Privacy Policy

• Account information: email address, name (optional), and a password (stored only as a one-way bcrypt hash — we never store or can recover your actual password). If you sign in with ThoughtWave instead, we receive your email and name from that provider rather than handling a password ourselves.
• Two-factor authentication data, if you enable it: your TOTP secret, encrypted at rest (AES-256-GCM), and backup codes, stored only as bcrypt hashes.
• Device and network data: the WireGuard public key you provide, the IPv6 prefix and (if applicable) ASN assigned to your device or subscription, device names you choose, and connection usage data (bytes transferred, timestamps) needed to enforce your plan’s rate cap and show you usage graphs.
• Payment information: handled directly by Stripe, our payment processor. We receive confirmation of payment and a reference ID, not your card number.
• Peering/ASN applications: if you apply for BGP peering or register your own ASN or netblock with us, the identifying and routing information you submit for that application.
• Basic technical data: IP address and standard web server logs when you visit our site or use the dashboard, used for security and abuse investigation.

• To provide the Service: provisioning your /64, enforcing your plan’s rate cap, and keeping your connection routed.
• To authenticate you and keep your account secure, including detecting and responding to suspicious activity.
• To process payments and manage billing, subscriptions, and cancellations.
• To respond to support requests and send service-related communications (billing, security, policy changes).
• To investigate and respond to abuse reports, as described in our Acceptable Use Policy.
• To comply with legal obligations, including lawful requests from law enforcement or regulators.

We do not sell your personal information.

• Stripe, to process payments — subject to Stripe’s own privacy practices.
• ThoughtWave, only if you choose to sign in with a ThoughtWave account.
• Law enforcement, ARIN, or abuse authorities, in response to lawful requests, or to investigate abuse originating from a prefix assigned to you, as described in our Acceptable Use Policy.
• Service providers who help us operate the Service (e.g. infrastructure and email delivery), under obligations to protect your data.

We do not share your information with advertisers or data brokers.

We retain account and device data for as long as your account is active, and for a reasonable period afterward to resolve disputes, enforce our agreements, and comply with legal obligations (including network abuse records, which we may need to retain to respond to reports or investigations). You can request deletion of your account as described below.

Passwords are hashed with bcrypt. Two-factor secrets are encrypted at rest. Sessions use signed, HTTP-only cookies. Access to production systems and customer data is limited to what’s needed to operate the Service. No system is perfectly secure, and we can’t guarantee absolute security, but we take reasonable technical and organizational measures to protect your information.

You can access, update, or delete most of your account information directly from your dashboard. To request a copy of your data, request deletion of your account, or ask a question about this policy, email noc@synapsedatasystems.com. Depending on your location, you may have additional rights under laws like the GDPR or CCPA; we will honor applicable requests under those laws.

The Service is not directed to children under 13 (or the relevant age of digital consent in your jurisdiction), and we do not knowingly collect personal information from them.

Synapse is based in the United States and processes data there. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S.

We may update this policy from time to time. We will notify you of material changes by email or through the dashboard. The “Effective” date above reflects the latest version.

Questions about this policy or your data? Email noc@synapsedatasystems.com.