Skip to content
Legal

Privacy Policy

Last updated: June 27, 2026

1. Who we are

Synapse Academy, operated by Pixels & Bytes, is the data controller for the personal data described in this policy. You can reach us at synapse@pixelbytes.no.

2. Data we collect

Account data (name, email, company); learning data (enrollments, progress, sessions attended, exercise answers); content you submit to the AI tutor; usage and analytics data (only with your consent); and technical data such as IP address, device, and cookies.

3. How we use your data and our lawful basis

To provide the service (performance of a contract); to personalise the AI tutor (contract / legitimate interest); to send service emails (contract); to send marketing communications (only with your consent); and to improve the product through analytics (only with your consent).

4. AI processing

Your messages and the relevant course context are sent to our AI provider (Claude via Azure AI Foundry) to generate tutoring responses. We do not use your content to train third-party models.

5. Sharing

We share data only with service providers acting as processors under contract (including Supabase, Railway, Vercel, SendGrid, Azure AI Foundry, Whereby, and Tavus). We never sell your personal data.

6. Retention

We keep account data while your account is active. On deletion we anonymise your personal data (see section 8) and retain only non-identifying records required for integrity or legal reasons.

7. Your rights

You have the right to access, rectify, erase, port, restrict, and object to the processing of your personal data, and to withdraw consent at any time. You can exercise the main rights directly in Settings (export your data or delete your account) or by contacting us.

8. Account deletion and anonymisation

Deleting your account scrubs your personal data (name, email, profile, chat content, and free-text notes) and disables sign-in. Some records tied to other users' rights — for example course content you authored as a tutor — are retained in anonymised form.

9. International transfers

Your account, learning, and content data is stored in our primary database (Supabase), hosted in the European Economic Area (EEA). Where personal data is processed by a service provider outside the EEA, we rely on appropriate safeguards — principally the European Commission's Standard Contractual Clauses — so that your data continues to receive an equivalent level of protection.

10. Contact and complaints

Questions or requests: synapse@pixelbytes.no. You also have the right to lodge a complaint with your local data protection supervisory authority.