Privacy Policy

Website Scope

This website (synthector.com) is a static informational site hosted on GitHub Pages. It provides a synthetic illustration, a controlled sandbox access-request form, and a live token-gated sandbox for synthetic or approved non-confidential text.

The site uses limited first-party aggregate metrics to understand whether visitors see and use those paths. Access requests and sandbox usage are separate backend operations and are not inferred from browser events.

Aggregate Website Metrics

The site records aggregate application events for page views, sandbox-access and existing-token calls to action, request-form and sandbox-panel views, and technical-fit link clicks. A placement label may identify whether a call to action appeared in navigation, the hero, the evaluation section, the final section, or after a sandbox result.

Optional first-party source and campaign labels use the bounded query parameters s_src and s_cmp. Unrecognized labels are reduced to unknown. Raw referrer URLs are not collected by the website metrics endpoint.

These aggregate metrics have the following collection limits:

• No cookies, local storage, or session storage
• No persistent visitor, browser, or session identifier is created or collected
• No browser fingerprints, IP addresses, or full user-agent strings are used as analytics dimensions
• No email addresses, company, role, or use-case form values are collected as analytics
• No sandbox tokens, sandbox input, transformed output, or detected substrings are collected as analytics
• No keystrokes, field values, or raw referrer URLs are collected as analytics

Metrics failures do not block the informational site, access-request form, or controlled sandbox. Aggregate website and operational counts may be included in internal activity summaries, without raw email addresses, token values, sandbox text, or transformed output.

Sandbox Access Requests

If you request controlled sandbox access, the form separately submits the details you provide for email verification, manual access review, follow-up, and abuse control. This authoritative backend request record, rather than a browser click event, is the source of truth that a request was submitted. Do not include sensitive or confidential information in the form.

Submitted fields may include:

• Work email address
• Optional company and role
• Workflow category
• Optional brief use case
• Terms acceptance
• Bounded first-party source and campaign labels

The form does not issue tokens automatically, create a product account, upload files, or send its free-text fields to website analytics. Verified requests may be approved or rejected manually; approved tokens are delivered through the existing controlled process.

Controlled Sandbox

The controlled sandbox requires a manually issued token and is intended only for synthetic or approved non-confidential text. Do not enter real personal, customer, employee, patient, financial, or confidential data.

Each run sends the sandbox token, selected workflow category, and current text to the controlled sandbox endpoint. The panel keeps the token, input, and returned output in page state while the page is open and provides a clear control. It does not place those values in cookies, browser storage, or the URL.

Token, input, and output are not sent to the website metrics endpoint. The current sandbox path is designed to avoid intentional persistence of raw input or transformed output. Backend token records may retain token hashes or prefixes, expiry and status metadata, aggregate usage counters, and last-used metadata.

The browser may display minimized output, bounded counts, evidence, and usage limits returned by the sandbox. Those results describe the current run; the public token sandbox does not make a general accuracy, compliance, or production-readiness claim.

No Third-Party Analytics or Browser Analytics Storage

This site does not add:

• Third-party analytics tools or advertising services
• Tracking pixels
• Analytics cookies
• Local or session storage for analytics
• User tracking or profiling

Infrastructure Logs

Infrastructure providers may process standard technical connection data necessary to deliver, secure, and operate the site. GitHub Pages may collect standard technical logs such as IP address, browser information, and request metadata as part of hosting the site. That handling is governed by GitHub's Privacy Statement.

Email Communication

If you contact us at contact@synthector.com, we use your email address and message to respond. Sandbox access request details are processed for verification, manual access review, follow-up, and abuse control; they are not added to website analytics.

Retention and Privacy Principles

Current handling is designed around:

• Transparency: this policy distinguishes aggregate website events, access-request records, and sandbox operations
• Data minimization: website metrics use fixed aggregate labels without persistent visitor identity
• Purpose limitation: access details support verification and access review; token metadata supports controlled sandbox operation
• Storage limitation: operational records are bounded by their stated purpose and current retention controls

Synthector API Service

The current synchronous text path is designed to process input for the request, return minimized text, avoid intentional persistence of input or transformed customer text, and retain only bounded operational state such as evidence metadata, metering, aggregate statistics, and standard logs where required.

Third-Party Services

This site is hosted on GitHub Pages and loads IBM Plex fonts from Google Fonts. It does not embed third-party analytics, advertising scripts, or third-party tracking widgets. Bundled open-source frontend code supports presentation and interface behavior; it does not separately receive sandbox tokens, input, or output.

Changes to This Policy

Updates to this policy will appear on this page with a revised "Last updated" date.