Privacy policy

Synaxis, LLC (“Authexis,” “we,” “us,” or “our”) operates the Authexis platform at authexis.app and the Authexis iOS application. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our services.

Browser extension

The Authexis browser extension (available for Chrome and Firefox) lets you capture web content and send it to your Authexis workspace. This section describes what the extension collects and how it behaves.

What the extension reads

When you click the extension button on a page, it reads the page title, URL, and article body from the active tab. If you select text before clicking, it captures that selection instead. Nothing is collected passively — the extension only acts when you initiate a capture.

What the extension sends

Captured content is sent to the Authexis API at authexis.app under your account. The request includes the page title, URL, selected text or article body, and your workspace ID. No content leaves your browser except when you explicitly trigger a capture.

What the extension stores locally

• Your Authexis auth token, encrypted in browser storage
• Your last-used workspace ID, stored in localStorage

What the extension does not do

• It does not track your browsing history or monitor which pages you visit
• It does not run on pages you haven't opened the extension on
• It does not inject scripts into pages to collect data in the background
• It does not send any content without a deliberate action from you

API logs for captured content

When the extension sends a capture request, our servers log the timestamp, IP address, user agent, endpoint, and response code. These logs are retained for 30 days for debugging purposes and are not shared with third parties.

1. Information we collect

Account information

When you create an account, we collect your email address, name, and optional profile details such as preferred name, pronouns, job title, and author biography. Authentication is handled through Supabase, which stores your credentials securely.

Workspace data

Content you create within Authexis — including ideas, articles, drafts, content briefs, voice interview transcripts, and publishing schedules — is stored in your workspace. This data is necessary to provide the core service.

Voice and audio data

When you use the voice interview feature, your audio is processed in real time for transcription. We use Apple Speech Recognition (on-device when available) and OpenAI Whisper for transcription. Audio recordings are not stored after transcription is complete. The resulting text transcripts are stored as part of your workspace content.

Device information

On mobile devices, we collect device tokens for push notifications (if you opt in) and basic device information for app functionality. We do not collect device identifiers for advertising purposes.

Usage analytics

We use PostHog for product analytics to understand how users interact with the platform. This includes page views, feature usage, and session data. PostHog data is used solely to improve the product and is not shared with advertisers.

Feed and source data

RSS feed URLs, newsletter subscriptions, podcast feeds, and Google search queries you configure are stored to power the discovery and curation features of the platform.

2. How we use your information

• Provide, maintain, and improve the Authexis platform
• Generate AI-powered content in your writing voice using Anthropic Claude
• Produce text-to-speech audio using ElevenLabs
• Process payments and manage subscriptions through Stripe
• Send push notifications about content status and briefings (with your permission)
• Deliver daily briefings and content recommendations
• Publish content to connected social media platforms on your behalf
• Analyze usage patterns to improve the product

3. Third-party services

We share data with the following third-party services only as necessary to provide our platform:

• Supabase — Authentication and database hosting. Stores your account data and workspace content.
• Anthropic (Claude) — AI content generation. We send your content briefs, voice transcripts, and writing style information to generate drafts. Anthropic does not use your data to train their models under our agreement.
• OpenAI (Whisper, gpt-image-1) — Speech-to-text transcription when on-device transcription is unavailable, and featured-image generation. Image prompts are derived from your content draft.
• ElevenLabs — Text-to-speech synthesis for voice interview questions. Text prompts are sent for audio generation.
• Cloudinary — Image hosting and CDN for generated featured images.
• Brevo — Daily briefings and notification emails. Receives recipient address and the body of each message we send to you (briefing summaries, content reminders, reply prompts).
• Twilio — Trina SMS notifications. Receives recipient phone number and the body of each SMS we send to you (briefing summaries, content reminders, reply prompts).
• Resend — Inbound email reply handling and transactional email forwarding. Receives the contents of replies you send to Maya so we can route them back into your workspace.
• Sentry — Error monitoring. Receives stack traces and request context when exceptions occur, which may incidentally include user-submitted content. Used to diagnose and fix bugs.
• Stripe — Payment processing. We do not store credit card numbers; Stripe handles all payment data.
• PostHog — Product analytics. Collects anonymized usage data to help us improve the platform.
• Vercel — Web application hosting.
• Railway — Engine and background job hosting.
• Apple Push Notification service (APNs) — Delivers push notifications to iOS devices.

When you connect publishing integrations (such as LinkedIn, Bluesky, or WordPress), content is shared with those platforms according to your publishing schedule and their respective privacy policies.

4. Data retention

Your workspace content is retained for as long as your account is active. If you delete your account, we will delete your personal data and workspace content within 30 days, except where we are required to retain it for legal or compliance purposes.

Analytics data collected through PostHog is retained for up to 12 months.

5. Data security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication through Supabase, and access controls limiting who can access production systems.

6. Your rights

• Delete your account — all personal data and workspace content deleted within 30 days. Contact us at the email below.
• Export your data — contact us to request a data export.
• Update your email — from your account settings page.
• Withdraw optional consent — disable push notifications in device settings or app settings; opt out of analytics in account preferences.

To exercise any of these rights, contact us at privacy@synaxis.ai.

7. Children's privacy

Authexis is not intended for users under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

8. Push notifications

The iOS app may request permission to send push notifications for content status updates, daily briefings, and publishing reminders. You can disable push notifications at any time through your device settings or within the app.

9. Cookies and tracking

The Authexis web application uses essential cookies for authentication and session management. PostHog may set cookies for analytics purposes. We do not use advertising cookies or share data with advertising networks.

10. California privacy rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of any sale of personal information. We do not sell personal information to third parties.

11. International data transfers

Your data may be processed in the United States, where our infrastructure providers are located. By using Authexis, you consent to the transfer of your data to the United States.

12. Governing law

This policy is governed by the laws of the State of Georgia, United States.

13. Changes to this policy

Material changes are notified by email with at least 30 days notice before they take effect. The effective date at the top of this page reflects the most recent update.

14. Contact us

For privacy questions, contact us at:

Synaxis, LLC
Email: privacy@synaxis.ai