SynthWeave
Talk to us

Legal

Privacy Policy

Last updated: September 7, 2026

Synthweave LLC ("Synthweave," "we," "us," "our") provides a shared-context platform for teams and AI agents, available at synthweave.ai and app.synthweave.ai, together with related APIs and integrations (the "Service"). This policy explains what information we collect, why we collect it, how we use it, and the choices you have.

Scope

  • Visitors to synthweave.ai.
  • Users of the Synthweave application at app.synthweave.ai.
  • Data we receive from third-party platforms, including Meta Platforms and Google, when a customer connects those platforms to the Service.

Information you provide

  • Account information. Name, email address, organization name, and password or single-sign-on identifiers when you create an account.
  • Content you store. Documents, notes, tasks, and other content you or your team create in the Service.
  • Communications. Information you send us by email or through support channels.

Information collected automatically

  • Usage data. Pages viewed, features used, timestamps, and referrers.
  • Device and log data. IP address, browser type, operating system, and standard server logs.
  • Cookies. We use cookies and similar technologies to keep you signed in and to understand how the Service is used. You can control cookies through your browser settings.

Information from connected platforms (including Meta)

Customers can connect third-party advertising and business platforms to the Service. When a customer connects Meta Business assets, we access data through Meta's APIs (including the Marketing API) under the permissions the customer grants, such as ads_read, ads_management, and business_management. This data can include:

  • Ad account settings and structure (campaigns, ad sets, ads, budgets).
  • Ad creative content and delivery status.
  • Aggregate performance metrics (impressions, clicks, spend, conversions).
  • Business and Page metadata needed to operate the connection.

We use this data only to provide the Service to the customer who connected the assets: to build, manage, and report on their advertising at their instruction. Specifically:

  • We do not sell this data.
  • We do not use one customer's platform data for any other customer.
  • We do not use this data for advertising of our own.
  • We access only the assets and permissions the customer grants, and the customer can revoke access at any time in their Meta Business settings or in the Service.

Our use of data received from Meta complies with the Meta Platform Terms and applicable Meta developer policies.

Information from connected platforms (including Google)

Customers can connect Google Ads accounts and, optionally, Google Merchant Center, Google Search Console, and Google Analytics accounts to the Service through Google's sign-in and consent screen. When a customer connects Google accounts, we access data through Google's APIs under the permissions the customer grants. Our team operates the tool to plan, create, manage, and report on advertising on behalf of customers. Customers grant account access but do not log into or operate the tool themselves. This section explains how we handle information received through Google APIs.

What we access, and why

  • Google Ads (the adwordspermission): the account structure, campaigns, ad groups, ads, keywords, budgets, bids, conversion settings, and performance reporting for the accounts the customer authorizes. We use this data to build and manage the customer's campaigns and to report results back to the customer. This is the only Google permission that enables campaign management.
  • Google Merchant Center (the contentpermission), for customers running Shopping campaigns only: product feed, product status, and Merchant Center account configuration, accessed through the Merchant API. We use it to build and keep the customer's product feed current. Customers without Shopping campaigns can decline this permission, and we only act on the Merchant Center account IDs a customer has approved with us in writing.
  • Google Search Console (the webmasters.readonly permission): the list of verified website properties, search performance data (queries, pages, clicks, impressions), index coverage, and sitemap status, read through the Search Console API. We use it to diagnose landing-page issues and to compare paid and organic performance in the reports we prepare for the customer. This permission is read-only: we never change Search Console properties, sitemaps, or settings.
  • Google Analytics (the analytics.readonly permission): the customer's Google Analytics 4 property (traffic, conversions, and revenue by channel), read through the Analytics Data API. We use it to report campaign performance against the customer's own analytics rather than platform-reported numbers only. This permission is read-only: we never modify the property, its settings, or its events. Customers choose which property to connect.

We request no other Google permissions. We do not access Gmail, Drive, Calendar, Contacts, or any Google account data beyond the four services above.

How we use and store it

  • Advertising, feed, search, and analytics data is used solely to provide the Service the customer engaged us for: managing, measuring, and reporting on that customer's own marketing. The Search Console and Analytics permissions are read-only.
  • Access and refresh tokens are held in an encrypted secrets vault, never in our own database, and never alongside customer business data.
  • Each customer's advertising data is kept in a separate, isolated workspace. We do not combine one customer's Google data with another's, and we do not use it to build cross-customer profiles.
  • Advertising, Search Console, and Analytics data is aggregated and is not personal data about individual users. Where Google Ads or Google Analytics reporting contains user-level or customer-level fields, we do not export or store them.

Sharing

We do not sell information obtained through Google APIs, and we do not share it with third parties except service providers who process it on our behalf (hosting, our data platform, and our credentials vault), or as the customer instructs, or where required by law. We do not use it for advertising other than the customer's own campaigns, and we do not use it to train machine-learning models.

Limited Use disclosure

Synthweave's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and revoking access

  • You can revoke Synthweave's access at any time from your Google Account at myaccount.google.com/permissions, or disconnect the integration inside the Service. Revocation invalidates our tokens immediately.
  • When a customer disconnects or ends their engagement, we stop accessing their Google accounts immediately, delete the stored tokens, and erase that customer's advertising data from our systems within 30 days, except where a legal obligation requires longer retention.
  • While the engagement is active, we retain advertising data for as long as it is needed to manage and report on the customer's campaigns.
  • To request deletion of Google-sourced data at any time, submit a request through your account in the Service at app.synthweave.ai. We act on the request within 30 days.

How AI features process your data

The Service uses artificial-intelligence models to provide its features, including summarization, search, and agent-assisted operations. Commitments we make:

  • No training on your data. We do not use your content or your connected-platform data to train our own or third-party foundation models. Data sent to AI model providers is processed to serve your request and is subject to contractual no-training and no-retention terms.
  • Purpose limitation. AI processing happens only to deliver the feature you or your team invoked.
  • Human review limits. Our staff access customer content only to provide support you request, to investigate abuse, or as required by law.
  • Subprocessors. We use a small set of vetted subprocessors (cloud hosting and AI model providers) under data-protection agreements. A current list is available on request through our support channel.

How we use information

  • Provide, operate, and secure the Service.
  • Carry out the advertising and business operations a customer instructs us to perform.
  • Respond to support requests.
  • Monitor performance and improve the Service.
  • Comply with legal obligations.

We do not sell personal information.

How we share information

  • Service providers that host and support the Service (for example, cloud hosting and infrastructure providers), bound by confidentiality obligations.
  • The customer's own connected platforms, at the customer's instruction (for example, publishing a campaign change to the customer's ad account).
  • Authorities, when required by law.

Data retention

We keep account data while an account is active. We keep platform data received from connected platforms only as long as needed to provide the Service to that customer. When a customer disconnects a platform or closes their account, we delete the associated platform data within 30 days, except where the law requires longer retention.

Data deletion

  1. Disconnect the platform.Remove Synthweave's access in your Meta Business settings (Business Settings → Users → System users / Partners); for Google, at myaccount.google.com/permissions; or disconnect the integration inside the Service. This stops all further data access.
  2. Request deletion. Contact us through your account in the Service at app.synthweave.ai and state what you want deleted (a specific platform connection, or your entire account).
  3. Confirmation. We delete the requested data within 30 days and confirm the deletion to you in writing.

International data transfers

We are based in the United States and process data there. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

Security

We use industry-standard safeguards to protect information, including encryption in transit, access controls, and credential management. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us through your account in the Service. We respond within the timeframes required by applicable law.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. We will post the updated version at this URL with a revised "Last updated" date. Material changes will be communicated to account holders by email or in the Service.

Contact

Questions about this policy or our data practices: contact us through your account in the Service at app.synthweave.ai.