Privacy Policy

This policy explains what personal data Synthetic Factory processes when you use the website and shop, why it is processed, and which rights you have under GDPR.

This Privacy Policy applies to the website and web shop located at https://syntheticfactory.com/, operated by SYNTHETIC FACTORY obrt za racunalno programiranje, vl. Ognjen Jaric, Istarska 15, Bjelovar, 43000, Croatia (hereinafter: "we", "us", "our").

We are committed to protecting your personal data and processing it in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).

1. Who We Are

Controller:
SYNTHETIC FACTORY obrt za racunalno programiranje, vl. Ognjen Jaric
Istarska 15, Bjelovar, 43000
Croatia
Email: support@syntheticfactory.com
Website: https://syntheticfactory.com/

2. What Data We Collect and Why

2.1 Account Registration and Orders

When you create an account or place an order, we collect:

• Full name
• Email address
• Billing address
• Order history
• Software license keys associated with your account

Legal basis: Article 6(1)(b) GDPR - processing is necessary for the performance of a contract.

Retention: Order and billing records are retained for 7 years in accordance with Croatian accounting regulations. Account data is retained until you request deletion of your account.

2.2 Payment Processing

Payments are processed by Stripe, Inc. We do not store your payment card details. Stripe receives your payment information directly and processes it under their own privacy policy. We receive only a payment confirmation and transaction reference.

For more information, see the Stripe Privacy Policy.

Legal basis: Article 6(1)(b) GDPR - processing is necessary for the performance of a contract.

2.3 Transactional Emails

Transactional emails (order confirmations, license key delivery) are sent directly from our own mail server. No third-party email service provider is involved in this process. Your email address is used solely for transactional communications related to your purchase or account.

We do not send marketing emails without your explicit consent.

Legal basis: Article 6(1)(b) GDPR - processing is necessary for the performance of a contract.

2.4 Support Communications

Support enquiries sent to support@syntheticfactory.com are received on our own mail server and forwarded to a Gmail account for handling. By emailing us for support, your message content will be processed by Google LLC under their Privacy Policy. Please do not send sensitive personal data via support email.

Legal basis: Article 6(1)(f) GDPR - legitimate interest in providing customer support.

2.5 API Authentication (MVE Trainer)

If you use MVE Trainer, our software communicates with our website via the WordPress REST API using JWT (JSON Web Token) authentication to verify your license. This involves transmitting your authentication token during license validation requests. No additional personal data is collected during this process beyond what is already associated with your account.

Legal basis: Article 6(1)(b) GDPR - processing is necessary for the performance of a contract.

2.6 Security

We use Wordfence Security to protect our website. Wordfence may log your IP address and browser information for security and fraud prevention purposes, including blocking malicious traffic. These logs are retained for a limited period for security purposes.

For more information, see the Wordfence Privacy Policy.

Legal basis: Article 6(1)(f) GDPR - legitimate interests in maintaining the security of our website and services.

2.7 Website Traffic Analytics

We use Google Search Console, which operates server-side and does not set cookies or collect personal data from your browser. We also use server-side access logs (AWStats) to monitor general traffic patterns. Neither of these services tracks you individually or shares your data with third parties.

Legal basis: Article 6(1)(f) GDPR - legitimate interest in understanding how our website is used in order to improve it.

3. Cookies

We use only strictly necessary cookies required for the operation of our website and shop (login sessions, shopping cart, security). These do not require your consent.

With your consent, we embed YouTube videos which may set cookies. You can withdraw your consent at any time via the cookie settings link in the footer.

For full details, please see our Cookie Policy.

4. Software and Local Data Processing

Our software products (MVE, MVE Trainer) run entirely on your local machine. Any media files, datasets, or face images you process using our software are processed locally on your hardware. We do not receive, access, store, or process any such content on our servers. We have no visibility into what you do with our software on your own machine.

5. Who We Share Your Data With

We share your data only where necessary to deliver our services:

We do not sell your personal data. We do not share your data with advertisers or data brokers.

6. Data Transfers Outside the EEA

Some of our service providers (Stripe, Google/YouTube, Wordfence) are based in the United States. These transfers are carried out under appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

7. Your Rights

Under GDPR, you have the following rights:

• Right of access - you can request a copy of the personal data we hold about you
• Right to rectification - you can ask us to correct inaccurate data
• Right to erasure - you can ask us to delete your personal data, subject to legal retention obligations
• Right to restriction - you can ask us to restrict processing of your data in certain circumstances
• Right to data portability - you can request your data in a structured, machine-readable format
• Right to object - you can object to processing based on legitimate interests
• Right to withdraw consent - where processing is based on consent (e.g. YouTube cookies), you can withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at: support@syntheticfactory.com

We will respond within 30 days.

8. Complaints

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Croatian supervisory authority:

Agencija za zastitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
https://azop.hr

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last updated. We encourage you to review this page periodically.

10. Contact

For any questions or requests regarding this Privacy Policy:

Synthetic Factory
Istarska 15, Bjelovar, 43000, Croatia
Email: support@syntheticfactory.com
Website: https://syntheticfactory.com/