Privacy Policy

1. Scope

This Privacy Policy describes how DataSynthify ("dsfy", "we", "us") handles information across the marketing site (datasynthify.com), the web dashboard (app.datasynthify.com), the backing API, and the dsfy CLI / dsfy-mcp server (together, the "Service").

2. Information We Collect

• Account data: your email address, display name (set during onboarding), workspace role, and which workspace ("billing account") you belong to.
• Authentication: sign-in is passwordless, via either a "magic link" emailed to you or an OAuth sign-in with Google or GitHub — we never collect or store a password. For OAuth sign-in, we receive the profile fields the provider shares (name, email, avatar). Session tokens are managed by our authentication layer (better-auth) and, for the CLI, cached locally on your machine at dirs::config_dir()/dsfy/credentials.json, re-verified with our server at most about once a week.
• API keys: CLI/CI API keys are stored hashed; we cannot recover the original key value.
• Telemetry: each CLI/MCP command invocation emits one structured event (command name, success/failure, duration, coarse usage metrics). You can opt out entirely by setting DSFY_TELEMETRY_DISABLED=1.

We do not collect the contents of your databases, the generated (synthetic) data itself, or your database connection credentials beyond what's needed in-memory to fulfill the connection you explicitly configure.

3. How We Use Information

• To operate account sign-up, invite, and authentication flows;
• To provide the dashboard, team/workspace management, and API key issuance;
• To understand aggregate feature usage and diagnose issues during the beta;
• To send transactional email (invites, magic-link sign-in).

We do not sell your information or use it for third-party advertising.

4. Third-Party Processors

We rely on the following infrastructure providers to operate the Service:

• Cloudflare — hosting (Workers, D1 database, Pages) for all three apps;
• Resend — delivery of transactional email (invites, magic links);
• Google, GitHub — OAuth sign-in, if you choose to use them instead of a magic link.

5. Data Retention

Account and workspace data is retained for as long as your account is active. You can request deletion at any time (see Contact below).

6. Your Choices

• Opt out of CLI/MCP telemetry via DSFY_TELEMETRY_DISABLED=1;
• Request access to, correction of, or deletion of your account data by contacting us;
• dsfy logout clears your locally cached CLI session at any time.

7. Children's Privacy

The Service is not directed to, and we do not knowingly collect information from, children.

8. International Data Transfers

Because our infrastructure runs on Cloudflare's global network, data may be processed in countries other than your own.

9. Changes to This Policy

We may update this Privacy Policy as the Service evolves out of beta. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this Privacy Policy, or requests regarding your data, can be sent to sedhupathi@datasynthify.com.