Privacy & your data

Privacy, written plainly.

Last updated August 2026 · Version 2.0

This notice is written plainly, not to obscure. Cyncerity is built on the belief that communication should be clear and honest — this document reflects that. We tell you exactly what we collect, why, and what you can do about it. To be plain about the most important part: during this beta, the draft you ask Cyncerity to look at is sent to our server to generate the analysis, and is discarded the moment the analysis is returned. It is never stored, never logged, and never used to train any model. The fully local version — where the analysis runs on your own machine and your text never leaves it — is what we are building toward. It is not what this beta does.

Who we are

Cyncerity is developed and operated by a company of the same name, based in Milan, Italy. We are the data controller for any personal data collected through this website and the Cyncerity beta programme.

Data Controller: Cyncerity, Milan, Italy
Contact: info@cyncerity.xyz

What data we collect and why

We collect only what is necessary. At this stage we handle three kinds of data: your waiting-list email address, the draft you submit for analysis, and anonymous usage signals. The first is the only one we store:

–Email address — provided voluntarily when you sign up to the beta waiting list. Used solely to notify you when your beta access is ready and to send relevant product updates during the beta period.

Beyond the waiting list, the beta extension handles two further kinds of data. Your message text: when you ask for an analysis, the draft in your compose window is transmitted to our server, analysed, and discarded immediately afterwards. It is held only in memory for the seconds the analysis takes. We do not keep it, we do not write it to logs, and we do not use it — in whole or in part — to train or fine-tune any model. We cannot retrieve a draft you sent us yesterday, because it no longer exists. Anonymous usage signals: whether an analysis was marked helpful, how often you come back, and basic device capability information, so we can tell whether the product works and whether the machine could eventually run the analysis locally. These signals never include message content and are not linked to your identity.

Legal basis for processing (GDPR Article 6)

We process your data under the following legal bases:

–Consent (Art. 6(1)(a)) — when you submit your email address to join the waiting list, you are giving explicit consent for us to contact you about Cyncerity beta access and product updates. You can withdraw this consent at any time.

–Consent (Art. 6(1)(a)) — when you ask Cyncerity to analyse a draft, you are consenting to that text being transmitted to our server for the seconds the analysis takes. It is discarded immediately afterwards and never stored. You give this consent each time you request an analysis, and withdraw it simply by not requesting one.

–Legitimate interest (Art. 6(1)(f)) — for anonymous usage signals (page views, button interactions, helpfulness ratings, device capability) used to understand product performance and guide development, where this does not override your interests or fundamental rights.

Who we share your data with

We do not sell your data. We do not share your email address with third parties for marketing. Your message text is processed on our own server infrastructure for the duration of the analysis and is not sold, shared, or published anywhere. The data sharing that does occur is:

–Formspree — when you submit your email through a form on this site, it is transmitted and stored via Formspree, our form-handling provider: formspree.io/legal/privacy-policy.

–Resend — when we send you a beta invitation or product update, we deliver it through Resend, our email service provider: resend.com/legal/privacy-policy.

International transfers

Your email address is handled by Formspree and Resend, which operate in the United States. Submitting your email therefore involves a transfer of that data outside the European Economic Area (EEA). Message text sent for analysis is processed on our server infrastructure and is not retained anywhere after the analysis completes.

Both providers participate in frameworks designed to provide adequate protection for such transfers. For the current status of these safeguards, please refer to their respective privacy policies.

How long we keep your data

–Waiting list email addresses — retained until (a) you unsubscribe, (b) we contact you with beta access and you either join or decline, or (c) we determine the beta programme will not proceed, at which point all emails will be deleted within 30 days.

–Message text — not retained. Your draft exists on our server only in memory, for the seconds the analysis takes, and is discarded as soon as the result is returned. Retention period: none.

Your rights under GDPR

You have the following rights regarding your personal data. To exercise any of them, contact us at the address below.

Access

Request a copy of the personal data we hold about you.

Erasure

Request deletion of your personal data at any time, without reason.

Rectification

Ask us to correct inaccurate data we hold about you.

Portability

Receive your data in a structured, machine-readable format.

Withdraw consent

Withdraw your consent to processing at any time. This does not affect prior lawful processing.

Object

Object to processing based on legitimate interest where your interests override ours.

You also have the right to lodge a complaint with your national data protection authority. In Italy, this is the Garante per la protezione dei dati personali (garanteprivacy.it).

Cookies and tracking

This website uses the following third-party tools to understand how visitors interact with our product:

–Google Analytics — collects anonymous usage data (page views, session duration, geographic region) via cookies. May involve data transfer to the United States. You can opt out via Google's opt-out tool.

–Microsoft Clarity — records session data including mouse movements and clicks to help us understand how visitors use this product. No personally identifiable information is captured. Data is processed by Microsoft under their privacy policy.

Changes to this notice

This notice covers the current Cyncerity website, its beta waiting list, and the validation beta of the extension, in which analysis runs on our server. When we ship the fully local version — the direction the product is building toward — we will revise this notice to describe it, before it becomes available. The 'Last updated' date at the top reflects the most recent revision, and we will notify waiting-list subscribers of material changes by email.

Questions or requests

To exercise your rights, request deletion of your data, or ask any question about how we handle your information:

info@cyncerity.xyz

We will respond to all requests within 30 days, in line with GDPR requirements.