This Privacy Policy explains how Individual Entrepreneur Mikhail Molchanov ("Synapse", "we", "us"), registered in Georgia at III Micro/District, Building 80, Entrance 1, Floor 2, Apartment N4, Gldani, Tbilisi 0167, Georgia, collects, uses, and protects personal data when you use our website and service at susha.space.
1. Data Controller
Individual Entrepreneur Mikhail Molchanov, III Micro/District, Building 80, Entrance 1, Floor 2, Apartment N4, Gldani, Tbilisi 0167, Georgia, is the controller of the personal data described below. For privacy questions or to exercise your rights, contact hello@susha.space.
2. Data We Collect
2.1 Account data
When you sign up, we collect your email address, password (hashed), and optionally your display name.
2.2 Billing data
Payments are processed by Paddle.com Market Limited, our Merchant of Record. Paddle collects your name, billing address, and card details directly — we do not store full card numbers. We receive only transaction metadata (plan, amount, date, country, last four digits).
2.3 Uploaded content
Audio and video files you upload, URLs you submit, and resulting transcripts and generated content. This is processed on our behalf by sub-processors (see Section 5) and stored in your account until you delete it.
2.4 Usage data
IP address, browser type, device type, pages visited, timestamps, and basic interaction logs. Used for security, debugging, and aggregate analytics.
2.5 Cookies
We use strictly necessary cookies for session management and a minimal set of analytical cookies to understand aggregate usage. No advertising or third-party tracking cookies are set.
3. Purposes and Legal Bases
- Providing the Service — performance of a contract (Art. 6(1)(b) GDPR);
- Billing and fraud prevention — legal obligation and legitimate interest (Art. 6(1)(c), 6(1)(f));
- Product improvement and aggregate analytics — legitimate interest (Art. 6(1)(f));
- Marketing emails (only if you opt in) — consent (Art. 6(1)(a)).
4. Data Retention
- Uploaded audio/video files — deleted within 24 hours after transcription completes.
- Transcripts and generated content — kept until you delete them or close your account.
- Account data — kept for the life of the account; deleted within 30 days of account closure.
- Billing records — retained for 7 years to comply with tax and accounting law.
- Server logs — 90 days rolling.
5. Sub-processors
We share data only with service providers who process it on our instructions:
- AssemblyAI, Inc. (USA) — speech recognition. Uploaded audio is sent for transcription.
- Kie AI / Google — large-language-model inference for content generation. Transcript text is sent; audio is not.
- Paddle.com Market Limited (UK) — payment processing and tax remittance.
- Hosting and email providers — EU/US data centres under standard contractual clauses.
6. International Transfers
Some of our sub-processors operate outside Georgia and the EU. When data is transferred, we rely on Standard Contractual Clauses or equivalent safeguards to ensure adequate protection.
7. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you;
- Request correction or deletion;
- Request portability of your data;
- Object to or restrict certain processing;
- Withdraw consent at any time;
- Lodge a complaint with a supervisory authority.
Requests can be sent to hello@susha.space.
8. Security
We use TLS encryption in transit, at-rest encryption for stored files, access controls, and regular backups. No system is perfectly secure; we will notify affected users and authorities of any qualifying breach without undue delay.
9. Children
The Service is not intended for users under 16. We do not knowingly collect data from children.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be communicated at least 14 days before they take effect. The current version and effective date are always shown at the top of this page.
11. Contact
Privacy requests and questions: hello@susha.space.