Privacy Policy

Contents

Scope

This Privacy Policy explains how SynchrotronAI Inc. collects, uses, discloses, retains, and protects personal information when people visit the website, submit a workflow-review intake, apply for a job, communicate with SynchrotronAI, use ScamFreeLife on the web or in the iPhone and Android apps, evaluate products or services, participate in pilots, use hosted products, or receive professional services and managed services. It also covers people who are not ScamFreeLife users but whose information ScamFreeLife processes, such as callers, message senders, and trusted contacts.

For ScamFreeLife and the website, SynchrotronAI is the controller of your personal information. When a business customer uses Tariff Agent, Capital Agent, or a ScamFreeLife business plan to process personal information about its own staff or contacts, SynchrotronAI processes that information on the customer's behalf under the Data Processing Agreement, and the customer's privacy notice applies.

Some customer engagements may include additional or different privacy, confidentiality, security, and data processing terms. When a signed agreement conflicts with this public Privacy Policy for a covered engagement, the signed agreement controls for that engagement.

Who we are

SynchrotronAI Inc. is a Delaware stock corporation authorized to do business in New Jersey. Public business correspondence may be sent to 1050 U.S. 22, Suite C, Lebanon, NJ 08833. Privacy questions may be submitted through the workflow review intake or, for ScamFreeLife, through Support. SynchrotronAI currently offers its products and paid subscriptions only to customers in the United States.

Personal information we collect

SynchrotronAI collects personal information that people provide directly, information generated by website and product use, information from business systems, and information from third-party services involved in website, CRM, payment, hosting, security, and support operations.

Contact and identity information: name, work email, phone number, company, role, website, and organization details.
Inquiry and workflow information: primary area, what you are looking for, desired timing, estimated investment range, workflow descriptions, systems, questions, attachments if enabled, and other business context submitted through forms or messages.
Job application information: if you apply for a job, your name, contact details, location, LinkedIn or website links, résumé, work authorization and visa sponsorship answers, the answers you give in the application, and notes from interviews.
Commercial and payment information: invoice details, billing contacts, payment status, transaction metadata, and payment-support records. Payment card details are processed by Stripe and are not intended to be stored directly by SynchrotronAI.
Product, pilot, and service information: account details, user roles, product usage, support requests, project artifacts, configuration choices, integration context, workflow data, and customer-provided records when a signed engagement permits that processing.
Technical information: IP address, browser and device details, log data, pages viewed, referral information, security events, performance telemetry, diagnostics, cookies, local storage, and similar technologies.
Communications: emails, meeting notes, support messages, CRM records, intake history, and business follow-up records.
ScamFreeLife account information: name, email address, password (stored as a secure hash) or sign-in identifiers from Apple, Google, or Microsoft, phone number, plan and subscription status, your consent choices, protection settings, and device push notification tokens.
ScamFreeLife protected communications: the email, call, and message information described in the sections below, and the risk assessments, explanations, and recommended actions ScamFreeLife produces about them.
Purchase information: for web purchases, Stripe provides your billing name, address, payment status, and the last digits and type of your card, not your full card number. For store and marketplace purchases, Apple, Google, AWS, or Microsoft provides purchase and subscription records, not your payment details.

Information from third parties

SynchrotronAI may receive information from service providers, cloud providers, payment processors, CRM systems, business partners, public websites, customer administrators, identity providers, and systems that customers authorize SynchrotronAI to integrate with. The specific sources depend on the website feature, product, project, managed service, or customer environment.

Google user data and ScamFreeLife

ScamFreeLife lets a user sign in with Google and, separately, choose to connect a Gmail mailbox for scam protection. Google sign-in provides the user's Google account identifier, name, email address, and profile information. A Gmail connection uses read-only access (the gmail.readonly permission) to receive and analyze incoming inbox messages. When you first connect, ScamFreeLife also imports and analyzes your 20 most recent inbox messages, and it may re-import up to 50 recent messages if it needs to resynchronize. The data processed includes message content, sender and recipient information, subject lines, headers, links, attachment metadata, labels, message and thread identifiers, mailbox history identifiers, and the account address. ScamFreeLife does not use Gmail permission to send, change, or delete messages.

ScamFreeLife uses this information to authenticate the user, establish and maintain the user-authorized Gmail connection, monitor the inbox for new messages, identify scam and phishing signals, produce an explainable risk assessment and recommended Allow, Warn, Quarantine, or Block outcome, display protected communication history, notify a trusted contact when the user has enabled that feature, secure the service, and provide support requested by the user. ScamFreeLife does not use Google user data for advertising, does not sell it, and does not permit humans to read it except when necessary for security, abuse prevention, legal compliance, or user-requested support, or when the user has given specific permission.

Gmail content needed for scam analysis is processed in SynchrotronAI's protected application environment and by the contracted AI service provider identified on the Subprocessors page, which is OpenAI. The production service disables AI response storage, although OpenAI may keep data for a limited period for abuse monitoring under its terms. SynchrotronAI does not use imported Gmail data to train public or shared foundation models. A trusted contact receives only the alert the user has chosen to share. By default this is a risk summary without the message content. If the user turns on full-content sharing for a trusted contact, the alert also includes the subject and up to 2,000 characters of the message.

OAuth access and refresh tokens are encrypted and kept on the server, not exposed to the browser or mobile app. Disconnecting Gmail stops future synchronization, revokes the stored Google authorization, and deletes the stored tokens, but previously imported messages and their assessments remain in the user's ScamFreeLife history until the user asks SynchrotronAI to delete them or deletes the account. Account deletion revokes Google access and deletes the account and associated imported records, subject to limited records that SynchrotronAI must retain for security, fraud prevention, legal, billing, or dispute purposes. Users can also revoke access through their Google Account permissions.

ScamFreeLife's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft Outlook data and ScamFreeLife

ScamFreeLife lets a user sign in with Microsoft and, separately, connect an Outlook or Microsoft 365 mailbox. It requests read-only mail access (Mail.Read) and basic profile access (User.Read, openid, profile, email, and offline_access). It receives notifications of new inbox messages, imports your 20 most recent inbox messages when you first connect, and processes the same kinds of message information, for the same purposes and with the same limits, as described above for Gmail. ScamFreeLife cannot send, change, or delete Outlook messages.

Disconnecting Outlook removes ScamFreeLife's Microsoft notification subscription and deletes the stored tokens. To remove ScamFreeLife's permission from your Microsoft account entirely, you can also remove it in your Microsoft account or organization app permissions. Previously imported messages and assessments remain in your history until you delete them or your account.

Calls, messages, and contacts in ScamFreeLife

Protected phone numbers and call screening: if you set up a protected number or call forwarding, calls to that number go through Twilio. Before screening, the caller hears a notice that an AI voice assistant will screen and transcribe the call. The assistant asks the caller for their name, organization, and reason for calling. The call audio is streamed in real time to OpenAI for screening and transcription and is not recorded or kept by ScamFreeLife. ScamFreeLife keeps the caller's number and caller ID, call times and duration, the transcript, and the risk assessment. You must agree to call transcription and analysis before this feature is turned on.
Text and picture messages: messages sent to your protected number are received through Twilio, and their text and attachments are stored and analyzed. On Android, if you make ScamFreeLife your default messaging app, incoming text and picture messages are uploaded to ScamFreeLife for analysis and stored in your history, and voice attachments are transcribed. Twilio may keep copies of picture message attachments under its own retention practices.
iPhone message filtering: if you turn on ScamFreeLife's message filter in iPhone settings, the filter first checks messages from unknown senders on your device. Only if you allowed network checks are the sender and message text sent to ScamFreeLife for analysis, and ScamFreeLife does not store those messages. Apple handles the filtering under its own terms.
Android call screening: the caller's phone number is sent to ScamFreeLife to check risk. Call audio is not sent.
Contacts: if you allow access, the phone numbers and email addresses of your contacts are uploaded so ScamFreeLife can recognize people you know and avoid flagging them.
Trusted contacts: if you add a trusted contact, ScamFreeLife stores their name, email address, and phone number and sends them the alerts you choose to share, as described in the Google user data section.

ScamFreeLife does not create voiceprints and does not use voice to identify or authenticate anyone. It does not infer health information from communications.

Sensitive information

Communications that ScamFreeLife protects, such as the contents of emails, text messages, and call transcripts, are sensitive personal information under some U.S. state laws, and they may incidentally contain other sensitive information. SynchrotronAI collects and uses this information only with your consent and only to provide and secure ScamFreeLife for you, and does not use it to infer characteristics about you.

SynchrotronAI does not request sensitive personal information through public forms. Do not submit protected health information, government identification numbers, full payment card numbers, biometric data, children's data, precise geolocation, classified information, export-controlled technical data, or other highly sensitive information unless a signed agreement authorizes that processing and appropriate safeguards are in place.

If a customer engagement requires sensitive or regulated data, the applicable agreement should define the data categories, security controls, processing limits, retention, access, subprocessors, and customer responsibilities.

How we use information

SynchrotronAI uses personal information to operate the website, respond to inquiries, evaluate potential work, provide products and services, manage customer relationships, secure systems, process payments, support users, improve operations, comply with law, and protect rights.

Provide ScamFreeLife: authenticate you, connect your accounts and numbers, screen and analyze communications, show your protected history, apply the actions your settings allow, send you alerts, and notify trusted contacts you choose.
Respond to workflow-review requests, contact forms, emails, and business communications.
Review job applications, contact candidates, schedule interviews, and make hiring decisions.
Evaluate fit for professional services, product pilots, SaaS access, managed services, cloud engineering, integrations, data automation, and advisory work.
Create, configure, deliver, host, monitor, support, troubleshoot, and improve products and customer environments.
Process invoices, payments, billing support, tax records, and financial operations.
Detect, investigate, and prevent fraud, abuse, security incidents, policy violations, unauthorized access, and service misuse.
Maintain records, enforce agreements, comply with legal obligations, and respond to lawful requests.
Analyze website and operational performance, diagnose issues, and improve reliability, usability, and security.

Legal bases where required

Where a privacy law such as the GDPR or UK GDPR requires a legal basis for processing, SynchrotronAI relies on:

Contract: to create your account, provide ScamFreeLife and the services you ordered, and process payments.
Consent: to connect your mailbox, screen and transcribe calls, analyze messages, access your contacts, and set non-essential cookies. You can withdraw consent at any time by disconnecting the feature or changing your settings, without affecting earlier processing.
Legitimate interests: to process information about callers, message senders, and trusted contacts so we can protect our users from fraud; to secure our services and prevent abuse; to respond to business inquiries; and to improve our website. We have weighed these interests against the rights of the people involved and limit what we keep about them.
Legal obligation: to keep tax and accounting records and respond to lawful requests.

Customer data and AI model improvement

SynchrotronAI does not use customer confidential data from signed engagements to train public foundation models unless a customer expressly agrees in writing. SynchrotronAI may use operational metadata, logs, aggregated information, de-identified information, or synthetic examples to maintain security, monitor reliability, debug systems, improve internal processes, and develop generalized know-how, provided that this does not disclose customer confidential information in violation of an applicable agreement.

For ScamFreeLife, SynchrotronAI does not use the content of your communications, transcripts, or assessments to train AI models, and our AI provider is not permitted to use them to train its models.

If a project uses third-party AI services, the applicable order, architecture, provider terms, data processing terms, and customer instructions should define which providers are used, what data is sent, retention settings when available, and the human-review controls required for the workflow.

How we disclose information

SynchrotronAI may disclose personal information when needed to run the business, provide services, comply with law, or protect users and systems.

Service providers and subprocessors: providers for hosting, DNS, CDN, security, payments, CRM, forms, cloud infrastructure, source control, deployment, monitoring, support, and operations. The current core list is available on the Subprocessors page.
People you choose: trusted contacts you add receive the alert summaries you choose to share.
App stores and marketplaces: Apple, Google, AWS, and Microsoft receive information needed to process purchases and subscriptions you make through them.
Customer organizations and administrators: when use is connected to an employer, customer, pilot, product account, managed service, or customer-controlled environment.
Third-party integrations: when customers direct SynchrotronAI to connect with customer systems, cloud providers, identity providers, data stores, APIs, or business applications.
Legal, safety, and compliance recipients: when disclosure is necessary to comply with law, enforce agreements, protect rights, investigate abuse, respond to lawful requests, or prevent harm.
Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, diligence process, or similar transaction.
With consent or direction: when a customer, prospect, user, or authorized administrator asks SynchrotronAI to disclose information.

No sale of personal information

SynchrotronAI does not sell personal information and does not share personal information for cross-context behavioral advertising or targeted advertising, whether it is collected on the website or through ScamFreeLife. SynchrotronAI may disclose information to service providers and subprocessors for business purposes described in this policy.

Cookies and similar technologies

SynchrotronAI uses cookies, local storage, scripts, and similar technologies for website operation, theme preference, security, forms, CRM functionality, payment flows, diagnostics, and potential measurement. More detail is available in the Cookie Notice.

Marketing communications

SynchrotronAI may use business contact information to respond to inquiries, follow up on potential work, provide requested materials, and send relevant business communications. ScamFreeLife sends account, security, billing, and alert messages, and does not send marketing text messages. You can ask SynchrotronAI to stop non-essential marketing communications through the workflow review intake. Transactional, security, legal, support, and relationship communications may still be sent when needed.

Third-party links and integrations

The website and customer engagements may link to or integrate with third-party websites, cloud services, payment processors, CRMs, identity providers, APIs, documentation, and customer-selected systems. Third-party services process information under their own terms and policies unless a signed agreement says otherwise.

Retention

SynchrotronAI retains personal information for as long as needed for the purpose collected, the period required by law, the period needed for legitimate business records, or the period stated in an applicable agreement. Retention periods vary by data type, relationship, product, service, legal obligation, security need, and customer instructions.

For ScamFreeLife:

Imported emails, messages, call transcripts, and assessments are kept in your history until you delete them or delete your account.
Mailbox tokens are deleted when you disconnect the mailbox or delete your account.
Call audio is not recorded or kept. Messages checked by the iPhone message filter are not stored.
A protected phone number is released 30 days after your subscription ends.
When you delete your account, your account and the associated records are deleted promptly, and database backups containing them expire within 14 days.
Billing and tax records are kept as long as tax and accounting laws require.

Job applications are kept for up to two years after the role is filled or closed, so we can consider candidates for future openings, unless you ask us to delete yours sooner or the law requires us to keep it longer.

When information is no longer needed, SynchrotronAI will delete, de-identify, aggregate, or archive it according to business, legal, security, and contractual requirements.

Security

SynchrotronAI uses administrative, technical, and organizational safeguards designed to protect personal information. Controls may include access restrictions, cloud security controls, encryption where appropriate, logging, monitoring, secure development practices, vendor review, and incident response procedures. No system is perfectly secure, and customers remain responsible for their own environments, credentials, endpoints, permissions, instructions, and data choices.

More detail is available on the Security page.

International transfers

SynchrotronAI is based in the United States, and ScamFreeLife and our other hosted products store data in the United States. Our providers may process information in the United States and other countries. When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to the United States or another country without an adequacy decision, we rely on the European Commission's standard contractual clauses and the UK International Data Transfer Addendum, or on our providers' certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where they are certified. You can ask for more information about these safeguards through the contact options below.

Automated decision-making

SynchrotronAI does not use website inquiry data to make solely automated decisions that produce legal or similarly significant effects about visitors. ScamFreeLife automatically assesses communications and, depending on your settings, may warn you, quarantine a message, or decline to connect a call it judges to be high risk. These actions are designed to protect you, you control the settings, and you can review quarantined items and contact Support if you think a decision was wrong. Customer workflows that use AI or automation for significant decisions must be scoped with human review, compliance controls, and customer responsibility for lawful use.

Privacy rights and choices

Depending on where you live and how SynchrotronAI processes your information, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. You may also have the right to appeal certain decisions.

ScamFreeLife users can delete their account in the ScamFreeLife web app settings and can ask Support to delete specific items from their history. To submit a privacy request, use the workflow review intake or, for ScamFreeLife, Support, and include your name, organization if any, contact information, jurisdiction, and request details. SynchrotronAI responds within the time the applicable law requires, generally one month under the GDPR and UK GDPR and 45 days under U.S. state laws, which may be extended where the law allows. If SynchrotronAI declines your request, you can appeal by replying to our decision, and if your appeal is denied you can contact your state attorney general or data protection authority. SynchrotronAI will not discriminate against you for exercising your privacy rights. SynchrotronAI may need to verify identity and authority before acting on a request. Some information may be retained when required for legal, security, contract, accounting, fraud prevention, or operational reasons.

If SynchrotronAI processes personal information on behalf of a customer, SynchrotronAI may direct the request to the customer or require the customer to authorize the request, because the customer controls that processing.

U.S. state privacy disclosures

SynchrotronAI does not sell personal information, does not share it for cross-context behavioral advertising, and does not process it for targeted advertising. If that changes, SynchrotronAI will update this policy and provide required choices. SynchrotronAI treats a Global Privacy Control signal from your browser as a request to opt out of sale, sharing, and targeted advertising for that browser.

SynchrotronAI may disclose personal information to service providers and subprocessors for business purposes such as hosting, security, CRM, payment processing, support, analytics, communications, and operations. SynchrotronAI may process sensitive or regulated customer data only when a customer engagement requires it and appropriate terms are in place.

The categories of personal information SynchrotronAI may collect include identifiers, business contact information, commercial information, internet or network activity, approximate location from IP address, professional information, payment-related metadata, communications, and inferences needed for business evaluation or security. For ScamFreeLife users, they also include sensitive personal information consisting of the contents of email, text messages, and call transcripts, and account login credentials. Call audio is processed in real time and not retained. SynchrotronAI uses and discloses these categories for the purposes described in this policy.

California notice

For California residents, the California Consumer Privacy Act as amended may provide rights to know, access, correct, delete, opt out of sale or sharing, limit certain sensitive personal information use, and non-discrimination. SynchrotronAI uses sensitive personal information only for the purposes the CCPA permits without offering a right to limit, such as providing the services you request and security, and does not use it to infer characteristics about you. SynchrotronAI does not sell personal information and does not share it for cross-context behavioral advertising. In the past 12 months, SynchrotronAI has disclosed the categories of personal information described in this policy to its service providers and contractors for business purposes, and has not sold or shared any of them.

EEA, UK, and Swiss users

If European, UK, or Swiss data protection laws apply, SynchrotronAI acts as a controller for the website, ScamFreeLife, sales, security, billing, and business operations, and as a processor for customer-directed processing under a DPA. You have the right to access, correct, delete, restrict, and object to processing of your personal information, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with the data protection supervisory authority where you live or work, or where you believe a breach occurred. International transfers are protected as described in the International transfers section.

Authorized agents

Where applicable law allows an authorized agent to submit a privacy request, SynchrotronAI may require proof of authorization and may still need to verify the identity of the individual whose information is involved.

Children

The website, ScamFreeLife, and business services are not directed to children, and ScamFreeLife accounts are only for adults 18 and older. SynchrotronAI does not knowingly collect personal information from children under 13, or create accounts for anyone under 18. Communications that a ScamFreeLife user protects may incidentally include messages or calls from minors, which ScamFreeLife processes only to protect that user. If you believe a child provided personal information, contact SynchrotronAI so the information can be reviewed and deleted.

Changes

SynchrotronAI may update this Privacy Policy as products, services, subprocessors, legal requirements, and operations change. The updated date above shows when this page was last revised. If SynchrotronAI makes a material change to how it uses ScamFreeLife data, it will notify users by email or in the app before the change takes effect and, where the law requires, ask for consent.

Contact

Privacy questions and requests may be submitted through the workflow review intake or, for ScamFreeLife, through Support, or by mail to SynchrotronAI Inc., 1050 U.S. 22, Suite C, Lebanon, NJ 08833. Include enough context for SynchrotronAI to identify the relationship, system, product, or engagement involved.