Privacy Policy

Welcome to Infer, a product of Synth AI Labs Inc.

Synth AI Labs Inc. ("us", "we", or "our") operates https://infer.so (hereinafter referred to as the Service).

Synth AI Labs Inc. ("Synth AI Labs," "we," "us," or "our") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit https://infer.so or use our U.S.‑hosted AI voice‑agent platform and related services (collectively, the "Services").

U.S.‑Only Focus – Our Services are designed for companies located in the United States. We do not actively market or provide the Services to EU/UK residents and therefore do not rely on international transfer mechanisms such as SCCs.

1 Scope

This Policy covers personal data we process as a Service Provider/Data Processor on behalf of our U.S. business customers and as a Business/Data Controller for visitors to our Site, prospective customers, and marketing contacts. Contract‑specific data‑processing terms are governed by our Data Processing Addendum ("DPA").

2 Key Facts

Security attestations	SOC 2 Type I (attested); ISO 27001 certification in progress
Model‑training policy	We never use customer content (audio, transcripts, metadata) to train or improve our ML models without a separate, written opt‑in
Data deletion SLA	Crypto‑erasure within 30 days of contract termination or verified request
Breach notification	Written notice within 24 hours of confirmed incident

3 Data We Collect

Category	Examples	Source
Account Data	Name, work email, company, role, billing address	You / your employer
Customer Content	Call audio, transcripts, prompts, configuration files	Generated/ingested during Service use
Support Data	Tickets, feedback, attachments	You
Usage Data	IP address, browser type, device ID, pages visited, timestamps	Automated via cookies & telemetry
Cookie Data	Session ID, preference cookies, analytics tags	Your browser

Sensitive Data – We do not intentionally collect special‑category data. Incidental capture is deleted or de‑identified.

4 How We Use Personal Data

Provide & operate the Services – authenticate users, route calls, transcribe audio, generate responses.
Security & fraud prevention – monitor, detect, and prevent malicious or unauthorized activity.
Service improvement – diagnostics and analytics without using customer content for model training (unless expressly approved in writing).
Communications – transactional emails, invoices, platform notices.
Marketing (opt‑in) – newsletters, product updates; you may unsubscribe anytime.
Legal & compliance – satisfy U.S. federal or state regulatory requirements.

5 Legal Bases (U.S.)

We process data under the following legal concepts recognized by U.S. privacy statutes:

Contractual necessity – to fulfil our agreement with you or your employer.
Legitimate business interests – to secure and improve the Services (balanced against consumer expectations).
Consent – for optional cookies and marketing.
Legal obligation – to comply with U.S. laws, subpoenas, or court orders.

6 Cookies & Tracking

We use:

Essential cookies – account login and session management.
Preference cookies – remember settings such as UI language.
Analytics cookies – PostHog, Cloudflare, Mixpanel to aggregate usage metrics.

You can disable non‑essential cookies in your browser; essential cookies are required for core functionality.

7 Data Sharing & Disclosure

We do not sell personal data. We share it only:

Service Providers/Sub‑processors – vetted U.S. vendors (e.g., AWS, Twilio) bound by contractual confidentiality and security obligations.
Affiliates & advisors – for internal business purposes under similar protections.
Legal compliance – to U.S. authorities when compelled.
Business transfers – as part of a merger, acquisition, or asset sale, with prior notice.

A current list of sub‑processors is available at https://infer.trust.site/.

8 Data Retention & Deletion

Retention: We keep personal data only as long as necessary to provide the Services, meet legal obligations, or resolve disputes.

Deletion: Within 30 days of verified request or contract end, we crypto‑erase customer content and account data, retaining minimal logs for security and billing audits.

9 Security Measures

SOC 2 Type I controls; ISO 27001 targeted for Q1 2026.
Encryption: TLS 1.2+ in transit, AES‑256 at rest.
Access controls: RBAC, MFA, least privilege.
Monitoring: 24×7 logging, quarterly vulnerability scans, annual external penetration tests.
Incident response: 24‑hour breach notice; root‑cause report within 30 days.

10 Your U.S. Privacy Rights

Depending on your state of residence, you may have rights to:

Access – know what personal data we hold.
Correction – request fixes to inaccurate data.
Deletion – request deletion of personal data.
Portability – receive a copy in portable format.
Opt‑out – stop certain processing (e.g., targeted advertising).

10.1 California (CCPA/CPRA)

We honour rights to access, delete, correct, and opt out of "sale/share" (we do not sell personal data). Submit requests via privacy@infer.so.

10.2 Virginia, Colorado, Connecticut, Utah, Texas

We extend similar rights required by VCDPA, CPA, CTDPA, UCPA, and TDPSA.

We will verify your identity and respond within 45 days (90 days if reasonably necessary).

11 Automated Decision‑Making

Our AI voice agents generate real‑time responses; customers configure prompts and can review transcripts. No solely automated decisions produce legal or similarly significant effects without human oversight.

12 Children's Privacy

Our Services target business users over 18. We do not knowingly collect data from children under 13. Contact us if you believe a child's data has been submitted so we can delete it.

13 Data Protection Officer

Name: Suneel Matham
Email: suneel@infer.so

The DPO oversees our privacy program and is the primary contact for consumer inquiries.

14 Changes to This Policy

We may update this Policy periodically. Material changes will be announced via email or the Site at least 14 days prior to becoming effective. The "Effective Date" above reflects the latest revision.

15 Contact Us

Synth AI Labs Inc.
Attn: Privacy Team
16192 Coastal Hwy Lewes, Delaware 19958 USA

Thank you for trusting Synth AI Labs with your data.