are defined in the CCPA, and we honour Global Privacy Control signals.

To exercise any right, use the in-product controls above or contact us at contact@syvon.ai. We respond within 30 days.

7. Retention

Account data is retained while your account is active. On deletion, workspace content you solely own is removed from our databases and object storage; backups and caches age out on their retention schedules (see our backup practices). Billing records are retained as long as required by tax law.

8. Data Security

We protect your information with encryption in transit, encryption at rest, access controls, audit logging of privileged operations, and rate limiting on public endpoints. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed at anyone under 18. We do not knowingly collect personal data from children under 18.

10. Changes

We may update this policy; the "Last Updated" date above changes when we do. Material changes are announced on this page.

11. Contact

Questions: contact@syvon.ai