Synapse is built so that using it — browsing homes, talking to Tayo — never requires an account. We only collect what each feature genuinely needs:
Anonymous visitor ID. A random identifier stored in your browser (not tied to your name or email) so Tayo can remember your conversation and preferences on this device.
Your conversation with Tayo — what you tell Tayo about the home you're looking for, your budget, and household. This is what lets Tayo stop asking questions you've already answered.
Account details, only if you create one: your email and password (handled by Supabase Auth, which we do not have direct access to in plain text), and optionally your name.
Approximate location, only if you explicitly turn on proximity alerts — see below.
Standard technical data any website receives: browser type, rough page-load performance, and error reports, used to keep the app working.
How the site is used, measured with Google Analytics: which pages are visited, roughly where from (the country and city Google works out from your connection), your device and browser, and which link or campaign brought you here. Before anything is sent, we remove from the page address whatever you typed or were sent in it — your questions to Tayo, searches, and sign-in or password-reset links — so none of that reaches Google. Google Analytics only runs if you accept analytics cookies in the banner we show on your first visit — if you say no, nothing is sent to Google at all. When it runs, it sets cookies (named _ga) to tell one visit from the next. You can change your choice at any time with Cookie settings, or block the cookies in your browser settings or with Google’s opt-out add-on, and Synapse keeps working.
We do not buy data about you from anyone, and we do not sell yours.
Talking to Tayo
Your messages to Tayo are sent to our AI service provider (currently Anthropic) to generate a reply, and are stored so Tayo can continue the conversation later. We do not use your conversations to train a public AI model.
If you build a Dream, Mood or Vision board, the images and tags you pin are stored in your browser (not on our servers) and read by Tayo only to shape which homes it shows you.
Location & proximity alerts
Proximity alerts are off by default and require you to explicitly turn them on, on the browse page. When on, your device reports an approximate position (throttled to roughly once a minute) so our server can check it against verified homes matching your brief. We do not track your location when the feature is off, and turning it off stops reporting immediately.
Nothing about your location is shown to an agency, another user, or anyone else — it is only compared against listing coordinates to decide whether to send you a notification.
Accounts
We ask you to create an account at one specific moment: when you choose to contact an agent about a home. That's deliberate — browsing and talking to Tayo stay anonymous, and we only ask for your details at the point they'd actually be used. Your password is never visible to us; it's handled entirely by Supabase Auth.
If you're an agency
Agency accounts additionally involve listings you upload, leads assigned to you, and — if you use the campaign tools — draft social media copy generated on your behalf. Verification checks we run on your listings (title, structural, flood risk, and so on) are stored so buyers can see what passed and when.
Social accounts an agency connects
An agency can connect its own social accounts so Synapse can publish its listings there. We connect an account only when someone at the agency asks us to, through that platform's own sign-in, and only the accounts they choose.
Facebook Pages and Instagram professional accounts, through Meta's sign-in. We receive the Page's or account's ID and name, an access token, and the setting of the Page's action button (which we read and never change). We use them to publish the listings the agency schedules; to read the like, comment and share counts on those posts; to read the text of comments on those posts so the agency can answer them; and, only if the agency switches it on, to send one private message containing the listing's link to a person who commented the word the post asked for. We do not read followers, insights, inbox messages, or anything about posts we did not publish.
TikTok, through TikTok's sign-in. We receive the account's ID, display name and an access token, and use them only to send the agency's listing photos to that account's TikTok inbox as drafts, which the agency finishes and posts itself.
Telegram channels. The agency adds our bot to its channel as an administrator. We store the channel's ID, title and @name, and use them only to post the agency's listings there. If an agency member links their Telegram account, we store its Telegram ID, username and first name, so we can send them each post's Story kit. Messages sent to the bot are not stored; it replies with a link to Tayo.
Access tokens are stored encrypted, are used only by our servers, and are never shown to anyone, including the agency. Disconnecting an account (Social studio → Channels → Disconnect) deletes its tokens immediately. We keep the account's name so that earlier posts still show where they went.
People who comment on an agency's posts. For comments on posts we published, we keep the commenter's display name or handle and the comment text, nothing else from their profile, and delete both automatically after 90 days. They are visible only to the agency whose post it was. Anyone can ask us to delete theirs sooner at the contact address below.
Removing Synapse's access. An agency can disconnect at any time in Synapse, or remove Synapse in Facebook's Business integrations settings or TikTok's app permissions settings, or remove our bot from the Telegram channel. To have us delete everything we hold from a connected account, email us at the address below.
Who we share it with
An agency — only your name and contact details, and only after you choose to contact them about a specific home. We never hand these over before that.
Service providers we use to run Synapse: Supabase (database, authentication, file storage), and our AI provider (Tayo's replies). Each only receives what its function requires.
Meta, TikTok and Telegram: the listing posts an agency asks us to publish, sent to that agency's own connected account.
Google (Google Analytics): the usage measurements described above, and only if you accept analytics cookies, so we can count visits and see which pages and channels are working. We use it for measurement only, not for advertising.
Nobody else. No advertising networks, no data brokers.
Where it's stored
Synapse's database and authentication run on Supabase infrastructure. [NEEDS LEGAL: confirm the specific data-region and whether a cross-border transfer notice is required under NDPA for Nigerian users.]
Your rights
You can ask to see, correct, or delete the personal data we hold about you at any time. Deleting your account removes your profile and saved data; anonymous conversation data tied only to a device-generated visitor ID (never linked to your identity) is not something we can look up by your name, since we never collect one for anonymous use.
Contact
Questions about this policy, or a request to see or delete your data: ilios.intelligence@gmail.com. [NEEDS LEGAL: a dedicated privacy/DPO contact, and the registered company name and address, once incorporated.]
Synapse is built so that using it — browsing homes, talking to Tayo — never requires an account. We only collect what each feature genuinely needs:
Anonymous visitor ID. A random identifier stored in your browser (not tied to your name or email) so Tayo can remember your conversation and preferences on this device.
Your conversation with Tayo — what you tell Tayo about the home you're looking for, your budget, and household. This is what lets Tayo stop asking questions you've already answered.
Account details, only if you create one: your email and password (handled by Supabase Auth, which we do not have direct access to in plain text), and optionally your name.
Approximate location, only if you explicitly turn on proximity alerts — see below.
Standard technical data any website receives: browser type, rough page-load performance, and error reports, used to keep the app working.
How the site is used, measured with Google Analytics: which pages are visited, roughly where from (the country and city Google works out from your connection), your device and browser, and which link or campaign brought you here. Before anything is sent, we remove from the page address whatever you typed or were sent in it — your questions to Tayo, searches, and sign-in or password-reset links — so none of that reaches Google. Google Analytics only runs if you accept analytics cookies in the banner we show on your first visit — if you say no, nothing is sent to Google at all. When it runs, it sets cookies (named _ga) to tell one visit from the next. You can change your choice at any time with Cookie settings, or block the cookies in your browser settings or with Google’s opt-out add-on, and Synapse keeps working.
We do not buy data about you from anyone, and we do not sell yours.
Talking to Tayo
Your messages to Tayo are sent to our AI service provider (currently Anthropic) to generate a reply, and are stored so Tayo can continue the conversation later. We do not use your conversations to train a public AI model.
If you build a Dream, Mood or Vision board, the images and tags you pin are stored in your browser (not on our servers) and read by Tayo only to shape which homes it shows you.
Location & proximity alerts
Proximity alerts are off by default and require you to explicitly turn them on, on the browse page. When on, your device reports an approximate position (throttled to roughly once a minute) so our server can check it against verified homes matching your brief. We do not track your location when the feature is off, and turning it off stops reporting immediately.
Nothing about your location is shown to an agency, another user, or anyone else — it is only compared against listing coordinates to decide whether to send you a notification.
Accounts
We ask you to create an account at one specific moment: when you choose to contact an agent about a home. That's deliberate — browsing and talking to Tayo stay anonymous, and we only ask for your details at the point they'd actually be used. Your password is never visible to us; it's handled entirely by Supabase Auth.
If you're an agency
Agency accounts additionally involve listings you upload, leads assigned to you, and — if you use the campaign tools — draft social media copy generated on your behalf. Verification checks we run on your listings (title, structural, flood risk, and so on) are stored so buyers can see what passed and when.
Social accounts an agency connects
An agency can connect its own social accounts so Synapse can publish its listings there. We connect an account only when someone at the agency asks us to, through that platform's own sign-in, and only the accounts they choose.
Facebook Pages and Instagram professional accounts, through Meta's sign-in. We receive the Page's or account's ID and name, an access token, and the setting of the Page's action button (which we read and never change). We use them to publish the listings the agency schedules; to read the like, comment and share counts on those posts; to read the text of comments on those posts so the agency can answer them; and, only if the agency switches it on, to send one private message containing the listing's link to a person who commented the word the post asked for. We do not read followers, insights, inbox messages, or anything about posts we did not publish.
TikTok, through TikTok's sign-in. We receive the account's ID, display name and an access token, and use them only to send the agency's listing photos to that account's TikTok inbox as drafts, which the agency finishes and posts itself.
Telegram channels. The agency adds our bot to its channel as an administrator. We store the channel's ID, title and @name, and use them only to post the agency's listings there. If an agency member links their Telegram account, we store its Telegram ID, username and first name, so we can send them each post's Story kit. Messages sent to the bot are not stored; it replies with a link to Tayo.
Access tokens are stored encrypted, are used only by our servers, and are never shown to anyone, including the agency. Disconnecting an account (Social studio → Channels → Disconnect) deletes its tokens immediately. We keep the account's name so that earlier posts still show where they went.
People who comment on an agency's posts. For comments on posts we published, we keep the commenter's display name or handle and the comment text, nothing else from their profile, and delete both automatically after 90 days. They are visible only to the agency whose post it was. Anyone can ask us to delete theirs sooner at the contact address below.
Removing Synapse's access. An agency can disconnect at any time in Synapse, or remove Synapse in Facebook's Business integrations settings or TikTok's app permissions settings, or remove our bot from the Telegram channel. To have us delete everything we hold from a connected account, email us at the address below.
Who we share it with
An agency — only your name and contact details, and only after you choose to contact them about a specific home. We never hand these over before that.
Service providers we use to run Synapse: Supabase (database, authentication, file storage), and our AI provider (Tayo's replies). Each only receives what its function requires.
Meta, TikTok and Telegram: the listing posts an agency asks us to publish, sent to that agency's own connected account.
Google (Google Analytics): the usage measurements described above, and only if you accept analytics cookies, so we can count visits and see which pages and channels are working. We use it for measurement only, not for advertising.
Nobody else. No advertising networks, no data brokers.
Where it's stored
Synapse's database and authentication run on Supabase infrastructure. [NEEDS LEGAL: confirm the specific data-region and whether a cross-border transfer notice is required under NDPA for Nigerian users.]
Your rights
You can ask to see, correct, or delete the personal data we hold about you at any time. Deleting your account removes your profile and saved data; anonymous conversation data tied only to a device-generated visitor ID (never linked to your identity) is not something we can look up by your name, since we never collect one for anonymous use.
Contact
Questions about this policy, or a request to see or delete your data: ilios.intelligence@gmail.com. [NEEDS LEGAL: a dedicated privacy/DPO contact, and the registered company name and address, once incorporated.]