Last Updated: May 4, 2026 (revision 2)
Welcome to Synthalyst ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. This Privacy Policy complies with applicable data protection laws, including U.S. federal and state privacy legislation such as the California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and other state privacy laws. We have designed our practices to align with the requirements of comprehensive state privacy laws while respecting your privacy rights regardless of your location.
We may collect the following types of information:
When you use our Synthalyst Match service, we collect and process the following additional information:
This data is used solely to provide personalized job discovery, matching, and notification services. Job listing data is stored temporarily and refreshed periodically. We do not share your resume text or job preferences with employers or other third parties.
If you have email notifications enabled, we will send you alerts when high-quality job matches are found. You can disable these notifications at any time from your Synthalyst Match preferences.
We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, sexual orientation, health information, or biometric data) unless strictly necessary to provide the services you request. When collection of sensitive data is necessary, we will obtain your explicit consent before collecting and processing such information.
We use Firebase Authentication for user authentication. When you sign in using Google authentication, we collect:
We only collect this information to provide you with authentication services, remember your login state if requested, and personalize your experience within our application. Our use of this information complies with Google's API Services User Data Policy, including the Limited Use requirements.
When you use Audio Mode in our Mock Interview feature, your spoken answer is captured by your browser and converted to text via your browser's built-in speech recognition feature. Synthalyst does not receive, store, or transmit the audio recording itself. Only the resulting text transcript — which you can review and edit before submitting — is sent to our servers, where it is processed the same way as a typed response and stored alongside your interview session for grading and feedback.
We do not store, transmit, or process voice biometric identifiers, and we do not use voice recordings to train or improve any AI model. How your browser handles speech recognition internally — whether it processes audio on your device or via the browser vendor's cloud transcription service — is outside Synthalyst's control; consult your browser's privacy documentation for those details.
We use your information for the following purposes:
We adhere to the data minimization principle by collecting only the personal information that is relevant and necessary for the purposes described in this Privacy Policy. We will not collect additional categories of personal information or use the personal information collected for materially different purposes without providing notice.
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We will securely delete or anonymize your personal information when it is no longer needed.
Cancelled accounts. When you cancel your subscription or close your account, we keep your account data in a read-only state for 180 days so you can return without losing your saved resumes, cover letters, match history, and other in-app content. After 180 days we permanently delete the account and its contents. You can request earlier deletion at any time by emailing privacy@synthalyst.com — we will honor verified deletion requests within 30 days, in line with the rights enumerated in Section 6.
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This means:
We may share your information in the following circumstances:
We do not sell your personal information as defined by state privacy laws. If this practice changes in the future, we will update this policy and provide appropriate methods for you to opt out.
We implement appropriate technical and organizational measures to protect the security of your personal information. These measures include encryption, access controls, regular security assessments, and staff training on data protection. We regularly monitor our systems for possible vulnerabilities and attacks and maintain a data breach response plan. However, we cannot warrant the security of any information that you send us. There is no guarantee that data may not be accessed, disclosed, altered, or destroyed by breach of any of our safeguards.
Depending on your location, you may have certain rights regarding your personal information:
To exercise your rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within the timeframe specified by applicable law (typically 45 days, with the possibility of a 45-day extension when reasonably necessary). We will verify your identity before fulfilling your request.
Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will promptly delete that information. For children between the ages of 13-15, we may collect information with the child's consent in some jurisdictions, but where parental consent is required, we will obtain verifiable parental consent before any collection, use, or disclosure of personal information.
If you believe we have collected information from a child under 16, please contact us immediately at hello@synthalyst.com.
Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. When we transfer your personal information to other countries, we will implement appropriate safeguards and controls to ensure that your information receives an adequate level of protection in the countries to which it is transferred.
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We will notify you of material changes to this Privacy Policy by posting a notice on our website or by sending you an email notification. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:hello@synthalyst.com