Privacy policy

Your repository and your code

• The reading is local - when you run inspect or doctor, your code is read on your own machine. Neither command makes a network call, neither needs an account, and nothing about that run reaches us.
• Import and sync send the result of that reading - not your repository, and not your source files. What travels is what the reading measured: the components, values and rules it recognised, and the declarations it could not interpret. Those arrive with the file path, the line number and the text of the declaration itself, because a gap we cannot see is a gap we cannot fix.
• You choose when - both commands are run by you, by hand. Nothing is watched, scheduled or uploaded in the background, and the check that runs after your agent writes a file appends to a file inside your repository with no network path at all.

What we collect

• Account data - when you sign in (email, GitHub or Google), we store your email and a session so you can use the dashboard and the CLI.
• Usage analytics and ad measurement - aggregate page metrics and, when a visit came from one of our ads, whether it turned into a signup (Google Ads). Only after you opt in via the cookie banner. We do not build advertising profiles or sell your data; Google processes this under its own policy, linked below.
• Local storage - your consent choice and UI preferences live in your browser, not on our servers.
• Marketing email - if you leave the box on the sign-in page checked when you create your account, or turn on Email updates in your profile, we send Brevo your email, your plan and product events (for example: signed up, connected a project, subscribed, cancelled), so we can send you product news, tips, content and occasional offers about SynthesisUI. There is an unsubscribe link in every email, and you can turn Email updates off in your profile at any time - either one stops these emails and stops sending your events to Brevo.

How we use it

To provide the service (auth, generating and serving design systems), to keep it secure, and - with consent - to understand which parts of the gallery are useful. We do not sell your data.

Processors we rely on

We use a small set of providers to run the product: Vercel (hosting and privacy-friendly analytics), Neon (database), Brevo (transactional and marketing email), Sentry (error monitoring), Paddle (payments, as merchant of record - it receives your billing details and card, which never reach us), and - only after you accept the analytics banner - Google Tag Manager, Google Analytics 4 and Google Ads to understand how the product is used and to measure whether our ads led to a signup. These Google tags never load before your consent, and withdrawing it stops them. Each provider only receives what it needs to do its job. For details on how Google processes this data, see How Google uses information from sites or apps that use our services.

Your rights (LGPD)

You can request access to, correction of, or deletion of your data, ask for portability, and withdraw analytics consent at any time (clear the cookie banner choice in your browser, or contact us). We respond within the timelines the LGPD requires.

Contact

For any privacy request, email massaaki@synthesisui.com. It reaches the founder directly.