Data Protection

1. Data Controller and Scope

Synthetix AI Education Group LLC, a limited liability company registered in the State of California, United States of America (Company Registration Number: C4582910, VAT/Tax ID: 95-4820193), acts as the primary Data Controller for all personal information processed through this website (synthetix-academy.com) and our associated educational platforms. Our physical headquarters and designated data processing facility are located at 156 2nd Street, Floor 3, San Francisco, CA 94105, USA. For any matters regarding your personal data or to exercise your legal rights, please contact our Data Privacy Officer at [email protected] or via physical mail at our San Francisco address.

This Privacy Policy applies to all visitors of our website, prospective students inquiring about our curriculum, and enrolled students participating in our AI-integrated training programs. By interacting with our platforms, you acknowledge the data handling practices described herein.

2. Categories of Data Collected

We collect and process various categories of data to provide our specialized AI-integrated educational services and to ensure the security of our virtual learning environments. These categories include:

• Identity and Professional Data: Full name, professional title, company affiliation, and educational history provided during the application and registration process for our cohort-based tracks.
• Contact Information: Email address (must be a verifiable business or personal domain), physical billing and shipping addresses, and primary telephone number.
• Educational and Performance Data: Course progress metrics, assessment results, participation logs in live workshops, and final project deliverables. This data is essential for the issuance of our 'AI Design Master' digital certification.
• Technical and Analytical Data: IP addresses, browser types, operating system details, device identifiers, and interaction logs. We use this information to maintain platform stability and to protect against unauthorized access.
• Neural Network Interaction (Prompt) Data: As a technology-focused institution, we collect and store the specific text prompts, logical parameters, and iteration sequences used by students within our proprietary AI sandbox environments. This data is processed to provide pedagogical feedback and to improve our 'Prompt-to-Prototype' instructional methodology.

3. Legal Basis and Purpose of Processing

Synthetix AI Education Group LLC processes your personal information under several legal frameworks as defined by applicable data protection laws, including GDPR and CCPA:

• Contractual Necessity: The processing of identity and educational data is required to fulfill our commitment to provide training services to enrolled students and to manage the academic relationship.
• Explicit Consent: We rely on your clear, affirmative consent for the delivery of marketing communications, newsletter subscriptions, and the placement of non-essential cookies. You may withdraw this consent at any time.
• Legitimate Interests: We process technical data to ensure the cybersecurity of our platforms, to prevent fraudulent activities, and to conduct internal research aimed at optimizing our generative design curriculum.
• Legal Obligation: We maintain certain records to comply with regulatory requirements from the Bureau for Private Postsecondary Education (BPPE) and for tax reporting purposes in the United States.

4. Data Retention and Deletion

We adhere to the principle of data minimization, retaining personal information only for the duration necessary to achieve the purposes outlined in this policy. Our specific retention standards are as follows:

Active student records, including educational performance and identity data, are maintained for the duration of the enrollment period and for a period of seven (7) years following graduation or withdrawal. This retention period is mandatory under California educational regulations to facilitate transcript requests and certification verification. Technical log data, including IP access logs, is typically purged after ninety (90) days unless it is required for an ongoing security audit or legal investigation. For prospective students who inquire but do not enroll, we retain contact information for eighteen (18) months from the last point of contact before permanent deletion.

5. Third-Party Disclosures and Processors

To provide high-fidelity AI-integrated education, we utilize a select group of technical partners. We share limited, pseudonymized data with the following categories of third-party processors:

• Generative AI Providers: Including OpenAI, Anthropic, and Midjourney, for the purpose of facilitating student access to generative engines. These interactions are governed by enterprise-level privacy agreements.
• Cloud Infrastructure: We host our platforms and data on secure servers provided by Amazon Web Services (AWS) and Google Cloud Platform (GCP), utilizing SOC 2 Type II compliant facilities in the United States.
• Educational Tooling: We use specialized platforms for virtual classrooms and collaborative design (e.g., Zoom, Slack, Figma).

We do not sell, rent, or trade your personal information to third-party marketing firms or data brokers. All third-party sharing is conducted through encrypted channels and is subject to strict data processing agreements.

6. Cookie Policy and Tracking

Our website utilizes cookies and similar tracking technologies to enhance user experience and analyze site traffic. Essential cookies are necessary for the core functionality of the website, such as secure login and session management. Analytical cookies help us understand how visitors interact with our content, allowing us to improve the navigation and clarity of our information. We also use marketing cookies to measure the effectiveness of our advertising campaigns. You have the right to manage your cookie preferences through the interactive banner on our homepage or by adjusting your browser settings. Blocking certain types of cookies may impact your ability to use all features of our educational platform.

7. International Data Transfers

Synthetix AI Education Group LLC is headquartered in the United States. If you are accessing our services from the European Economic Area (EEA), United Kingdom, or other regions with specific data export laws, please be aware that your personal data will be transferred to and processed in the United States. We implement Standard Contractual Clauses (SCCs) and other approved mechanisms to ensure that your data receives a level of protection equivalent to that required in your home jurisdiction.

8. Your Rights and Exercise of Choice

Regardless of your location, Synthetix Academy provides all users with significant control over their personal data. Your rights include:

• The Right to Access: You may request a comprehensive report of the personal data we hold about you.
• The Right to Rectification: You may request the correction of any inaccurate or incomplete personal information.
• The Right to Erasure: Also known as the 'Right to be Forgotten', you may request the deletion of your data where it is no longer necessary for the purposes for which it was collected.
• The Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
• The Right to Object: You may object to the processing of your data for specific purposes, including direct marketing.

To exercise any of these rights, please submit a verified request to [email protected]. We will respond to all valid requests within thirty (30) calendar days.

9. Security Architecture

We implement enterprise-grade security protocols to protect your information from unauthorized access, alteration, or destruction. This includes AES-256 encryption for data at rest, TLS 1.3 encryption for data in transit, and multi-factor authentication (MFA) for all administrative access to student records. Our internal systems undergo regular penetration testing and vulnerability assessments to ensure the resilience of our security posture.

10. Policy Governance and Updates

This Privacy Policy was last updated on May 19, 2026. We reserve the right to modify this policy to reflect changes in our educational services, technological advancements, or regulatory requirements. Significant updates will be communicated to enrolled students via their registered email address and will be posted prominently on our website. Continued use of our services after such updates constitutes acknowledgement of the revised policy.

If you have any questions or concerns regarding this policy, or if you believe that our processing of your personal data violates applicable laws, you have the right to lodge a complaint with a supervisory authority, such as the California Privacy Protection Agency (CPPA) or your local data protection regulator.