Privacy Policy

Last updated: July 5, 2026

Sinapsis SpA ("Sinapsis", "we") operates the sinapsis.in website and associated services, including the HumanOS platform and the specialized assistant QueBot (collectively, the "Services"). This policy describes how we collect, use and protect your personal information, taking Chilean Law No. 21,719 on Personal Data Protection as reference.

1. Data controller

• Controller: Sinapsis SpA — Chilean tax ID (RUT) 78.327.684-4
• Address: San Martín 924, Office 213, Temuco, Chile
• Privacy contact: admin@sinapsis.in

2. Information we collect

Information you provide

• Account data: name and email address when registering or signing in, including authentication via Google OAuth.
• Queries and content: questions, messages and documents you submit through the Services (for example, queries to assistants such as QueBot).
• Communications: emails or messages you send us directly.

Information obtained from third parties

• Google OAuth: if you authorize the connection with Google, we access your email address and basic profile data for authentication. If you authorize calendar access, we access Google Calendar events solely for the agenda features within the Services.

Information collected automatically

• Service usage data (queries made, features used).
• Basic technical information (browser type, IP address, access logs).

3. Purposes of processing

• Provide, maintain and improve the Services.
• Process your queries and generate responses through AI systems with human oversight.
• Manage integrations you authorize (for example, Google Calendar).
• Communicate with you about the service.
• Protect the security of the Services and prevent abuse.
• Comply with legal obligations.

4. Lawful basis

We process personal data based on: (a) performance of the service you request or the corresponding contract; (b) your consent, where applicable (for example, optional integrations you expressly authorize); (c) compliance with legal obligations; and (d) legitimate interests compatible with your rights, such as service security. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Use of Google data

Our application complies with the Google API Services User Data Policy, including the Limited Use requirements:

• We only access the Google data necessary for the features you authorize.
• We do not sell data obtained from Google to third parties.
• We do not use Google data for advertising.
• We do not allow humans to read your data, except with your express consent, for security reasons, to comply with applicable law, or for aggregated and anonymized internal operations.
• You can revoke access to your Google account at any time from your Google account settings.

6. Processors and providers

We do not sell or trade your personal information. We share data only with providers that process it on our behalf, under confidentiality and security obligations:

• AI providers: we use language model services (such as Anthropic/Claude) to process queries. These providers process data under their own privacy policies and do not retain your data to train models.
• Infrastructure and hosting: cloud providers where the Services are hosted.
• Legal obligation: we may disclose information if required by law or by order of a competent authority.

7. International transfers

Some of our providers (cloud infrastructure, AI services) process data outside Chile. When this happens, we seek adequate safeguards, such as contractual clauses and security standards equivalent to those described in this policy.

8. Retention

We retain your information while your account is active or as necessary to provide the Services, comply with legal obligations or resolve disputes. You may request deletion of your data at any time through the contact channel indicated.

9. Your rights

Under Chilean data protection law, you have the right to:

• Access: know the data we process about you and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request erasure of your data.
• Objection: object to certain processing.
• Portability: receive your data in a commonly used structured format.
• Withdrawal: revoke consents granted, including Google OAuth permissions.

To exercise these rights, write to admin@sinapsis.in. We will respond within the legally established timeframes.

10. Security

• Communications encrypted via HTTPS/TLS.
• Restricted data access under the principle of least privilege.
• Secure storage of credentials and tokens.
• Periodic review of security measures.

11. Changes to this policy

We may update this policy periodically. We will publish any changes on this page with a new update date.

12. Contact

• Email: admin@sinapsis.in
• Company: Sinapsis SpA (RUT 78.327.684-4), San Martín 924, Office 213, Temuco, Chile