Privacy Policy
Last updated: March 14, 2026
This Privacy Policy explains how GoLab (“we”, “us”, “our”) collects, uses, and protects your information when you use Synaptic Expert (“the Service”), a Visual Studio Code extension. By using the Service, you consent to the practices described in this policy.
1. Information We Collect
1.1 Account Information
When you sign in using a supported authentication provider (Google or GitHub), we receive and store:
- Display name (as provided by your authentication provider)
- Email address
- Profile photo URL
- Authentication provider identifier (e.g., Google UID)
We only request the minimum scopes necessary for authentication: openid, email, and profile (Google) or read:user and user:email (GitHub).
1.2 Usage Metadata
We collect usage data to manage your subscription quota and improve the Service:
- Cycle counts — number of AI-assisted interactions per month
- Session logs — start time, end time, duration, and number of cycles per session
- Cycle metadata — timestamp, AI provider used, model name, operating mode, and a compliance score
- Subscription plan — your current tier (Free, Pro, or Full)
1.3 Information We Do NOT Collect
- We do not store the content of your prompts or AI-generated responses on our servers.
- We do not store your source code or project files.
- We do not access your file system beyond what the extension requires to function locally within VS Code.
- If you use “Bring Your Own Key” (BYOK) mode, your API keys are stored locally on your device only and are never transmitted to our servers.
2. How We Use Your Information
- Authentication: To verify your identity and manage your account.
- Quota management: To track and enforce monthly cycle limits based on your subscription plan.
- Service improvement: To understand usage patterns and improve the Service (aggregate, non-personal data only).
- Communication: To contact you about important changes to your account or the Service (e.g., Terms of Service updates).
3. Data Storage and Security
Your data is stored in Google Firebase (Firestore database and Authentication), hosted in Google Cloud infrastructure. Firebase provides:
- Encryption at rest and in transit (TLS 1.2+)
- Access controlled by Firebase Security Rules
- SOC 1, SOC 2, and SOC 3 compliance
We apply the principle of least privilege: each authenticated user can only read and write their own data. Administrative access is restricted to GoLab personnel.
4. Third-Party Services
The Service integrates with the following third-party providers. Your use of these services is also subject to their respective privacy policies:
| Service | Purpose | Data Shared |
|---|---|---|
| Google Firebase | Authentication, database, hosting | Account info, usage metadata |
| Lemon Squeezy | Payment processing (Merchant of Record) | Email, payment details (handled by LS) |
| Anthropic | AI provider (Claude models) | Prompt content (sent directly, not stored by us) |
| OpenAI | AI provider (GPT models) | Prompt content (sent directly, not stored by us) |
| Google AI | AI provider (Gemini models) | Prompt content (sent directly, not stored by us) |
| OpenRouter | AI provider aggregator | Prompt content (sent directly, not stored by us) |
When you submit a prompt, it is sent directly from your VS Code instance to the selected AI provider. We do not route, log, or store prompt content on our infrastructure.
5. Data Retention
- Account data: Retained as long as your account is active. If you request account deletion, we will remove your data within 30 days.
- Usage metadata: Retained for up to 12 months for quota management and service improvement, then automatically purged.
- Chat history: Stored locally on your device (in your VS Code workspace storage). Not transmitted to or stored on our servers.
6. Your Rights
You have the right to:
- Access your personal data — contact us and we will provide a copy of the data we hold about you.
- Correct inaccurate data — your profile information is synced from your authentication provider; update it there to correct it in our system.
- Delete your data — request account deletion by emailing us. We will remove your data from our systems within 30 days.
- Export your data — contact us to receive a machine-readable export of your account and usage data.
7. Children’s Privacy
The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will promptly delete it.
8. Cookies and Tracking
The Synaptic Expert VS Code extension does not use cookies, web beacons, or third-party tracking technologies. Our landing page (this website) does not use analytics cookies or tracking scripts.
9. International Data Transfers
Your data may be processed in countries outside your country of residence, including the United States (where Google Cloud and Firebase infrastructure is located). By using the Service, you consent to this transfer. We ensure that appropriate safeguards are in place as required by applicable law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active users of material changes via email at least 15 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.
11. Contact
For questions about this Privacy Policy or to exercise your data rights, contact us at:
- Email: support@golab.cl
- Website: www.golab.cl