Syntactic Academy (“we,” “us,” or “our”) operates https://syntactic-academy.com (the “Service”). Syntactic Academy is currently operated by an individual in Thailand. This policy explains how we collect, use, disclose, store, and protect personal data when you use the Service.

Contact details

Personal data we collect

• Account data: email address, authentication details, account role, and profile information.
• Subscription data: subscription status, billing dates, payment status, and Stripe identifiers needed to confirm paid access.
• Learning data: lessons viewed, watch history, progress, dictionary searches, and lesson-feature interactions.
• Technical data: IP address, browser/device information, logs, cookies, local storage, and security information.
• Support and guardian data: information sent in support communications and, for learners under 18, parent or guardian contact and billing information.

We do not receive or store complete payment-card details. Stripe processes payments.

Why we use data

• Create, secure, and manage accounts; provide lessons, dictionary tools, and interactive features.
• Track progress, verify subscriptions, and provide paid access.
• Process recurring subscriptions, cancellations, and billing support.
• Respond to support requests; prevent fraud, misuse, and security incidents; improve and troubleshoot the Service.
• Comply with legal, tax, accounting, and regulatory obligations.

Legal grounds

Where Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) applies, we process data to perform a contract, take requested pre-contract steps, comply with legal obligations, protect legitimate interests that do not override your rights, or act on consent where required.

Service providers and payments

We use Supabase for authentication and application infrastructure, Stripe for payment processing and recurring billing, and Bunny Stream for lesson-video delivery. We may also use hosting, security, analytics, email, and infrastructure providers. Providers may process data outside Thailand only as needed to provide their services or meet legal obligations.

Stripe may collect payment, billing, fraud-prevention, and transaction information under its own policies. We receive only information reasonably necessary to confirm payment, manage your subscription, provide paid access, resolve billing issues, and comply with law.

Learners under 18

A parent or legal guardian must create, authorize, or pay for an account used by a learner under 18. A parent or guardian may contact us to ask about, correct, or request deletion of a child’s data, subject to identity verification and applicable record-keeping obligations.

Retention and security

We retain personal data only as long as reasonably necessary to provide and maintain the Service, keep account/subscription records, resolve disputes, meet legal obligations, and protect against fraud and security threats. We use reasonable technical and organizational safeguards, including access controls and server-side management of sensitive credentials. No internet service can guarantee absolute security.

Your rights

Subject to applicable law, you may request access, correction, deletion or anonymization, withdrawal of consent, restriction or objection to certain processing, information about disclosure, or lodge a complaint with the relevant authority. Contact us to exercise these rights; we may request identity verification.

Cookies and changes

We may use cookies, local storage, and similar technologies to keep you signed in, remember settings, secure the Service, measure basic reliability, and improve the experience. You can control cookies in your browser; disabling essential cookies may prevent features from working. We may update this policy when the Service, providers, business structure, or law changes. We will post the updated version and effective date, and may provide additional notice for material changes.