Your privacy and data security are fundamental to our mission. Learn how we protect and handle your information with enterprise-grade standards.
United States
TLS in Transit
Cloudflare R2 at Rest
October 26, 2025
Syntrix Security, LLC ("Syntrix Security," "we," "our," or "us") is committed to protecting your privacy and the confidentiality of information you share with us. This policy explains how we collect, use, disclose, and safeguard information when you visit our website, use our client portal, or interact with our services.
We use privacy-focused analytics that do not store identifiable user profiles.
We use functional cookies required for client and employee login, session security, and fraud prevention (e.g., Turnstile). Optional, privacy-preserving analytics help us understand aggregate usage.
Global Privacy Control (GPC): On first visit, if your browser signals GPC, we default analytics to off and do not show the banner. You can opt in any time.
Manage non-essential cookies and analytics at any time. Your selection is stored locally and can be changed whenever you like.
Removed or anonymized within 12 months of resolution
Retained during contract, securely deleted after (subject to legal retention)
Anonymized and retained only in aggregate
We share data only with service providers (hosting, email delivery, analytics) under confidentiality and data-processing agreements, or where required by law. We do not share data with advertisers.
We apply layered controls aligned to current best practices:
HTTPS with modern TLS; HTTP Strict Transport Security (HSTS) enforced
Cloudflare R2 with provider-managed encryption at rest
Strict CSP, frame-ancestors 'none', Referrer-Policy, Permissions-Policy
Short-lived, scoped cookies; dashboards served with noindex
Cloudflare Turnstile on forms and logins, verified server-side
HSTS: max-age=31536000; includeSubDomains; preloadCSP: restricts scripts to self and Turnstile; frame-ancestors 'none'Referrer-Policy: strict-origin-when-cross-originPermissions-Policy: geolocation, microphone, camera, payment, usb all disabledX-Content-Type-Options: nosniff; X-Frame-Options: DENYRequests are processed on Cloudflare Workers at the network edge; only the minimum necessary data is handled per request.
Files you submit via the portal are stored under role-scoped keys and are accessible only to authenticated users in your role.
Data at rest is stored in Cloudflare R2 in the United States (North America). Contact us if you require different regional placement.
Cloudflare R2 - United States (North America)
If you access our site from outside the configured storage/processing regions, your information may be transferred as needed to provide the service, subject to appropriate safeguards and contracts with our providers.
Depending on your location, you may:
You may request disclosure and deletion and opt out of sale/sharing. We do not sell personal data.
We may update this policy and will reflect changes with a revised date. Material changes may be announced via banner or direct communication when feasible.
Questions or requests:
We take security seriously. If you believe you've found a security issue, please report it responsibly.
Our team is here to help with any privacy-related questions or requests.