This is a working draft, not a reviewed legal document.
It describes what Synapse actually does today, in plain language, so it never claims
a protection the product doesn't have. Before this goes live for real users, it needs
sign-off from a lawyer qualified in Nigerian data protection law (NDPA/NDPR) —
particularly the placeholders marked [NEEDS LEGAL: …] below, which cover
things only Synapse's operator can supply: the registered company name, a data
protection contact, and how cross-border data transfer is handled.
Synapse is built so that using it — browsing homes, talking to Toju — never requires an account. We only collect what each feature genuinely needs:
Anonymous visitor ID. A random identifier stored in your browser (not tied to your name or email) so Toju can remember your conversation and preferences on this device.
Your conversation with Toju — what you tell Toju about the home you're looking for, your budget, and household. This is what lets Toju stop asking questions you've already answered.
Account details, only if you create one: your email and password (handled by Supabase Auth, which we do not have direct access to in plain text), and optionally your name.
Approximate location, only if you explicitly turn on proximity alerts — see below.
Standard technical data any website receives: browser type, rough page-load performance, and error reports, used only to keep the app working.
We do not buy data about you from anyone, and we do not sell yours.
Talking to Toju
Your messages to Toju are sent to our AI service provider (currently Anthropic) to generate a reply, and are stored so Toju can continue the conversation later. We do not use your conversations to train a public AI model.
If you build a Dream, Mood or Vision board, the images and tags you pin are stored in your browser (not on our servers) and read by Toju only to shape which homes it shows you.
Location & proximity alerts
Proximity alerts are off by default and require you to explicitly turn them on, on the browse page. When on, your device reports an approximate position (throttled to roughly once a minute) so our server can check it against verified homes matching your brief. We do not track your location when the feature is off, and turning it off stops reporting immediately.
Nothing about your location is shown to an agency, another user, or anyone else — it is only compared against listing coordinates to decide whether to send you a notification.
Accounts
We ask you to create an account at one specific moment: when you choose to contact an agent about a home. That's deliberate — browsing and talking to Toju stay anonymous, and we only ask for your details at the point they'd actually be used. Your password is never visible to us; it's handled entirely by Supabase Auth.
If you're an agency
Agency accounts additionally involve listings you upload, leads assigned to you, and — if you use the campaign tools — draft social media copy generated on your behalf. Verification checks we run on your listings (title, structural, flood risk, and so on) are stored so buyers can see what passed and when.
Who we share it with
An agency — only your name and contact details, and only after you choose to contact them about a specific home. We never hand these over before that.
Service providers we use to run Synapse: Supabase (database, authentication, file storage), and our AI provider (Toju's replies). Each only receives what its function requires.
Nobody else. No advertising networks, no data brokers.
Where it's stored
Synapse's database and authentication run on Supabase infrastructure. [NEEDS LEGAL: confirm the specific data-region and whether a cross-border transfer notice is required under NDPA for Nigerian users.]
Your rights
You can ask to see, correct, or delete the personal data we hold about you at any time. Deleting your account removes your profile and saved data; anonymous conversation data tied only to a device-generated visitor ID (never linked to your identity) is not something we can look up by your name, since we never collect one for anonymous use.
Contact
Questions about this policy, or a request to see or delete your data: partnerships@synapse.ng. [NEEDS LEGAL: a dedicated privacy/DPO contact, and the registered company name and address, once incorporated.]
Draft — last updated 2026-07-30. See the note below before treating this as final.
This is a working draft, not a reviewed legal document. It describes what Synapse actually does today, in plain language, so it never claims a protection the product doesn't have. Before this goes live for real users, it needs sign-off from a lawyer qualified in Nigerian data protection law (NDPA/NDPR) — particularly the placeholders marked [NEEDS LEGAL: …] below, which cover things only Synapse's operator can supply: the registered company name, a data protection contact, and how cross-border data transfer is handled.
Synapse is built so that using it — browsing homes, talking to Toju — never requires an account. We only collect what each feature genuinely needs:
Anonymous visitor ID. A random identifier stored in your browser (not tied to your name or email) so Toju can remember your conversation and preferences on this device.
Your conversation with Toju — what you tell Toju about the home you're looking for, your budget, and household. This is what lets Toju stop asking questions you've already answered.
Account details, only if you create one: your email and password (handled by Supabase Auth, which we do not have direct access to in plain text), and optionally your name.
Approximate location, only if you explicitly turn on proximity alerts — see below.
Standard technical data any website receives: browser type, rough page-load performance, and error reports, used only to keep the app working.
We do not buy data about you from anyone, and we do not sell yours.
Talking to Toju
Your messages to Toju are sent to our AI service provider (currently Anthropic) to generate a reply, and are stored so Toju can continue the conversation later. We do not use your conversations to train a public AI model.
If you build a Dream, Mood or Vision board, the images and tags you pin are stored in your browser (not on our servers) and read by Toju only to shape which homes it shows you.
Location & proximity alerts
Proximity alerts are off by default and require you to explicitly turn them on, on the browse page. When on, your device reports an approximate position (throttled to roughly once a minute) so our server can check it against verified homes matching your brief. We do not track your location when the feature is off, and turning it off stops reporting immediately.
Nothing about your location is shown to an agency, another user, or anyone else — it is only compared against listing coordinates to decide whether to send you a notification.
Accounts
We ask you to create an account at one specific moment: when you choose to contact an agent about a home. That's deliberate — browsing and talking to Toju stay anonymous, and we only ask for your details at the point they'd actually be used. Your password is never visible to us; it's handled entirely by Supabase Auth.
If you're an agency
Agency accounts additionally involve listings you upload, leads assigned to you, and — if you use the campaign tools — draft social media copy generated on your behalf. Verification checks we run on your listings (title, structural, flood risk, and so on) are stored so buyers can see what passed and when.
Who we share it with
An agency — only your name and contact details, and only after you choose to contact them about a specific home. We never hand these over before that.
Service providers we use to run Synapse: Supabase (database, authentication, file storage), and our AI provider (Toju's replies). Each only receives what its function requires.
Nobody else. No advertising networks, no data brokers.
Where it's stored
Synapse's database and authentication run on Supabase infrastructure. [NEEDS LEGAL: confirm the specific data-region and whether a cross-border transfer notice is required under NDPA for Nigerian users.]
Your rights
You can ask to see, correct, or delete the personal data we hold about you at any time. Deleting your account removes your profile and saved data; anonymous conversation data tied only to a device-generated visitor ID (never linked to your identity) is not something we can look up by your name, since we never collect one for anonymous use.
Contact
Questions about this policy, or a request to see or delete your data: partnerships@synapse.ng. [NEEDS LEGAL: a dedicated privacy/DPO contact, and the registered company name and address, once incorporated.]