Legal Information

This policy explains what information Synix Financial collects, why we collect it, how long we keep it, and the choices you have. It applies to the platform and any features accessed through it.

Information We Collect Automatically

When you access Synix, certain technical information is transmitted by your browser or device and recorded by our servers. This happens on every request and does not depend on your browser storage settings. This information includes:

• IP address — the network address your request originates from.
• Device and browser information — browser type and version, operating system, device type, and screen characteristics.
• Request metadata — pages or endpoints accessed, timestamps, referring pages, and error or diagnostic details.
• Authentication events — sign-in and sign-out times, session activity, and, where applicable, whether access occurred through a shared-account permission granted by an account owner.

We collect this information to operate and secure the platform. Specifically, we use it to detect and prevent fraud and unauthorized access, identify unusual or suspicious sign-in activity, protect against abuse and automated attacks, apply rate limits, diagnose errors and performance problems, and maintain security and access records for accounts — including records of activity performed by users granted shared access to another user's account.

We may use your IP address to determine your approximate general location, such as country, region, or city, in order to identify unusual sign-in activity and assess fraud risk. We do not use it to determine your precise location, and we do not use it for advertising.

Because this information is transmitted automatically as part of accessing the platform, it cannot be disabled through browser settings while continuing to use Synix.

Visitor Tracking and Analytics

Before account creation or sign-in, we may generate a unique, random tracking identifier stored in your browser's local storage or through similar technologies. This identifier helps us understand site navigation, feature usage, performance, fraud risk, and security patterns. It is randomly generated and does not contain your name, email address, bank credentials, or financial account login information.

When you create an account or sign in, this identifier may be associated with your account for analytics, security, fraud prevention, debugging, and product improvement.

You may clear or disable this identifier by clearing your browser storage or adjusting your privacy settings. Doing so may limit certain features, analytics, fraud prevention, or security controls. Clearing this identifier does not affect the automatic collection of technical information described above, which occurs independently of browser storage.

Financial Account Information

We do not store your bank usernames or bank passwords. External account linking is handled through secure third-party providers. Where you connect an account, we receive and store transaction, balance, and account details necessary to provide the features you have requested.

Why We Process This Information

If you are located in a jurisdiction that requires us to identify a legal basis for processing, we rely on the following:

• Legitimate interests — securing the platform, preventing fraud and unauthorized access, maintaining service integrity and availability, diagnosing technical problems, and improving our products. We process technical and log data on this basis.
• Performance of a contract — providing the account features and financial data services you have requested.
• Legal obligation — retaining certain records where required by applicable law.
• Consent — where required, for processing that falls outside the bases above. Where we rely on consent, you may withdraw it at any time.

Data Retention

We retain information only as long as needed for the purposes described in this policy.

• Technical and security logs, including IP addresses — retained for up to 24 Months, after which they are deleted or aggregated into non-identifying form.
• Analytics identifiers and usage data — retained for up to 12 Months.
• Account and financial data — retained for the life of your account and for 12 Months afterward, or longer where required for legal compliance, dispute resolution, accounting, or enforcement of our agreements.
• Backups — retained on a rolling schedule and overwritten in the ordinary course. Deleted information may persist in backups for up to 90 Days before being fully removed.

Your Privacy Choices

Depending on your location, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information, and to restrict or object to certain processing. Where we rely on consent, you may withdraw it at any time.

To exercise these rights, contact us using the details below. We will respond within the timeframe required by applicable law. Before acting on a request, we may need to verify your identity. This protects your account and the financial information connected to it.

Certain information may be retained after a deletion request where permitted or required by law, including:

• Security and access logs necessary to detect fraud, investigate abuse, or protect the platform and other users.
• Records required for legal compliance, accounting, tax, or regulatory purposes.
• Information needed to resolve disputes or enforce our agreements.
• Residual copies in backups, removed on the schedule described above.

Where information must be retained, we limit it to what is necessary for that purpose and do not use it for analytics or product development.

Shared Account Access

If an account owner grants you shared access to their account, that owner controls the data in the account and the permissions assigned to you. Requests relating to that account's data should be directed to the owner. You retain rights with respect to information about you personally, including your own sign-in and access records.

Synix Financial may provide budgeting insights, spending analysis, educational information, projections, summaries, AI-generated explanations, and general financial guidance. Unless separately agreed in writing, Synix Financial does not provide legal, tax, accounting, insurance, brokerage, or registered investment advisory services.

AI-generated responses and automated insights may be incomplete, inaccurate, outdated, or based on limited data. You should not rely solely on the platform to make financial, investment, legal, tax, lending, credit, or insurance decisions. Always review important decisions independently and consult qualified professionals when needed.

Past performance, estimates, scores, projections, budgets, forecasts, alerts, or recommendations do not guarantee future results. You remain solely responsible for your financial decisions and for verifying information before acting on it.

To the fullest extent permitted by law, Synix Financial and its owners, employees, contractors, affiliates, service providers, and partners will not be liable for indirect, incidental, special, consequential, punitive, exemplary, or lost-profit damages arising from your use of the platform.

This includes, without limitation, damages related to data loss, account access issues, financial decisions, inaccurate data, delayed syncing, third-party service outages, unauthorized access caused by user-side security failures, loss of business, or reliance on AI-generated content.

Some jurisdictions do not allow certain limitations of liability, so some of these limitations may not apply to you. In that case, liability will be limited to the maximum extent permitted by applicable law.

Our platform may use cookies, local storage, session storage, pixels, logs, and similar technologies to operate the service, remember preferences, keep users signed in, measure performance, improve features, and protect against fraud or abuse.

We may use these technologies to:

• Keep you signed in and maintain secure sessions.
• Remember user settings, preferences, and device choices.
• Measure traffic, errors, performance, and usage patterns.
• Detect suspicious activity, abuse, or unauthorized access attempts.
• Improve product design, onboarding, and feature reliability.

We do not sell cookie data. You may block, clear, or limit cookies through your browser settings. Some features may not work properly if cookies or local storage are disabled.

We take data protection seriously and use multiple safeguards designed to reduce unauthorized access, misuse, loss, and service abuse. Security measures may include encryption in transit, access controls, monitoring, logging, dependency updates, vulnerability review, backups, least-privilege permissions, and incident response procedures.

• HTTPS/TLS encryption for data transmitted between browsers, apps, and servers.
• Authentication and authorization checks for protected resources.
• Limited internal access to user data based on business need.
• Monitoring for suspicious activity, abuse, and platform errors.
• Regular review of dependencies, system configuration, and security controls.
• Backups and recovery procedures where appropriate.

No security system is perfect. You agree that breaches, outages, vulnerabilities, third-party failures, phishing, malware, and other risks may still occur. We will work to respond appropriately to confirmed incidents that affect user privacy, security, or data integrity.

Synix Financial may rely on trusted third-party services for authentication, hosting, analytics, payments, bank connectivity, data storage, AI features, communication, monitoring, and infrastructure.

• Firebase / Google Cloud: authentication, database services, storage, hosting, infrastructure, and security features.
• Stripe: payment processing, billing, subscriptions, invoices, and fraud prevention.
• Plaid: secure connection to supported financial institutions and financial account data retrieval.
• OpenAI: natural language processing, AI-generated explanations, summaries, and intelligent assistant features.

Third-party services may collect, process, or store information according to their own terms and privacy policies. Synix Financial is not responsible for independent third-party platforms, outages, security practices, data handling, or policy changes.

© 2026 Synix Financial. All rights reserved. All content, design, copy, source code, branding, product concepts, user interface elements, logos, workflows, databases, and platform materials are owned by Synix Financial or its licensors unless otherwise stated.

You may not copy, reproduce, modify, distribute, display, publish, sell, sublicense, reverse engineer, or create derivative works from any part of the platform without prior written permission.

All third-party product names, company names, logos, brands, and trademarks are property of their respective owners. References to Firebase, Google Cloud, Stripe, Plaid, OpenAI, or other providers do not imply endorsement, sponsorship, partnership, or affiliation unless expressly stated in writing.

We may update, modify, or replace this legal page at any time. Updates may reflect changes in law, technology, third-party services, business operations, security practices, or product features.

Continued use of the platform after changes are posted means you accept the updated terms and policies. If a change materially affects your rights or obligations, we may provide additional notice where required by law.

For legal, privacy, security, or account-related questions, contact Synix Financial using your official support or legal email address.