SynapQ Privacy Policy

1. Scope

This policy applies to the SynapQ website, mobile clients, desktop clients, public site surfaces, and related support and billing flows.

When you leave our service for third-party sites or tools, those services apply their own privacy terms.

2. The data we collect

We collect personal data and operational data needed to create accounts, run the service, secure the product, and support users.

• Account data: identity-provider user id, email address, and basic profile information
• Product data: uploaded sources, question content, review and practice state, notes, tags, and preferences
• Technical data: IP-based security signals, device/session information, error logs, performance data, and diagnostic identifiers
• Billing data: plan status, external customer or subscription ids, and limited payment-provider metadata
• Support data: messages and explanations you submit through the contact flow

3. How we use data

We use data to provide the service, create and secure accounts, run upload/review/practice workflows, manage billing, and respond to support requests.

We may also use operational and measurement data to diagnose failures, prevent abuse, improve performance, and guide product decisions.

4. Legal bases where applicable

To the extent applicable data-protection law requires it, we rely on different legal bases for different processing activities. These may include performing our contract with you, complying with legal obligations, pursuing legitimate interests such as security and product operations, and obtaining consent where needed.

For example, optional analytics storage may rely on consent, while account creation, session management, billing, and core security flows are generally processed as part of contract performance or legitimate interests.

5. Your uploaded study materials

Your uploaded materials may be stored, parsed, transformed, cached, and used to generate previews or study flows so that we can provide the product to you.

You remain responsible for making sure you are permitted to upload and process that material. SynapQ does not publish your content broadly unless you explicitly use a sharing or publishing feature.

In some product flows, the original uploaded file is retained only for a limited period under the current product policy and may then be cleaned up automatically. That cleanup does not necessarily remove the source record, parser history, or approved question data.

6. Service providers and processors

We use infrastructure and service providers that may process data on our behalf and only to the extent needed to operate the product.

• Clerk for authentication and account session management
• Vercel and related infrastructure services for hosting, runtime operations, and private blob storage
• Neon/Postgres infrastructure for the application database
• Lemon Squeezy for checkout, tax, payment, and subscription management
• Google Analytics for consent-based web analytics measurement
• Sentry for error monitoring and operational diagnostics
• AI and processing providers, including Vercel AI Gateway and underlying model providers where needed for parsing, explanations, or related product workflows

7. Cookies, preferences, and analytics

We may use cookies and similar browser storage for sign-in, security, and saved preferences. This includes a language preference cookie, browser storage for theme preference, and browser storage for your analytics-consent choice.

For web analytics we use Google Analytics with consent mode. Analytics storage is enabled only after you grant analytics consent; if you reject analytics, analytics storage remains denied. You can change that choice later from the analytics settings control shown on the site.

Where possible, we keep analytics use focused on product improvement, conversion measurement, and operational monitoring.

8. Data sharing

We do not sell personal data. We share data only when needed to provide the service, comply with law, protect rights and security, or honor an action you explicitly initiate.

For example, source sharing and publishing features are user-triggered flows that make content visible only within the scope of that feature.

9. Retention

We retain data for as long as needed to operate the service, preserve account history, maintain security logs, and comply with legal or operational obligations.

Some temporary files and preview artifacts have shorter retention windows. Under the current product behavior, original uploaded source files are generally retained for up to one day and may then be automatically cleaned up while the source record, parser history, and approved questions remain as product data.

If you close your account or request deletion, we may delete or anonymize data subject to technical and legal requirements.

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or object to certain processing. You can contact us to make these requests.

Some data may be retained where necessary for security, billing, fraud prevention, or legal recordkeeping.

Before honoring certain privacy requests, we may require reasonable steps to verify that the request is actually associated with your account or lawful authority.

11. Security

We use reasonable technical and organizational safeguards to protect data. However, no internet transmission or storage system can be guaranteed to be perfectly secure.

12. International processing

Our service providers may operate in multiple countries, so data may be processed outside your home jurisdiction when necessary to run the product.

Where relevant, we rely on contractual, operational, or legal safeguards appropriate to the service context.

13. Children

SynapQ is generally intended for older students and adult learners. We do not knowingly seek to collect data from children in violation of applicable law.

14. Policy changes

We may update this privacy policy from time to time. The updated version becomes effective when posted on the site.