What data of yours we process, why and for how long. We don't sell data, we don't build advertising profiles and there's no third-party tracking on the website. If you want to exercise a right or ask anything, write to info@synz.studio.
Pablo Alvar Martínez, tax ID (NIF) 45736346H, address c/ Arquitecto Juan Ochoa 3, Córdoba (Spain). Contact for any data matter: info@synz.studio.
No data protection officer has been appointed: one isn't required for processing of this size and nature.
Only what the service needs to work. This is the full list:
| Data | What for | Legal basis |
|---|---|---|
| Name, email and password (encrypted) | Creating and keeping your account, signing in, resetting your password, answering support requests | Performance of the contract |
| Name, email and photo from your Google account, if you sign in with Google | The same, saving you one more password | Performance of the contract |
| The projects you save to or open from your Google Drive, if you use that option | Saving them to your Drive and opening them when you ask (see Google data and Google Drive) | Performance of the contract and your consent, which you give in Google's window |
| Plan, sign-up and cancellation dates, payment history, last four digits of the card | Charging the subscription, giving you access to what you've paid for, issuing invoices | Performance of the contract and legal obligation (accounting) |
| Projects, recordings, takes and settings you save | Keeping them for you and giving them back when you open the studio | Performance of the contract |
| Username and the takes you publish | Showing them in the community and at their public link | Your consent, which you give when you press publish |
| Email left in a form (beta tester, desktop notice, suggestions) | Sending you what you asked for and, for the beta, managing your place | Your consent |
| Affiliate data: name, email, payment method for commissions, attributed sign-ups | Running the affiliate programme and paying you | Performance of the contract and legal obligation |
| Server technical logs: IP, date, browser, page requested | Keeping the service running, detecting abuse and attacks, diagnosing faults | Legitimate interest in keeping the service secure |
| Error reports you send us from the studio | Reproducing and fixing the fault | Legitimate interest in fixing defects |
We don't use your data for personalised advertising, we don't sell it or pass it to third parties for commercial purposes, and we don't make automated decisions that affect you.
Your projects and recordings are your content, not ours. We don't listen to them or analyse them, and they aren't used to train models. We only access a specific file if you ask us to, to solve an issue, and only while that issue lasts.
A published take is the exception, because publishing it means precisely making it public: anyone with the link can access it until you unpublish it.
SYNZ Studio uses Google APIs in two cases, and only if you choose to:
openid, email and profile scopes). They're used only to create your SYNZ account and sign you in. They're stored with your account, on our server, for as long as the account exists.drive.file scope, the most limited one Google offers: SYNZ can only see and change the files that SYNZ itself creates or opens, that is, the “Proyectos SYNZ” folder and the .synz projects you save in it. It can't see, read or touch any other file in your Drive.What it's used for. Only for what you ask for with a click: creating the “Proyectos SYNZ” folder if it doesn't exist, saving your project, overwriting it when you save again, showing you the list of your projects in that folder and opening the one you pick. Nothing else.
Where the data is and who sees it. Your projects go straight from your browser to your Google Drive and back; they don't go through our servers and we keep no copy. The permission Google grants (an access token that expires after one hour) lives only in your browser's memory while you use the studio and is never sent to our servers. The only thing your browser keeps a note of is the ID of the “Proyectos SYNZ” folder, so it doesn't have to look for it every time. No one at SYNZ opens or listens to your Drive files.
Who it's shared with. No one. Google user data is not sold, not passed to third parties, not used for advertising or profiling, and not used for credit decisions or decisions of any other kind.
Artificial intelligence. Data obtained from Google APIs (including Google Workspace APIs, such as Drive) is not used to develop, improve or train artificial intelligence or machine learning (AI/ML) models, whether general or personalised.
Protection. All connections with Google are encrypted over HTTPS, and the permissions are the minimum each feature needs.
How long it's kept and how it's deleted. The files in your Drive are yours and stay there until you delete them from Google Drive; SYNZ doesn't delete them. You can remove SYNZ's access to your Drive whenever you like at myaccount.google.com/permissions; from then on SYNZ can't read or write anything. To delete the folder note, just clear the site data in your browser. The data from “Sign in with Google” is deleted when you close your account, like everything else (see How long we keep it).
Limited Use. SYNZ Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
With the providers we need to deliver the service, each under its own data processing agreement and limited to its own part:
| Provider | What it does | Where |
|---|---|---|
| Raiola Networks, S.L. | Hosts the website, the app and the database | Spain (EU) |
| Stripe Payments Europe, Ltd. | Processes subscription payments and stores card details | Ireland (EU) |
| Google (Sign-In and Google Drive) | Verifies your identity if you choose to sign in with Google and, if you use “Save to Google Drive”, stores your projects in your own Drive | USA, with the safeguards of the Data Privacy Framework |
| Raiola Networks, S.L. | Sends the service emails (sign-ups, notices, password resets) | Spain (EU) |
We also disclose data when the law requires it or a competent authority asks for it.
If we take on a new provider that processes personal data, this table is updated and the date at the top changes.
After those periods the data is deleted or anonymised, except data that has to be kept blocked to deal with legal liabilities.
At any time you can ask to access your data, correct it, erase it, restrict or object to its processing, and for portability of the data you gave us. You can also withdraw any consent you've given, without affecting what was processed before.
To do so, write to info@synz.studio from your account's email address, or attach something that proves who you are if you write from another one. We reply within one month.
If you think we haven't handled it properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD): aepd.es.
The public synz.studio website has no analytics or advertising cookies, and no social media pixels. There's no cookie banner because there's nothing to consent to.
What we do use is technical storage, the kind the law exempts from consent because it's strictly necessary:
synz-jwt, synz-session). It's deleted when you sign out.SYNZ Academy videos: they come from YouTube in its privacy-enhanced mode (youtube-nocookie.com) and don't load until you press play; until then you only see the thumbnail. When you play one, YouTube's terms apply.
If we ever add analytics, we'll ask for consent first and say so here.
The whole site runs over HTTPS, passwords are stored hashed and never in plain text, and access to the admin area is restricted. No system is foolproof: if there were a breach posing a high risk to your rights, we would tell you and notify the authority within the legal deadlines.
The service is intended for people aged 16 and over. Below that age, consent from a parent or legal guardian is required. If we find an account belonging to a minor without that consent, we close it and delete its data.
If anything relevant changes —a new provider, a new purpose— this page is updated and, when the change affects you, we let you know by email. The date at the top always tells you how recent the version you're reading is.
The terms of use are in the Terms of service.