Privacy Policy
Last updated November 3, 2026. This policy summarizes how Syntony Research LLC handles personal information submitted through this website, during business inquiries, and while providing services.
Information we collect
We collect information you provide directly, including name, organization, email address, engagement type, scheduling details, inquiry details, and message content. We may also receive ordinary technical information such as IP address, browser type, referring page, and pages visited.
How we use information
We use information to respond to inquiries, schedule consultations, evaluate potential engagements, provide services, process and document payments, calculate taxes, respond to support requests, prevent misuse, maintain business and accounting records, and comply with legal obligations. We do not sell personal information.
Payments and taxes
When payment is required for a service, the payment provider may collect payment-method details, billing contact information, transaction amount, tax information, payment status, and information needed to prevent fraud or handle disputes. Syntony receives the limited billing and transaction information needed to administer the service, but does not receive or store your full payment-card number.
Business inquiries and pilot discussions
When you request a consultation or discuss a potential product pilot, we collect your name, email address, organization, inquiry type, and message, along with your product interest, inquiry source, and timeline if you provide them. The form sends this information to Formspree for delivery and processing. We use it to assess your inquiry and follow up about potential work with Syntony. Submitting an inquiry does not subscribe you to a product waitlist or newsletter, confirm a meeting, or provide product access.
You may also contact us directly at hello@syntonyresearch.ai. Form submissions are subject to Formspree’s privacy policy.
2027 product reveal notifications
When you request a reveal notification, we collect your email address, signup source and the topic you chose. Formspree processes the request. We use it to send news about this product reveal; it does not subscribe you to The AI Assurance Brief or other product waitlists. The 2027 announcement does not promise general product availability on a specific date. You may ask to stop these updates or delete your details at hello@syntonyresearch.ai.
Product waitlists
When you join the GovTune AI or Resonance waitlist, we collect your email address and the signup source. The form sends these details to Formspree for delivery and processing of the waitlist request. We use them to manage your interest and send updates and news about availability for the product you chose. Joining does not provide immediate product access.
You can ask to leave the waitlist or request deletion of your details by emailing hello@syntonyresearch.ai. Form submissions are also subject to Formspree’s privacy policy.
BLACKLINE sign-in and gameplay
The hosted BLACKLINE game requires sign-in through an available Microsoft, Google, or GitHub connection. Syntony uses the provider's account identifier and display name to create and validate a challenge session. The game does not request access to your mail, files, or private repositories. Your provider handles the account password; Syntony does not receive it.
Provider access and identity tokens are used during the authentication callback and are not stored. The service keeps temporary authentication records, revocable challenge sessions, and hashed account or network identifiers for usage and abuse controls. Challenge sessions expire after 15 minutes; expired records receive cleanup during subsequent service requests. The browser keeps the challenge session token and sign-in proof separately in tab-scoped session storage. They are not included in exported game evidence.
Gameplay is a self-contained simulation that runs in your browser and does not call live AI models or send gameplay inputs to model providers. Its original characters, organizations, scenarios, and outcomes are fictional. Campaign progress, operator choices, level-unlock records, decisions, and synthetic evidence are kept in this browser's local storage so you can return to your game. These records remain on the device until you reset your progress or clear the site's browser data.
Exported evidence is a file you choose to download and share; the game does not automatically upload it or submit a GitHub finding. Downloading or forking the public source does not require challenge sign-in, and a locally served copy supports unsigned simulation practice. The website and hosting providers may process ordinary technical requests needed to deliver the game and its assets, as described elsewhere in this policy.
Attacca Chrome extension
Attacca, the Syntony Chrome extension, runs entirely in your browser. It receives only the text you select and send to it through the right-click menu, or paste into its side panel. It does not read web pages, has no host permissions or content scripts, and makes no network requests. Syntony does not receive or collect anything you enter.
The extension keeps your five most recent findings in Chrome’s local storage on your device so you can reopen them. Removing the extension deletes that data. Text you send from the right-click menu is held in session storage only until the side panel reads it. Records you copy or download stay wherever you put them.
The extension uses three permissions: sidePanel to show its panel, contextMenus for the right-click entry, and storage for the recent list. Questions go to hello@syntonyresearch.ai.
Fermata MCP server
Fermata, the Syntony MCP server, runs on your computer as a program your AI client starts. It makes no network requests, and Syntony does not receive or collect anything it reads or writes.
It reads the policy file you name and any record files you ask it to recheck. It writes one file, a decision log of the actions your agent checked and the answers it gave, beside the policy or wherever you set with --log. Deleting that file deletes the record, and also the record of which single-use approvals have been used. Questions go to hello@syntonyresearch.ai.
Analytics and cookies
The site may use privacy-respecting analytics, such as Plausible, to understand aggregate site usage without cross-site tracking. We do not use advertising cookies. Embedded third-party services may set their own cookies or storage when used.
Service messages
We and our service providers may send messages needed to respond to inquiries, schedule or deliver services, provide receipts, address security concerns, respond to support requests, or communicate material changes to a service or its terms. Marketing messages, if any, are handled separately and include an unsubscribe option.
Service providers
We share personal information with scheduling, payment, email, site-service, and other vendors only as reasonably necessary to provide services, communications, security, support, and related operations. These providers may process information under their own terms and privacy notices.
Confidentiality and client materials
Service-related confidential information is handled under the applicable NDA, statement of work, or client agreement. Do not submit highly sensitive information through the public contact form before an appropriate confidentiality arrangement is in place.
Retention and your choices
We retain transaction, service, and communication records for as long as reasonably needed to provide services, maintain security, meet accounting and tax requirements, resolve disputes, and comply with law.
You may contact hello@syntonyresearch.ai to request access to, correction of, or deletion of personal information. Some information may be retained where law permits or requires it.
Contact
Questions about this policy can be sent to hello@syntonyresearch.ai.