Privacy Policy

Sytext is designed with a privacy-first mindset. Our core architecture is local-first, meaning the vast majority of your data—specifically your chat history—never touches our servers. This policy outlines the limited data we do interact with to keep the Service running securely, and your rights regarding that data.

For the purposes of the DPDP Act, the Data Fiduciary (the entity determining the purpose and means of processing your personal data) is the individual developer operating as Sytext, based in India. You can contact us at rai@sytext.in.

Because Sytext is local-first, we only collect the absolute minimum data required to authenticate you and sync messages:

• Account Information: Your email address, name, and authentication tokens if you choose to create an account.
• Platform Connections: OAuth tokens and connection metadata required to link third-party services (e.g., WhatsApp, Telegram).
• Message Metadata: Message IDs, timestamps, and chat tags (e.g., "Urgent", "Follow-up") used for AI prioritization.
• Usage Data: Basic diagnostic data (browser type, device type, IP address) for security and debugging.

By creating an account and connecting third-party networks (e.g., WhatsApp) to Sytext, you provide explicit consent for us to access and process your messages for the purpose of displaying a unified inbox and generating AI drafts.

You have the right to withdraw this consent at any time by disconnecting the network in your Sytext settings or deleting your account. Upon withdrawal, we will cease processing and delete the cached messages associated with that network from our servers.

Your chats are yours. Your primary message history is stored directly in your browser's local storage (IndexedDB) or on your device. We do not maintain a permanent, central database containing your full chat history.

Server Cache: To allow you to sync across devices and keep your WhatsApp/Telegram links running, our server temporarily stores the latest 40 messages of each chat (plus any pinned or starred messages). Older messages are permanently deleted from the server automatically every minute. All cached messages are encrypted at rest (AES-256-GCM).

To generate reply drafts and priority tags, Sytext sends specific message text to third-party AI providers (such as OpenAI, Anthropic, or Google Gemini via API). We do not use your private messages to train our own foundational AI models. Data sent to AI providers is subject to their respective privacy policies.

We never sell your personal data. We only share information with trusted sub-processors (Data Processors) who help us operate the Service:

• Cloud Hosting: For running our backend infrastructure securely.
• AI Providers: As described in Section 6.
• Payment Gateway: We use Razorpay to process payments. Your financial data is handled directly by Razorpay and is never stored on our servers.
• Legal Requirements: If required by law or to protect the rights and safety of Sytext and its users.

We take security seriously. All data transmitted between your browser, our servers, and third-party APIs is encrypted using industry-standard TLS (HTTPS). However, no method of transmission over the Internet is 100% secure.

In the unlikely event of a personal data breach, we will notify the Data Protection Board of India and all affected users as soon as possible, detailing the nature of the breach and the mitigation steps taken, in compliance with the DPDP Act.

As a Data Principal under the DPDP Act, you have the following enforceable rights:

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Correction: You can update or correct inaccurate data (e.g., updating your email).
• Right to Erasure: You can request the deletion of your data. Deleting your account triggers this process on our servers. (Remember to clear your local browser data to erase your local chat history).
• Right to Withdraw Consent: You can disconnect networks or delete your account at any time.
• Right to Grievance Redressal: You have the right to easily complain to us if you feel your data has been mishandled.

Sytext is intended for users who are 18 years of age or older (or the age of majority in their jurisdiction). We do not knowingly collect or process the personal data of children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

In accordance with the DPDP Act, if you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your data, please contact our designated Grievance Officer:

Name: Vivek Rai (Developer)
Email: rai@sytext.in
Response Time: We aim to resolve all grievances within 30 days.