> ## Documentation Index
> Fetch the complete documentation index at: https://mcp-docs.synta.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy Policy

> Learn how Synta MCP protects your data and respects your privacy

## Our Commitment to Privacy

At Synta MCP, we take your privacy seriously. This policy outlines how we handle your data and protect your information.

## Security & Compliance

<CardGroup cols={2}>
  <Card title="SOC 2 Compliant" icon="shield-check">
    We follow enterprise-grade security practices and maintain SOC 2 compliance standards
  </Card>

  <Card title="No AI Training" icon="ban">
    We have opted out from any training by AI model providers. Your data is never used to train AI models
  </Card>
</CardGroup>

## Data Protection

### What We Collect

* **API Authentication**: Your Synta MCP API key for service authentication
* **Usage Metrics**: Anonymous usage statistics to improve our service
* **Error Logs**: Diagnostic information when errors occur (no workflow data included)

### What We Don't Collect

* **Workflow Contents**: Your n8n workflows and configurations remain private
* **Credentials**: We never store your n8n API keys or instance credentials
* **Personal Data**: We don't collect personal information beyond what's necessary for authentication

### Data Storage

* All data is encrypted in transit using TLS 1.3
* API keys are hashed and securely stored
* Usage logs are retained for 90 days for diagnostic purposes
* No workflow data is stored on our servers

### Third-Party Access

* We do not sell, rent, or share your data with third parties
* We do not allow AI model providers to train on your data
* Your n8n instance credentials are only used for direct API calls and never logged

## Your Rights

You have the right to:

* **Access**: Request information about data we hold about you
* **Deletion**: Request deletion of your account and associated data
* **Portability**: Export your usage data in a machine-readable format
* **Correction**: Update or correct your account information

## Security Measures

We implement industry-standard security practices:

* Encrypted data transmission (TLS 1.3)
* Secure credential storage with hashing
* Regular security audits
* Access controls and authentication
* Monitoring for suspicious activity

<div class="callout mint-my-4 mint-px-4 mint-py-3 mint-overflow-hidden mint-rounded-xl mint-flex mint-gap-3 mint-border mint-border-[#c15f3c]/30 mint-bg-[#c15f3c]/10">
  <div class="mint-mt-0.5 mint-w-4 mint-flex-shrink-0">
    <svg class="mint-w-4 mint-h-4 mint-text-[#c15f3c]" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2">
      <path stroke-linecap="round" stroke-linejoin="round" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
    </svg>
  </div>

  <div class="mint-text-sm mint-text-[#c15f3c]">
    <strong className="mint-text-[#c15f3c]">Your Responsibility:</strong> Keep your API keys secure. Never share them publicly or commit them to version control. Rotate keys immediately if compromised.
  </div>
</div>

## Updates to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes through:

* Email notifications (if you've provided an email)
* Updates on our website
* In-app notifications

**Last Updated**: January 2025

## Contact Us

For privacy-related questions, concerns, or requests, please contact us:

<Card title="Privacy Inquiries" icon="envelope">
  **Email**: [info@synta.io](mailto:info@synta.io)

  We aim to respond to all privacy inquiries within 48 hours.
</Card>

## Additional Information

### GDPR Compliance

For users in the European Union, we comply with GDPR requirements:

* Lawful basis for processing: Legitimate interest and contractual necessity
* Data minimization: We only collect what's necessary
* Right to be forgotten: Contact us to delete your data
* Data portability: Export your data at any time

### California Privacy Rights

For California residents (CCPA):

* We do not sell personal information
* You have the right to opt-out of data collection
* You can request disclosure of collected information
* You can request deletion of your information

## Data Breach Protocol

In the unlikely event of a data breach:

1. We will notify affected users within 72 hours
2. Provide details about what data was affected
3. Offer guidance on protective measures
4. Work with authorities as required by law

<div class="callout mint-my-4 mint-px-4 mint-py-3 mint-overflow-hidden mint-rounded-xl mint-flex mint-gap-3 mint-border mint-border-[#c15f3c]/30 mint-bg-[#c15f3c]/10">
  <div class="mint-mt-0.5 mint-w-4 mint-flex-shrink-0">
    <svg class="mint-w-4 mint-h-4 mint-text-[#c15f3c]" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2">
      <path stroke-linecap="round" stroke-linejoin="round" d="M13 16h-1v-4h-1m1-4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" />
    </svg>
  </div>

  <div class="mint-text-sm mint-text-[#c15f3c]">
    <strong className="mint-text-[#c15f3c]">Transparency:</strong> We believe in being transparent about our data practices. If you have questions not covered here, please reach out.
  </div>
</div>

***

This privacy policy was last updated on **November 19, 2025**.