PRIVACY POLICY

1. INFORMATION WE COLLECT

We collect the following types of information:

• > Account information: email address and display name
• > Canvas data: nodes, edges, groups, and content you create
• > Usage analytics: feature usage, session duration, and interaction patterns
• > Payment information: processed and stored by Lemon Squeezy (we do not store card details)
• > Device information: browser type, operating system, and screen resolution

2. HOW WE USE YOUR INFORMATION

Your information is used to:

• > Provide and maintain the Service
• > Process AI requests and deliver generated content
• > Manage your subscription and billing
• > Improve the Service through anonymized analytics
• > Send transactional emails (account verification, billing receipts)

We do not sell your personal information to third parties.

3. AI PROCESSING

When you use AI features, your canvas content (node text, descriptions, and context) is sent to third-party AI providers for processing. This data is used solely to generate responses for you and is not used to train AI models. Each AI provider processes data under their respective data processing agreements with us. Providers may temporarily retain input data for abuse monitoring, typically for no more than 30 days.

4. THIRD-PARTY SERVICES

We use the following third-party services:

• > Supabase — authentication and database hosting
• > DeepSeek — AI content generation
• > Google AI (Gemini) — AI content generation
• > Anthropic (Claude) — AI content generation
• > Lemon Squeezy — payment processing and subscription management
• > PostHog — product analytics and session diagnostics

Each service operates under its own privacy policy. We encourage you to review their policies for details on how they handle data.

5. DATA SECURITY

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. Database access is restricted to authorized services only. Authentication is managed through Supabase with row-level security policies. While we take reasonable precautions, no method of electronic storage or transmission is 100% secure.

6. DATA RETENTION AND DELETION

Your canvas data is retained for as long as your account is active. If you delete a canvas, it is permanently removed from our databases. If you delete your account, all associated data (canvases, nodes, usage history) will be permanently deleted within 30 days. Product analytics may be retained separately according to our analytics provider settings.

7. YOUR RIGHTS

You have the right to:

• > Export your data: download all your canvas data as JSON at any time
• > Delete your account: permanently remove all your data from our systems
• > Access your data: view all personal information we hold about you
• > Rectify your data: correct any inaccurate personal information
• > Restrict processing: opt out of analytics tracking

To exercise any of these rights, contact us at the address below or use the relevant features in your account settings.

8. CONTACT

For questions about this Privacy Policy or to exercise your data rights, contact us at:

privacy@synapse-sys.com