Your data. Your rights. Our responsibility.

Written in plain language, and describing what our system actually does. Here's what we collect, why, where it lives, and exactly how to control it.

Last updated: 17 July 2026

1.Who We Are

ROISynth is a digital growth service ("we", "us", "our") providing web design, SEO, paid advertising, AI automation, and related services to businesses. Our primary markets are the United States, United Kingdom, European Union, and United Arab Emirates.

For the purposes of data protection law, ROISynth acts as a data controller for the personal information collected through this website (roisynth.com) and our platform. Contact us at hello@roisynth.com with any privacy enquiries.

2.What Information We Collect

We only collect what we actually need. In plain terms:

–What you tell your strategist — the messages and briefs you type into your workspace, so your team can act on them. If you use the microphone, we keep a transcript of what you say (see "Talking to your strategist" below).
–Files you upload — documents, brand assets or other files you choose to share with us for your project.
–Connected accounts (read-only) — if you connect an analytics account, we receive only the metrics you authorise us to read. It is read-only; we can't change or post anything.
–Enquiries & leads — the details you submit through our tools: the free website audit, the plan builder, and contact forms (typically name, email, business details, and the goal or budget you describe). If you email build@roisynth.com, we log the sender, subject and a short snippet so we can follow up.
–Billing — your plan, your usage, and a customer reference from our payment processor (Stripe). Your card details are handled entirely by Stripe and never reach our servers.
–Product usage & technical data — basic analytics about how the site is used (only if you accept analytics cookies), and your IP address, which we use to keep the service secure and to apply fair-use limits.

3.Talking to Your Strategist (Voice)

If you talk to your strategist using the microphone, here's exactly what happens, in plain words:

Your strategist listens to what you say to build your plan. We keep a transcript so your team can act on it. You can delete it any time from your settings.

Before your first use of the microphone, we show you this notice and record your consent — the time you agreed and your account — so we have a clear record that you opted in. The short audio clips are used only to produce the transcript; the transcript is what we keep, and you control it. If you'd rather not use voice, you never have to — typing does exactly the same thing.

4.How We Use Your Information

We use your personal information only for legitimate purposes:

–To respond to you — replying to enquiries and supporting your account
–To handle billing — managing your plan, payments and receipts
–To keep the service safe and fair — preventing abuse and applying usage limits
–To improve our website — understanding which pages help and where visitors drop off (only with your consent to analytics)
–To meet legal obligations — such as financial record-keeping and fraud prevention

We do not sell, rent, or trade your personal data, and we do not use it to train third-party AI models for anyone else's benefit.

5.Our Legal Basis for Processing (GDPR / UK GDPR)

If you are in the UK or European Union, we rely on the following legal bases:

–Legitimate interests — running, securing and improving our business, and following up on enquiries you send us
–Consent — analytics cookies, the voice transcript feature, and any marketing emails, each of which you can decline or withdraw at any time
–Legal obligation — keeping financial and tax records as required by law

6.Cookies

Essential cookies keep you signed in and remember your cookie choice. Analytics cookies (Google Analytics via Google Tag Manager) run only if you accept them using the banner shown on your first visit — decline and non-essential cookies are not used. We never use advertising or profiling cookies.

For the full breakdown, see our Cookie Notice at roisynth.com/cookies.

8.How Long We Keep Your Data

We keep personal data only as long as we need it, and here's how that works in practice:

–Voice audio — the short clips are used only to create your transcript and are not kept in your workspace; the transcript stays until you delete it
–Billing records — retained for as long as financial and tax law requires, even after an account closes (so we can meet those obligations)
–Enquiry & lead data — kept while we may reasonably follow up, then removed
–Analytics data — subject to your consent and Google Analytics' retention settings

When you ask us to delete your data, we action the request and remove what we're not legally required to keep. See "Your Rights" below for how to ask.

9.Your Data Rights — and How to Use Them

Depending on where you live, you have rights over your personal data:

–Portability / export — your data in a portable format
–Rectification — correct anything inaccurate
–Erasure — delete your data ("right to be forgotten")
–Restriction — pause processing while a dispute is resolved
–Object — object to processing based on legitimate interests, or to marketing
–Withdraw consent — for anything based on consent (analytics, voice, marketing), at any time

How to exercise them:

–

**If you have an account** — go to Settings → Data & privacy in your workspace and submit a deletion or export request. A person reviews and actions it (we don't auto-wipe accounts, so nothing is lost by accident, and some billing records must be retained by law).

–

**If you don't have an account** — email hello@roisynth.com and we'll handle it.

We respond within 30 days. You can also complain to your data protection authority (in the UK, the ICO at ico.org.uk; in the EU, your national authority; in the US, your state attorney general).

10.International Transfers

Your core workspace data — your plans, transcripts, files and account records — is stored in the European Union (our cloud infrastructure runs in AWS's Stockholm region). Some of our providers are based in the United States or operate globally (for example our sign-in, payments, email and AI providers). Where personal data is transferred outside the UK or EU, we rely on appropriate safeguards — such as Standard Contractual Clauses or adequacy decisions — so your data keeps the same protection. The providers and their regions are listed on our Subprocessors page.

11.Not for Children

Our service is built for businesses and is not directed at anyone under the age of 18. We do not knowingly collect personal data from under-18s. If you believe someone under 18 has provided us with personal data, contact us at hello@roisynth.com and we will delete it promptly.

12.Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Material changes will be notified to active clients by email.

Manage your data

If you have an account, you can request deletion or export of your data from your workspace — go to Settings and submit a request. A person reviews and actions it. No account? Email hello@roisynth.com.

Go to Settings

Privacy questions?

If you have any questions or want to exercise your rights, email us directly. We respond within 30 days.

hello@roisynth.com

← Back to home Privacy Terms Security & trust Subprocessors Cookies