This is a translation provided for convenience. If there is any discrepancy, the Spanish version prevails.

This page explains what personal data we process on sintoga.com and in the app app.sintoga.com, why, who we share it with and what rights you have, under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Owner: Miguel González
Email: support@sintoga.com
LinkedIn: linkedin.com/in/miguel-gonzalez-herrera

For any privacy matter, write to us at support@sintoga.com.

2. What data we process and why

If you ask a question

Without signing up: you can ask without giving your name, email or phone number. We create an anonymous session so you can come back to your chat.
If you sign in: with Google (your account's name, email and photo) or with your phone number, to keep your history.
Your question: the text, the legal area, your country and region, the conversation with the student and, if you paste it, the answer an AI gave you.
Email alerts (optional): the email you give us so we can let you know when you get an answer. We delete it when the chat ends.
Contact with a law firm (optional): if you ask for a lawyer to contact you, your name, phone number, email, the legal area, your area and the text of your question.

If you are a law student

Name, photo, email (university and personal), university, studies, country and areas of expertise.
Your activity: chats handled, points, ratings and badges.
Public profile: your name, photo, university, studies, points, ratings and badges appear on your profile and in the rankings, which anyone can see.
Applications: if you apply for a job, we send the law firm your name, email, university, studies, points, chats handled, ratings and areas of expertise.

If you are a law professor or a lawyer

Professors: name, university email, university and a link to your faculty page, to verify you. Your name and university appear on your public profile and on the answers you supervise.
Lawyers: name, country, bar association and membership number (or equivalent), which we check against your bar association's public register. Your name appears next to the feedback you give students and, if you have a law firm, its details appear in the directory.

For everyone

Push notifications: if you turn them on, a device identifier so we can send them.
Security: technical data (IP address, browser, access logs) to prevent abuse, bots and floods of questions.
Where you came from: if you arrive through a campaign link, that campaign's tag, so we know which outreach works.

Do not include details that are not needed in your question, such as other people's names, ID numbers, addresses or health data. If your case needs them, by sending them you explicitly consent to the student who helps you using them only to answer you.

We do not sell your data, we do not use it for advertising and we do not build commercial profiles of you.

3. Who sees your question

The student who helps you.
Their law professor, if the student belongs to a class or legal clinic, to review the answer. They see the question and the conversation, but not your name, email or phone number.
Qualified lawyers acting as reviewers, only if you allow it, to give the student feedback. Beforehand we remove from the conversation, automatically and then by hand, anything that could identify you.
A law firm, only if you ask it to contact you. It receives the details you give us for that purpose and undertakes to use them only to deal with your question.

4. Legal basis

Processing	Legal basis
Providing the service: accounts, questions, chats, profiles, rankings and supervision	Performance of the service you request (art. 6.1.b GDPR)
Verifying students, professors and lawyers	Performance of the service and legitimate interest in those who answer being who they say they are (art. 6.1.b and 6.1.f)
Email alerts and push notifications	Consent, which you can withdraw at any time (art. 6.1.a)
Review of your chat by lawyers and contact with a law firm	Consent (art. 6.1.a)
Health data or other sensitive data you include in your question	Explicit consent (art. 9.2.a)
Security and abuse prevention	Legitimate interest (art. 6.1.f)

5. Service providers and international transfers

We use these providers, which process data on our behalf and only to provide the service to us:

Google Cloud: accounts, database, files, server functions, push notifications, email delivery and bot protection (reCAPTCHA). Platform data is stored in the European Union.
Vercel: hosting of this public website (sintoga.com).
Web statistics provider (servers in the European Union): visit statistics for the app, without cookies (see section 9).

Some of these providers may access data from the United States. Those transfers are covered by the EU-US Data Privacy Framework and by the European Commission's standard contractual clauses.

If you ask from ChatGPT or Claude using the Sintoga connector, the assistant sends us, with your confirmation, a summary of your situation without identifying details. What you share with that assistant is governed by the privacy policy of OpenAI or Anthropic.

6. How long we keep your data

Your account data, for as long as your account is active.
The email for a chat's alerts, until the chat ends.
Questions and conversations, for as long as your account exists or, if you asked without signing up, for the time needed for the chat to be completed and supervised.
When you close your account we delete your data, except data we must keep blocked by law and for the applicable limitation periods.

7. Your rights

You can access your data, correct it, have it deleted, object to its processing, restrict it, ask for it to be ported and withdraw your consent at any time. To do so, or to close your account, write to support@sintoga.com from your account's email or explaining how to identify your account.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the data protection authority where you live.

8. Minors

Sintoga is not intended for children under 14, who may not sign up or ask questions. If you are under 14, ask your parent or guardian to ask for you.

9. Cookies and local storage

This website (sintoga.com) does not use cookies or any analytics or advertising tools. Fonts are served from our own domain.

The app (app.sintoga.com) does not use advertising or analytics cookies. To know how many people visit it, from which country or city, and whether they come from social media or campaigns, we use a cookie-free statistics tool that does not store your IP address or build a profile of you: it only counts visits in aggregate. Before it is sent, each page address is cleaned so that it does not include the text of your question, chat or profile identifiers, or invitation codes. Our legitimate interest in understanding how the app is used is the legal basis for this processing.

The app stores the following in your browser:

What	Why
Session (browser local storage)	Keep you signed in and get you back to your chat
Preferences (local storage)	Remember your language and light or dark theme
Question draft (local storage)	Not lose what you were writing
Invitation or referral code (local storage)	Join your professor's class or credit whoever invited you
Where you came from (local storage)	If you arrive through a campaign link (UTM tags), we keep only that tag to know which campaigns work. It contains no identifier of yours and is not shared with third parties.
Google reCAPTCHA	Protect the platform against bots and abuse
Push notifications (service worker)	Send you alerts, only if you turn them on

You can delete this data from your browser settings; if you do, you will be signed out.

10. Changes to this policy

If we make significant changes to this policy, we will let you know in the app. The date of the last update is shown at the top of this page.

Privacy and cookie policy