Frequently Asked Questions

Synexa is a security-conscious, production-oriented Next.js 16, Firebase, and Stripe foundation. It handles the repetitive 80% of SaaS infrastructure — passwordless auth, subscription billing, atomic usage quotas, durable account deletion, and admin controls — so you can build and ship your actual product on day one.

The starter kit is built with Next.js 16 (App Router), React 19, TypeScript, Firebase Auth & Firestore, Stripe Billing, Tailwind CSS v4, Resend for transactional email, and an optional provider-agnostic AI module supporting Gemini, Claude, or OpenAI.

Authentication is passwordless by design. Users sign in via verified Google OAuth or a 6-digit email OTP delivered via Resend. The server issues 14-day httpOnly session cookies that are checked by edge middleware and verified against Firebase Auth with immediate revocation checking on mutations.

Stripe webhooks are the authoritative source of truth for entitlements, not client redirects. Events are claimed transactionally and ordered against a per-subscription watermark to handle duplicate or out-of-order webhooks safely. A self-healing reconciliation cron automatically repairs any drift.

The Free and $9/mo tiers shown on the site are an interactive billing demonstration showcasing the kit's built-in Stripe Checkout, portal, and quota metering. The starter kit itself is full source code available as a one-time purchase. When building your own product, customize the tiers and limits in config/pricing.config.ts and config/quota.config.ts.

All architecture, security rules, and failure handlers are implemented and verified by 800+ automated tests against mocks and the Firebase emulator. However, live integration guarantees require your own production Firebase project, Stripe keys, and Resend domain. The repository includes an end-to-end verification guide (docs/PRODUCTION_VERIFICATION.md) for running real-service checks in staging.

Yes. The AI module is provider-agnostic and completely optional (disabled by default). You can toggle it on with a single flag in config/features.config.ts and choose Gemini, Claude, or OpenAI. It enforces strict token caps, timeouts, and quota reservations so model spend cannot run away.

The repository includes 800+ automated Vitest tests (unit and integration), real Firestore and Storage emulator security rules tests, Playwright end-to-end user journeys, and in-depth documentation covering authentication, billing, quotas, deployment, data retention, and security hardening. Free demo accounts include 5 actions/mo and Pro includes 50 actions/mo for testing quota enforcement.