Security & Privacy

Private by default. Not used for training.

Synero asks GPT, Claude, Gemini and Grok your question, so here is exactly what happens to your data: how it is stored, who can see it, and what the AI providers do with it.

Where your question goes

You

Encrypted with TLS

Synero

Saved to your account only

GPTClaudeGeminiGrok

Called through their APIs. Not used for training.

Your data stays yours

Your chats are stored under your account and only you can read them, unless you choose to share a link. Your question goes to the providers of the models you pick. With two or more models, OpenAI models also write the combined answer and grade where the models agree, and OpenAI checks each question (and a long draft as you type) to suggest models and test web search; private mode skips that check unless you ask Synero to choose the models. Turn on private mode and a chat is not saved to your history at all.

Never used to train AI models

Synero does not use your questions or results to train any AI model. We call OpenAI, Anthropic, Google and xAI through their APIs, whose terms cover how API inputs are handled (see the provider notes below and our privacy policy).

Row-level security

Every piece of data (queries, responses, configurations, presets, ratings) is protected by row-level security policies. Only the authenticated owner can read or modify their own records.

Encrypted in transit and at rest

All communication between your browser and Synero is encrypted via TLS. Data at rest is stored in encrypted databases with Supabase's managed infrastructure.

Secure authentication

Synero uses Supabase Auth with support for email/password and social sign-in providers. Sessions are kept in cookies and refreshed automatically.

API key isolation

API keys are scoped to individual accounts and can be revoked at any time. Each key is hashed before storage. We never store plaintext API keys in our database.

Upstream AI providers

Synero sends your questions to four AI providers via their commercial APIs. Here is how each handles data:

OpenAI

Called through the OpenAI API, whose terms prohibit training on API inputs

Anthropic

Called through the Anthropic API under its commercial terms, which exclude API data from training

Google

Gemini API calls are covered by Google's API terms and data policies

xAI

Grok API calls follow xAI's API terms of service

Infrastructure

  • Hosted on DigitalOcean App Platform with automatic HTTPS
  • Database and authentication powered by Supabase with managed PostgreSQL
  • Payments handled by Whop. Synero never sees your card number
  • Google Analytics, plus Google Ads, Meta and Whop pixels that count page views, sign-ups and your first free question, never its content (Whop's also sets a device identifier). Crisp runs the live support chat

Have a security question or concern? Reach out at [email protected]

Try it with your own question

A free account gets 3 questions with no card.

Learn how Synero works or read the privacy policy.