Privacy Policy

1. Who we are

SYNLUMEX INTEL ("we", "us", "our") operates an operating system for project-driven businesses. This Privacy Policy explains what data we collect, how we use it, and your rights.

Contact: abdul@synlumexai.com

2. Information we collect

Account information

SYNLUMEX is invite-only. When your account is provisioned, we store: full name, work email, company name, role, and login timestamps. We do not accept public signups.

Project and operations data

When you use the platform, you provide:

• Project details, lifecycle stages, milestones
• BOQ items, estimates, procurement records
• Uploaded PDFs (specs, contracts, BOQs) for AI extraction
• Execution progress updates and evidence
• Billing, collection, and invoice records
• Exceptions, reminders, and audit log entries

3. How we use your information

• Deliver the core product: lifecycle tracking, BOQ extraction, AI risk analysis, commercial visibility
• Authenticate users and enforce workspace isolation
• Send operational notifications (project health, trial reminders, weekly digests)
• Respond to support requests
• Maintain audit trails for compliance and traceability
• Improve reliability and detect abuse

4. Multi-tenant isolation

SYNLUMEX is a multi-tenant platform. Every organization has an isolated workspace. Database-level Row Level Security (RLS) enforces isolation. Our internal team cannot access your project data unless you explicitly authorize an impersonation session for support — and every impersonation is logged in your audit trail.

5. AI processing

AI features use one or more third-party providers (Groq, Cerebras, OpenRouter, Google Gemini). When you trigger AI extraction or analysis:

• Document text or project snapshot is sent to the AI provider for processing
• Results are returned and stored in your workspace
• Your data is not used to train AI models
• We log which provider was used for each request (for debugging)

AI output should always be reviewed by your team before being relied on for financial, safety-critical, or legally binding decisions.

6. How we store your information

Data is stored in a Supabase Postgres database hosted on AWS with encryption in transit and at rest. File uploads are stored in encrypted Supabase Storage. We retain account and project data for as long as your account is active. On request, we will delete or export your data within 30 days.

7. Sharing your information

We do not sell your data. We share data only with:

• Infrastructure providers (Supabase, Vercel, Resend) strictly to operate the service
• AI providers, only when you trigger AI features
• Internal team members who need it for support, with your authorization
• Legal authorities, only when required by law

8. Your rights

You may request to:

• Access a copy of your data
• Correct inaccurate information
• Delete your account and associated data
• Export your project data in a machine-readable format
• Object to specific processing activities

Email abdul@synlumexai.com to exercise any of these rights.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email to the account owner.

10. Contact

Questions? abdul@synlumexai.com