SYNAPSTARS // PRIVACY NOTICE

SynapStars Privacy Notice

Last updated: August 2026

SynapStars is an industry intelligence and connection platform. We connect professionals with organisations, facilitate hiring processes, and provide market intelligence to our users. This notice explains what personal data we collect, why we collect it, and the choices you have.

1Who We Are

SynapStars is operated by SynapStars Ltd. We are the data controller responsible for your personal data. Our platform is built on Base44 infrastructure, which acts as our data processor.

Contact for privacy matters: info@synapstars.app

2What Data We Collect

When you create an account:

  • Name, email address, phone number
  • Professional title, organisation, industry
  • Location (city, country)
  • Skills, experience, certifications, education
  • CV / resume (if uploaded)

When you apply for a job:

  • Your application details and cover note
  • The job title and organisation you applied to
  • Application status (applied, shortlisted, rejected, offered)

When an interview is proposed to you:

  • Your name and email (used to notify you)
  • The proposing organisation's name and contact email
  • The job title and proposed time slots
  • Whether you accepted or declined

When you propose an interview (organisation users):

  • Your organisation's name and contact email
  • The candidate's name and ID
  • Proposed time slots and interview type
  • Whether the candidate accepted or declined

Platform intelligence data (anonymised):

  • Aggregate hiring trends (e.g., "demand for medical physicists in Munich increased 40%")
  • Acceptance rates and response times (anonymised — no individual identification)
  • Market movement signals (e.g., "3 organisations are actively hiring in this sector")

3Why We Process Your Data

Purpose
Legal Basis
Data Used
Account management
Contract (Art. 6(1)(b))
Name, email, professional profile
Job matching & applications
Contract (Art. 6(1)(b))
CV, skills, experience, applications
Interview scheduling
Contract (Art. 6(1)(b))
Name, email, proposed slots, decisions
Notifications (in-app & push)
Consent (Art. 6(1)(a))
Name, device token, notification content
Market intelligence & analytics
Legitimate interest (Art. 6(1)(f))
Anonymised aggregate data only
Platform security & fraud prevention
Legitimate interest (Art. 6(1)(f))
IP address, device info, activity logs
Compliance with legal obligations
Legal obligation (Art. 6(1)(c))
As required by law

4How EMMA AI Uses Your Data

SynapStars includes an AI intelligence layer called EMMA. EMMA:

  • Does NOT make automated decisions that affect your employment opportunities without human oversight
  • Does aggregate anonymised data to provide market insights (e.g., "interview acceptance rates by sector")
  • Does track activity timelines (proposal → response → outcome) to improve the platform
  • Does NOT profile individuals based on protected characteristics (race, gender, religion, health, etc.)
  • Does NOT share your individual data with third parties for marketing

Your rights regarding AI:

If EMMA generates an insight about your activity (e.g., "this candidate responds quickly to interviews"), this is based on your explicit actions on the platform. You have the right to:

  • Request an explanation of any automated insight
  • Contest any inference made about you
  • Opt out of tracking for intelligence purposes (see Section 7)

5Data Sharing

We share your data in these specific circumstances:

Recipient
What's Shared
Why
Organisations you apply to
Your application, CV, and profile
You initiated this by applying
Organisations that propose interviews
Your name, email (for notification)
You opted into being contactable
Push notification service (Apple/Google)
Notification content (name + role)
To deliver push to your device
Base44 (infrastructure provider)
All platform data
Acts as our data processor under DPA
Legal authorities
As required by law
Only under legal obligation

We never sell your data. We never share your individual data with other organisations for marketing or recruitment purposes unless you explicitly apply to their role or opt into being contacted.

6Data Retention

Data Type
Retention Period
After Retention
Active account data
While your account is active
Deleted on account deletion
Job applications
24 months after application
Anonymised (name and email removed)
Interview records
24 months after interview date
Anonymised (names, emails removed; aggregate stats retained)
EmmaAction logs
24 months after action creation
Anonymised (user_id and personal details removed)
Notifications
6 months
Deleted
Shortlists
While account active or 12 months inactive
Deleted
CV / resume files
While account active or until removed
Deleted
Anonymised aggregate data
Indefinitely
No personal data — used for market intelligence

7Your Choices & Rights

You have the right to:

  • Access — Request a copy of all data we hold about you (Art. 15)
  • Rectify — Correct inaccurate data (Art. 16)
  • Erase — Request deletion of your data (Art. 17), subject to legal retention obligations
  • Restrict — Limit how we process your data (Art. 18)
  • Portability — Receive your data in a machine-readable format (Art. 20)
  • Object — Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent — For push notifications and intelligence tracking at any time
  • Contest automated decisions — Request human review of any AI-generated insight about you

To exercise any of these rights: Email info@synapstars.app. You can also export your data or delete your account from Profile → Settings → Privacy.

Opting out of intelligence tracking:

You can disable intelligence tracking in Settings → Privacy → "Allow SynapStars to use my activity for platform intelligence." This will stop logging your actions to EmmaAction timelines, remove you from aggregate analytics, and not affect your ability to use core features (job applications, interviews, messaging).

8International Data Transfers

Your data may be processed on servers located outside the EU/UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) with our infrastructure provider and Transfer Impact Assessments where required post-Schrems II.

9Security

We implement technical and organisational measures including:

  • Role-based access control (only you and authorised parties see your data)
  • Service-role operations for cross-user data writes (audit-logged)
  • Encrypted data transmission (TLS)
  • Regular security reviews

10Children's Data

SynapStars is not intended for users under 16. We do not knowingly collect data from children. If you believe a minor has registered, contact info@synapstars.app.

11Changes to This Notice

We may update this notice. Material changes will be communicated via email and in-app notification at least 30 days before taking effect.