Last updated - April 22, 2026
Privacy & Terms.
Synopsis is built in the EU and follows the GDPR. This page describes what we collect, why, how long we keep it, and the rights you have over it. If anything here is unclear, email info@evolvx.it and a human will reply.
Section 01
Privacy policy.
01
Who we are
Synopsis is operated by Evolvx (the "controller"). For any privacy-related request - access, correction, deletion, portability, objection, or a complaint - write to info@evolvx.it. We aim to respond within 30 days, as required by Article 12(3) GDPR.
02
What we collect
Account data - name, email, password hash (bcrypt), and, if you sign in with Google, your Google account identifier and profile picture.
Behavioural data - if you accept analytics, we record which places you view, searches you run, profile button clicks (reservation, phone, WhatsApp, menu, share), and favourites added or removed. Each event is tagged with a first-party "anonymous id" stored in your browser so we can tell repeat visits from new ones.
Partner search visibility - when you are signed in with a verified email and open a place page, the verified owner of that place may see your name, email address, and search date inside their Synopsis partner analytics. They may send at most one email per week through Synopsis for that place, and every message includes an unsubscribe link.
Technical metadata - your IP address, user agent, referrer, and an approximate location (country/region/city) derived from the IP when the hosting proxy provides it.
Place content - reviews, ratings, photos and author names we aggregate from Google, TripAdvisor and TheFork.
Behavioural data - if you accept analytics, we record which places you view, searches you run, profile button clicks (reservation, phone, WhatsApp, menu, share), and favourites added or removed. Each event is tagged with a first-party "anonymous id" stored in your browser so we can tell repeat visits from new ones.
Partner search visibility - when you are signed in with a verified email and open a place page, the verified owner of that place may see your name, email address, and search date inside their Synopsis partner analytics. They may send at most one email per week through Synopsis for that place, and every message includes an unsubscribe link.
Technical metadata - your IP address, user agent, referrer, and an approximate location (country/region/city) derived from the IP when the hosting proxy provides it.
Place content - reviews, ratings, photos and author names we aggregate from Google, TripAdvisor and TheFork.
03
Legal basis for each purpose
Running your account (sign-in, favourites, search history) - Article 6(1)(b) performance of a contract.
Analytics & product improvement - Article 6(1)(a) your consent, captured via the banner. You can grant or revoke consent at any time below.
Security & abuse prevention (rate limiting, short-term IP retention) - Article 6(1)(f) legitimate interest in keeping the service online.
Aggregating public reviews - Article 6(1)(f) legitimate interest in providing a review-intelligence product. We have conducted a balancing test; if you are a reviewer and wish to have your review content removed from Synopsis, email info@evolvx.it.
Analytics & product improvement - Article 6(1)(a) your consent, captured via the banner. You can grant or revoke consent at any time below.
Security & abuse prevention (rate limiting, short-term IP retention) - Article 6(1)(f) legitimate interest in keeping the service online.
Aggregating public reviews - Article 6(1)(f) legitimate interest in providing a review-intelligence product. We have conducted a balancing test; if you are a reviewer and wish to have your review content removed from Synopsis, email info@evolvx.it.
04
How long we keep it
Account data - for as long as your account exists, deleted within 30 days after account closure.
Raw analytics events - 90 days, then they are automatically removed by a database-level TTL. The anonymised daily aggregates we derive from them are kept longer to power the dashboards that partners and editors rely on.
Search history & favourites - until you remove them or close your account.
Scraped reviews - refreshed on a rolling basis; removed on request or when the upstream source removes them.
Raw analytics events - 90 days, then they are automatically removed by a database-level TTL. The anonymised daily aggregates we derive from them are kept longer to power the dashboards that partners and editors rely on.
Search history & favourites - until you remove them or close your account.
Scraped reviews - refreshed on a rolling basis; removed on request or when the upstream source removes them.
05
Sub-processors & transfers
We share data only with the infrastructure vendors needed to run Synopsis: MongoDB Atlas (database hosting), our application hosting provider (server hosting and network routing), Google Places & Google Identity (place metadata and sign-in), Apify (review scraping), Google Gemini (review-text analysis). Some of these providers process data outside the European Economic Area; where that happens, transfers are governed by the EU Standard Contractual Clauses or an equivalent safeguard.
06
Your rights
Under GDPR you can ask us to (a) confirm what data we hold about you and give you a copy, (b) correct inaccurate data, (c) delete your data, (d) export your data in a portable format, (e) restrict processing, or (f) object to processing based on legitimate interest. To exercise any of these rights - including account deletion - email info@evolvx.it from the address associated with your account. We will verify your identity and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali).
07
Cookies & similar technologies
We set a small number of first-party cookies. Two are strictly necessary - a session cookie to keep you signed in, and a consent cookie to remember your choice on this banner - and require no consent. Two more are analytics identifiers (
syn_anon_id in localStorage and syn_session_id in sessionStorage) and are only written if you accept analytics. You can change your choice here:You haven't made a choice yet.
08
Children
Synopsis is not directed at children under 16. We do not knowingly collect personal data from minors; if you believe we have, please contact us and we will delete it.
09
Changes to this policy
We may update this policy when we change how Synopsis works. Material changes will be announced on this page; the 'last updated' date at the top will always reflect the current version.
Section 02
Terms of service.
01
Acceptable use
You agree to use Synopsis for personal, non-commercial research. Scraping, republishing or training models on our content is not permitted without written consent.
02
Editorial independence
Synopsis scores and editorial content are produced independently of any commercial agreements. Sponsored placements are always labelled and never influence scores.
03
Content accuracy
We work hard to keep information current, but restaurants change chefs, hotels renovate and bars close. Call ahead for anything important.
04
Account & billing
Some features require a paid Synopsis account. You can cancel at any time from your account settings; cancellations take effect at the end of the billing cycle.
05
Limitation of liability
Synopsis is provided as-is. We're not responsible for a bad meal, a noisy hotel room, or a cocktail that wasn't what the review promised.

