Privacy Policy

SyntaxMap (“we”, “us”) is operated by Shenzhen Dashewan Technology Co., Ltd. (深圳市大蛇玩科技有限公司), a company registered in Shenzhen, China. This policy explains what information we collect when you use the SyntaxMap website (syntaxmap.ai/global) and browser extension (together, the “Service”), how we use and share it, how long we keep it, and the choices you have.

This policy applies to users outside mainland China. Users in mainland China are covered by a separate Chinese-language privacy policy.

1. Scope

This policy applies to the Service. Websites you visit outside the Service (such as the pages where you select sentences) and third-party services you choose to use (such as your Google account) handle your information under their own privacy policies.

2. Information we collect

Account information

• Your email address, used to sign you in and to contact you.
• If you sign in with Google: the account identifier, name, profile picture link, and verified email address that Google shares with us. We never receive your Google password. Section 5 explains how we handle this information.
• Information we generate: when your account was created and last signed in, your plan and when it expires, your invite code, who invited you (if anyone), and the site you signed up on.

Sign-in and security information

• Sign-in code records: your email address, the IP address of the request, and the time. We store only a keyed hash of each code, never the code itself.
• Website sessions: browser and operating system type (for example, “Chrome · macOS”), IP address, and sign-in and last-activity times.
• Extension device tokens: the device name (one you enter, or one generated from your browser and operating system when you connect the extension, such as “Chrome · macOS”), the IP address at the time the token was issued, and when it was created and last used.

Sessions and device tokens themselves are stored only as hashes, which cannot be turned back into usable tokens.

Sentences you select and your analysis history

• The text you select when you click “Break it down”, up to 1,600 characters at a time.
• The resulting analysis, the model used, and the number of tokens consumed.
• A usage record for each analysis: your account, the device, the time, the sentence, and whether the result came from the AI model or from our cache.

Section 4 explains how we handle this information.

Preferences

The native language, target language, and language level you choose under Settings → Language.

Feedback

The content of feedback you submit, when you submitted it, and your browser’s user agent, so we can understand and reproduce the issue.

Subscription and payment information

• Subscriptions: your plan and billing period, the subscription status, the current billing period, and when you subscribed, canceled, or changed plans.
• Orders and payments: what you bought, each payment and refund with its amount and date, and the order status.
• The order and payment numbers Waffo assigns, and the subscription, payment, and refund notifications it sends us. These notifications include the email address you entered at checkout, your billing country or region, and the type of payment method used.

Payment takes place on Waffo’s checkout page and billing portal. Your card and other payment details are collected and processed directly by Waffo and its payment partners; we never receive or store them.

Server logs

When you visit the website or the extension calls our API, our servers automatically log the IP address, time, requested address, user agent, and response status, for security and troubleshooting.

Information the extension keeps on your device

The extension stores its settings and your device token in your browser’s local storage (chrome.storage.local). These are not uploaded to our servers. The device token is used only to identify you when the extension calls our API.

We do not collect your browsing history, the address or full content of the pages you visit, your precise location, your contacts, or any other information unrelated to the Service.

3. How we use information

• To provide sign-in and account features: sending sign-in codes, keeping you signed in, and managing your devices.
• To analyze sentences: sending them to an AI model, validating the results, and returning them to you.
• To track usage against your plan’s limits; to process subscriptions, renewals, cancellations, plan changes, and refunds, send you subscription confirmations, reconcile payments, and answer your questions about billing; and to manage invite rewards.
• To keep your analysis history so you can review the sentences you have analyzed.
• To keep the Service secure: rate-limiting sign-in codes, detecting abuse, and troubleshooting.
• To respond to feedback and improve the Service. We look at aggregate usage, such as daily analysis counts and token consumption, to estimate costs and improve the product.
• To comply with legal obligations.

We do not sell your personal information, use it for advertising, use your sentences or any other data to train AI models, or make decisions with significant effects on you based solely on automated processing.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of our contract with you (providing the Service and your account), our legitimate interests (security, abuse prevention, and improving the Service), your consent where we ask for it, and compliance with legal obligations.

4. How we handle the sentences you select

1. The extension shows a “Break it down” button when you select text. Only when you click it does the extension send the selected sentence to our servers. It never sends the page address, the rest of the page, or your browsing history.
2. Our server sends the sentence to DeepSeek for analysis, validates the result, and returns it to you. DeepSeek receives only the sentence and our analysis instructions, never your email address or other account information.
3. The sentence and its analysis are stored on our servers as a shared cache that is not tied to any one user: whenever anyone analyzes the same sentence again, we return the stored result without calling the AI model or counting it against their limit.
4. Each analysis also creates a usage record linking your account to that sentence. We use it to track your usage, and it forms your analysis history.
5. The text you select may come from pages that require sign-in, such as webmail or internal company documents. Please don’t analyze sentences that contain personal or confidential information.

5. Google user data

You can sign in with Google instead of an email code. In that case, SyntaxMap asks Google only for basic sign-in information (the openid, email, and profile scopes) and does not request access to any other Google service.

• What we access: your Google account ID, your email address and whether Google has verified it, your name, and the link to your profile picture. We cannot access your Gmail, Google Drive, contacts, calendar, or any other data in your Google account, and we never receive your Google password.
• How we use it: only to create your SyntaxMap account, or to link Google sign-in to an existing account with the same verified email address; to sign you in; to show your name and profile picture on your account pages; and to contact you about your account. We do not use Google user data for advertising, sell it, or use it to train AI models.
• How we store it: in our database on our servers in the United States, protected as described in Section 9, until you delete your account. We don’t keep the access token Google issues during sign-in, so we can’t access your Google account after you have signed in.
• Who we share it with: no one, except our cloud hosting provider, which stores our database, and where required by law (see Section 6). DeepSeek never receives it.
• How to delete it: deleting your account under Settings → Account immediately deletes it from our database, and copies in database backups are deleted within about two weeks. You can also remove SyntaxMap’s access on the Third-party apps & services page of your Google Account; Google will then ask for your permission again the next time you sign in with Google. Removing access does not delete your SyntaxMap account.

SyntaxMap’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. How we share information

We share information only with the following service providers, and only as needed to run the Service:

Waffo acts as the merchant of record: when you subscribe, you pay Waffo. It processes the payment information it collects at checkout as an independent controller under its own Privacy Policy.

Beyond these providers, we share personal information only:

• when required by law, legal process, or a lawful request from a government authority;
• as part of a merger, acquisition, or sale of assets, in which case the recipient must continue to protect your information under this policy or ask for your consent again;
• with your consent.

We do not provide personal information to advertisers or data brokers. We do not “sell” or “share” personal information as those terms are defined under California law.

7. Where we store and transfer data

Our servers are located in the United States, and your personal information is stored and processed there. If you live elsewhere, using the Service means your information is transferred to the United States, where data protection laws may differ from those in your country. In addition, the sentences you select are sent to DeepSeek in China for analysis, and when you subscribe, order information is sent to Waffo in Hong Kong.

8. How long we keep data

Where the law requires us to keep information longer, we do so.

9. Security

• All traffic to the website and API is encrypted with HTTPS.
• Sessions, device tokens, and extension connect codes are stored only as hashes, and sign-in codes only as keyed hashes, so a database leak would not expose credentials that can be used to sign in.
• The database is protected by a firewall and accepts connections only from the server itself and from allow-listed administrator IP addresses.
• Only authorized personnel can access our servers and database.
• The database is backed up daily to protect against data loss.

No system is perfectly secure. If a security incident affects your personal information, we will act promptly to contain it and notify you and the relevant authorities as required by law.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw your consent. Here is how to exercise them:

• Access: sign in to see your account information, plan and usage, devices and sessions, and preferences.
• Correction: change your preferences under Settings → Language. For anything else, email us.
• Deletion: go to Settings → Account → Delete account and enter your account email. If you have an active subscription, it is canceled first. This immediately deletes your account information, analysis history, device tokens, sessions, preferences, feedback, and sign-in code records, and the extension stops working. Orders, subscriptions, and payments are kept as described in Section 8. Copies in database backups are deleted within about two weeks as backups rotate. Deletion cannot be undone.
• Copy of your data: email us to request one.
• Withdrawing consent: you can stop using the Service, remove the extension, or delete your account at any time. This does not affect processing that took place before you withdrew consent.
• Devices and sessions: remove devices or sign out of other browsers under Settings → Account.

We will respond within 30 days after verifying your identity. We will not discriminate against you for exercising your rights. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.

11. Cookies

We use only the cookies needed for the Service to work. The website contains no advertising or third-party analytics code.

If you block cookies in your browser, you will not be able to sign in to the website.

12. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the effective date. For material changes, such as new purposes, new ways of processing, or new recipients, we will notify you on the website or by email.

14. Contact us

If you have questions, concerns, or requests about this policy or your personal information, contact us:

• Operator: Shenzhen Dashewan Technology Co., Ltd.
• Email: support@syntaxmap.ai