1. Who is responsible for your data
SYNERVA Software Design, Dubai, United Arab Emirates, trade licence No. 1623262. We build AI assistants, agents and apps and act as the data controller for personal data processed through this website. Contact privacy@synervastudio.com with privacy questions.
2. Information we receive
- Messages you send to Layla and the assistant’s replies.
- A browser identifier that helps connect conversations on the same device. It does not itself contain your name, but it can be associated with your conversation.
- Your name, email, phone number or other contact details that you choose to share in a chat or enquiry.
- Technical information, such as browser type, language and approximate region, and server logs used for security and reliability.
- Your cookie preferences.
We do not request special categories of personal data for this chat. Please do not send payment details, identity documents, health information, passwords or other sensitive information.
3. Why we use this information
To operate the assistant and retain the conversation context, answer your questions, contact you when requested, improve responses and the service, maintain security and meet applicable legal obligations.
4. Grounds for processing
Where applicable law requires a legal basis, we rely on consent, performing a contract or taking steps you request, and legitimate interests in operating, securing and improving the service, balanced against your rights. Consent is used, for example, for optional cookies. You may withdraw consent.
5. AI providers and other recipients
Messages are sent to our AI providers, OpenAI and/or Anthropic, to generate responses. We may also use hosting and infrastructure providers.
These providers’ servers may be outside the UAE and Russia, including in the United States. The next section explains this further. We do not sell your personal data or use it to advertise other companies’ products. Information may be disclosed when required by law.
6. Processing in other countries
When an AI or infrastructure provider is based elsewhere, your information may be processed in that country. Its level of protection may differ from your own country’s. Where required, appropriate safeguards apply, including providers’ contractual data-protection commitments. Section 17 also applies to users in Russia.
7. Cookies, browser storage and advertising measurement
We use browser storage to operate the website and chat, remember choices and carry out permitted measurement. The existing categories cover necessary technologies, optional features and analytics.
Necessary technologies support the website and chat. Optional features may remember preferences such as language. Analytics and advertising measurement help us understand website use and which ads bring visitors.
Google Analytics and Google Ads are used for measurement, including actions such as opening WhatsApp or the website chat. Optional technologies are enabled according to your choice. You can change it through Cookie settings in the footer. Permission for optional storage is not granted by default.
8. Retention
The current policy provides for chat conversations to be retained for up to 12 months, then deleted or anonymised. Exceptions include an earlier deletion request or longer retention required by law or to resolve a dispute.
Contact information is kept as long as needed to handle the enquiry and maintain relevant business records. You can request earlier deletion.
9. Protecting information
We use technical and organisational measures, including restricted access to information. API keys and passwords are not intended to be published in the website’s public code. No transmission or storage method is protected against every risk.
10. Your rights and deleting conversations
Depending on applicable law, you may request access, correction, deletion, restriction, a portable copy, object to processing or withdraw consent. Contact privacy@synervastudio.com to make a request.
Clearing browser storage removes information from your device but does not itself delete server records. When requesting server-side deletion, include your client identifier if available and any email or phone number used in your enquiry to help us find the conversation.
Where provided by law, you may complain to your local data-protection authority, including Roskomnadzor for users in Russia.
11. Children
The website and services are intended for adults aged 18 or over. We do not knowingly collect children’s information. If you believe a child has supplied information, contact us so we can delete it.
12. Automated AI responses
Layla generates responses automatically. They are informational and assistive and do not themselves create a binding agreement. Decisions with legal effects on you are not made solely by automated means. A person confirms contracts and pricing commitments.
13. Links to other websites
The website may link to third-party services, such as social networks. Their own policies govern their handling of information. We are not responsible for those practices; please review their policies before using the service.
14. Policy changes
We may update this policy. Material changes are published on this page with a new update date.
15. Governing law
This policy is governed by the laws of the United Arab Emirates. This does not remove mandatory data-protection rights provided to you by applicable local law.
16. Contact
SYNERVA Software Design, Dubai, UAE. Trade licence No. 1623262. For personal data matters: privacy@synervastudio.com.
17. Information for users in Russia
The current policy describes processing on the basis of consent and subject to applicable requirements, including Federal Law No. 152-FZ of 27 July 2006, “On Personal Data”.
The operator is SYNERVA Software Design, whose contact details appear above. Processing purposes include responding to enquiries, consultation, service demonstrations and requested contact. Information may include names, contact details, messages and technical data. Processing includes collection, recording, storage, use, transfer, anonymisation and deletion.
The existing provision describes submitting information in chat as consent to its processing for these purposes and to transferring the information needed for the service to AI and infrastructure providers outside Russia, including in the United States. The processing and consent mechanism must meet applicable requirements.
You may withdraw consent or request access, correction, blocking or deletion through privacy@synervastudio.com. You may also complain to Roskomnadzor. Applicable consent, notification, storage and transfer requirements need to be considered separately when handling data of users in Russia; policy wording alone is not sufficient.