Privacy Policy

1. Information We Collect

When you register for an account or use Syntiox services, we may collect the following information:

1.1 Account & API Data

• Account Information: Your email address (via SSO login such as Google/GitHub) and basic profile information (Name, Profile Picture).
• Payment Information: Processed securely via our third-party payment gateways when purchasing API Coins.
• Usage Data: API calls, IPs, endpoints accessed, and timestamps for rate-limiting and security purposes.

1.2 Atom-MD Specific Data

• WhatsApp Session Token: A cryptographic token generated when you link your account. Saved in a highly secure, encrypted form. We utilize encryption protocols such that even our team/administrators cannot read or decrypt your active session tokens.
• Phone Number: Stored in an encrypted format in our database, used solely to identify your bot session and secure your dashboard login.
• Dashboard Settings: Text and numeric configuration fields (custom auto-reply messages, automated responses, specific phone numbers) are securely encrypted within our database. Simple binary on/off preferences are stored as plain toggle flags.
• Bot Configuration & API Keys: If you provide a custom Google Gemini API key, it is immediately fully encrypted within our database and used strictly to securely proxy AI assistant queries on your behalf.

We do not permanently collect or store the content of your WhatsApp messages. Message data is processed transiently in the system's memory to run enabled automation triggers. Sensitive media is processed on-the-fly and never cached to disk unless you actively enable the Anti-Delete security feature, which temporarily saves incoming message files on encrypted disks for up to 6 hours before they are automatically and permanently purged.

2. How We Use Your Information

We use your information exclusively to:

• Provide, maintain, and improve the Syntiox API services and Atom-MD bot functionalities
• Authenticate and maintain your account and bot session
• Execute bot features you have enabled and power AI features using your provided API key
• Process payments for API Coin top-ups
• Prevent abuse, spam, and unauthorized access to our APIs
• Communicate with you regarding account updates, billing, or technical changes

3. Data Sharing & Third-Party Services

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your payment details are processed directly by our payment providers (e.g., Stripe, PayPal) and are never stored on our servers. API usage logs are strictly kept for security auditing and are auto-deleted after 30 days.

Atom-MD may interact with the following third-party services based on features you enable:

• Google Gemini AI: If AI Mode is enabled, requests are sent to Google's Gemini API using your API key. Google's privacy policy applies to this data.
• Google reCAPTCHA: Used to prevent abuse. Google's reCAPTCHA privacy policy applies.
• Media Download Sources: When using download commands, requests are made to YouTube, TikTok, etc., as normal HTTP requests.

4. Data Security

We implement strict security measures to protect your data, including:

• HttpOnly Session Cookies and API key rate-limiting
• HTTPS/TLS encryption for all API communications
• Hashed and time-limited session tokens
• Dashboard passwords are salted and hashed — no plaintext passwords are ever stored
• Server access is restricted and monitored

Despite these precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Your Rights & Control

You have full control over your data:

• Instant Session Revocation & Auto-Deletion: For Atom-MD, you can disconnect your bot anytime by removing Atom-MD from WhatsApp Settings → Linked Devices. Within 6 hours, all of your associated settings, configurations, and temporary cache data are automatically and permanently purged from our database and server disks.
• Automated 6-Hour Expired Session Purge: Our bot servers undergo a scheduled reset cycle every 6 hours, automatically wiping inactive configurations, disconnected devices, or expired/stale sessions.
• Data Access & Management: You have absolute visibility and edit/delete control over all your settings, messages, and configurations directly through your personal web dashboard in real-time.

6. Children's Privacy

Syntiox is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has used our service, please contact us immediately.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Syntiox services after changes constitutes acceptance of the updated policy. We recommend checking this page periodically to stay informed.

8. Contact Us

If you have any questions about this Privacy Policy, please reach out to us at support@syntiox.top.