Privacy & Data Policy

This policy explains how Synrgy AI LLC ("Synrgy," "we," "us," or "our") handles personal information through synrgyai.com, product experiences, pilots, and related services.

When an institution provides participant or program data, that institution generally decides why the data is used and Synrgy processes it on the institution's behalf under the applicable agreement. For website visits, demo requests, account administration, and our own business operations, Synrgy determines how the information is used.

Depending on how you use Synrgy, we may collect:

• Contact and account information, such as name, organization, role, work email, and login details.
• Customer and participant data that an authorized institution chooses to upload or connect, such as program records, milestones, advisor activity, notes, skills, goals, and employment outcomes.
• Usage and device information, such as IP address, browser type, pages viewed, feature interactions, logs, and diagnostics.
• Communications, including demo requests, support messages, survey responses, and feedback.
• Integration data from systems an institution authorizes Synrgy to access, limited by the connection's settings and permissions.

We ask customers to provide only the information needed for their program and to avoid uploading sensitive information unless it is necessary, authorized, and covered by an appropriate agreement.

We use information to:

• Provide personalized roadmaps and participant guidance.
• Support advisor workflows, program coordination, and follow-up.
• Track progress and prepare authorized outcome reporting.
• Operate, secure, troubleshoot, and improve the services.
• Respond to requests and communicate about Synrgy.
• Comply with law, enforce agreements, and protect people and systems.

We do not sell personal information. We do not use personal information for third-party targeted advertising.

Synrgy may use AI-assisted systems to organize information, generate roadmaps, summarize progress, recommend resources, and help advisors prioritize support. These outputs can be incomplete or incorrect and should be reviewed by an appropriate person.

Synrgy is designed to support, not replace, human judgment. It is not intended to make final decisions about admission, employment, funding, benefits eligibility, or other decisions that have legal or similarly significant effects.

We do not use institution-provided customer data to train a generalized Synrgy AI model unless the institution authorizes that use in writing. Third-party AI providers may process limited data to deliver requested features under their agreements with Synrgy and the applicable customer agreement.

We may share information with:

• Authorized institution users based on their roles and permissions.
• Service providers and subprocessors that support hosting, storage, analytics, communications, security, support, and AI-assisted features.
• Authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security.
• A successor organization in connection with a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality protections.

We require service providers to handle information for specified purposes and subject to contractual protections. An institution may request current subprocessor information during contracting.

We retain information only as long as reasonably necessary to provide the services, meet contractual commitments, maintain security and business records, resolve disputes, and comply with law. Retention periods depend on the type of information and the customer agreement.

Institution-provided data is returned or deleted according to the institution's instructions and agreement, subject to legal obligations and limited backup cycles. De-identified information that cannot reasonably be linked to a person may be retained to improve reliability and understand service performance.

We use administrative, technical, and organizational safeguards designed to protect information. These include access controls, least-privilege practices, monitoring, and security review appropriate to the nature of the data and service. No method of storage or transmission is completely secure.

Our data practices are guided by recognized risk-management principles, including data minimization, purpose limitation, transparency, human oversight, and ongoing monitoring. Security and privacy requirements for an institutional deployment are documented in the relevant agreement and, where applicable, a data processing addendum.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. We may need to verify your identity before completing a request.

If your information was provided to Synrgy by a university, training provider, government agency, workforce organization, or employer, please contact that institution first. Because it controls the record, we generally act on its verified instructions.

We may use cookies and similar technologies required to operate the site, remember preferences, understand site performance, and protect against abuse. Browser settings can limit cookies, although doing so may affect some features.

The public website is not directed to children under 13. Institutionally authorized services involving minors are governed by the customer agreement and applicable law.

Information may be processed in the United States or other locations where Synrgy's providers operate. We use appropriate safeguards where required for cross-border transfers.

We may update this policy as our services and legal obligations change. We will post the revised policy here, update the date above, and provide additional notice when required.