Privacy policy

Your repository and your code

• The reading is local - when you run inspect or doctor, your code is read on your own machine. Neither command makes a network call, neither needs an account, and nothing about that run reaches us.
• Import and sync send the result of that reading - not your repository, and not your source files. What travels is what the reading measured: the components, values and rules it recognised, and the declarations it could not interpret. Those arrive with the file path, the line number and the text of the declaration itself, because a gap we cannot see is a gap we cannot fix.
• You choose when - both commands are run by you, by hand. Nothing is watched, scheduled or uploaded in the background, and the check that runs after your agent writes a file appends to a file inside your repository with no network path at all.

What we collect

• Account data - when you sign in (email, GitHub or Google), we store your email and a session so you can use the dashboard and the CLI.
• Usage analytics - anonymous, aggregate page metrics, and only after you opt in via the cookie banner. No cross-site tracking, no advertising profiles.
• Local storage - your consent choice and UI preferences live in your browser, not on our servers.

How we use it

To provide the service (auth, generating and serving design systems), to keep it secure, and - with consent - to understand which parts of the gallery are useful. We do not sell your data.

Processors we rely on

We use a small set of providers to run the product: Vercel (hosting and privacy-friendly analytics), Neon (database), Brevo (transactional email), Sentry (error monitoring), and - only after you accept the analytics banner - Google Tag Manager and Google Analytics 4 to understand how the product is used and, during launches, to measure whether our ads led to a signup. These Google tags never load before your consent, and withdrawing it stops them. Each provider only receives what it needs to do its job. For details on how Google processes this data, see How Google uses information from sites or apps that use our services.

Your rights (LGPD)

You can request access to, correction of, or deletion of your data, ask for portability, and withdraw analytics consent at any time (clear the cookie banner choice in your browser, or contact us). We respond within the timelines the LGPD requires.

Contact

For any privacy request, email massaaki@synthesisui.com. It reaches the founder directly.