Privacy Policy

Synapsoft Corp. (“Synapsoft,” “we,” “us,” or “our”) provides Synap Editor, a rich text editing solution for web and SaaS applications (the “Service”), through our website at synapeditor.com (the “Site”). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have regarding your data.

This Privacy Policy applies to visitors and registered users of the Site. It does not apply to end users of applications built by our customers using the Synap Editor SDK; if you are interacting with Synap Editor embedded in a third-party product, the privacy practices of that third party govern your data.

By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Site.

1. The Data Controller

The data controller responsible for your personal data is:

2. What Personal Data We Collect

2.1 Information You Provide Directly

• Account information: name, email address, company name, and password when you register for an account or start a free trial.
• Billing information: billing contact name and email. Because Paddle acts as Merchant of Record for paid subscriptions (see Section 5), full payment card details are collected and processed directly by Paddle, not by Synapsoft; we do not store your full card number on our servers.
• Communications: information you provide when contacting sales, submitting a support request, or filling out a contact form, including the content of your message.
• Marketing preferences: if you opt in to receive product updates or newsletters, we store your email address and subscription status.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, editor load counts associated with your license key, and timestamps.
• Device and log data: IP address, browser type and version, operating system, referring URLs, and crash or error logs.
• Cookies and similar technologies: as described in our Cookie Policy.

2.3 Information We Do Not Collect

Synap Editor is a client-side rich text editing component. We do not access, store, or process the document content (text, images, or files) that you or your end users create or edit within Synap Editor, except where you explicitly use optional server-side features (such as collaboration or import/export services) that require document data to be transmitted, in which case that data is processed only to perform the requested function and is not retained beyond what is necessary for that purpose.

3. How We Use Your Data

4. Legal Basis for Processing

Where the GDPR applies, we rely on the following legal bases:

5. Who We Share Your Data With

We do not sell your personal data. We share data only with the following categories of recipients, and only as necessary to operate the Service:

• Payment processor and reseller: we use Paddle.com Market Limited (“Paddle”) as our authorized reseller and Merchant of Record for all paid subscriptions. Because Paddle is the seller of record for your purchase, Paddle collects and processes your billing and payment card data directly, issues your invoice or receipt, and is responsible for tax calculation and remittance. Paddle’s handling of your data is governed by Paddle’s own Privacy Policy. We do not store your full payment card details on our servers.
• Analytics providers: Google Analytics 4, as described in our Cookie Policy.
• Infrastructure and hosting providers: cloud hosting and email delivery providers that process data on our behalf under data processing agreements.
• Legal and regulatory authorities: where required by law, court order, or to protect our legal rights.
• Successors: in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

Where Synap Editor’s optional AI features are used, you connect your own account with the AI provider of your choice (e.g., OpenAI, Google Gemini, or Qwen). In that case, your prompts and content are transmitted directly between your environment and that AI provider under the terms and privacy policy of the AI provider you selected. Synapsoft acts solely as an integration layer and does not receive, store, or process the content of those AI requests. See Section 10 of our Terms of Service for further detail.

6. Cookies

We use cookies and similar technologies for necessary site functionality, analytics, and marketing communications. Full details, including the categories of cookies used and how to manage your preferences, are available in our Cookie Policy.

7. Data Retention

8. Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal data, including encryption in transit (TLS), access controls, and regular security review of our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Synapsoft is headquartered in the Republic of Korea. If you access the Site from the European Economic Area, the United Kingdom, or other regions outside Korea, your personal data may be transferred to, stored, and processed in Korea or in other countries where our service providers operate (including the United States). Where such transfers involve personal data originating in the EEA or UK, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure an adequate level of protection.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data, subject to legal retention obligations.
• Restriction — request that we limit how we process your data.
• Portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest or direct marketing.
• Withdraw consent — withdraw consent for analytics or marketing processing at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please use our Contact Us Form. We will respond within 30 days. If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

11. Children’s Privacy

The Site and Service are not directed at children under the age of 13, and we do not knowingly collect personal data from children under 13. If you are located in a jurisdiction that sets a higher age of consent for data processing (for example, certain EU member states require parental consent up to age 16), that local requirement applies to you. If you believe a child has provided us with personal data in violation of this policy, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will update the “Last updated” date above and, where required, notify registered users by email. We encourage you to review this page periodically.