Privacy Policy

1. Who we are

Cyntra Technologies LLC is a business-to-business technology company registered in the Commonwealth of Kentucky, United States, with its principal office at 212 N 2nd St, Ste 100, Richmond, KY 40475.

We are the controller of personal information collected through this website, our client portal and our service engagements. Privacy enquiries may be sent to [email protected].

2. Information we collect

Information you provide directly: name, business email address, telephone number, job title, company name, company website, billing address, project requirements, budget indications and any content you submit through forms, the Get Access flow or support tickets.

Information created through your engagement: proposals, invoices, receipts, payment records, project records, support tickets, uploaded files and communication logs.

Information collected automatically: IP address, browser and device characteristics, pages viewed, referring page, and UTM campaign parameters where present in the link you followed.

We do not intentionally collect special category personal data, and we ask that you do not submit it through our forms.

3. Why we use it

To respond to enquiries and provide quotations, proposals and consultations.

To deliver services you have engaged us for, including project delivery, support and client portal access.

To process payments, generate invoices and receipts, and maintain financial records.

To send transactional communications relating to your enquiry, engagement, payments or account. These are necessary to the service and are not marketing.

To send commercial communications where you have separately opted in. You may withdraw that consent at any time.

To maintain security, detect and prevent fraud or abuse, and keep audit logs.

To comply with legal, tax and accounting obligations.

4. Legal bases

Where data protection law requires a legal basis, we rely on: performance of a contract with you or steps preparatory to it; our legitimate interests in operating and securing our business, balanced against your rights; your consent, where obtained for marketing communications or optional cookies; and compliance with legal obligations.

5. Who we share it with

Stripe, Inc. — payment processing. Card details are provided directly to Stripe and never stored on Cyntra systems.

Resend (Plus Five Five, Inc.) — transactional email delivery.

Cloudflare, Inc. — website hosting, edge delivery, database and security protection.

Professional advisers, accountants and auditors where necessary and under confidentiality obligations.

Authorities where required by law or to protect legal rights.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

6. International transfers

Our operations are based in the United States and information is processed there. Where information is transferred from outside the United States, we rely on appropriate safeguards including standard contractual clauses with our processors where required.

7. Retention

Enquiries and leads that do not convert: 24 months from last contact.

Client, project, invoice and payment records: seven years from engagement close, to meet tax and accounting obligations.

Support tickets: three years from closure.

Security, email and system logs: 12 months, except where retained longer for an active investigation.

Marketing subscriber records: until consent is withdrawn, plus a suppression record retained to honour that withdrawal.

8. Your rights

Subject to applicable law, you may request access to the personal information we hold about you; correction of inaccurate information; deletion where we have no continuing lawful basis to retain it; restriction of processing; a portable copy of information you provided to us; and objection to processing based on legitimate interests.

You may withdraw marketing consent at any time using the unsubscribe link in any commercial email or by contacting us.

To exercise any right, contact [email protected]. We respond within 30 days and may request information to verify your identity.

California residents have rights under the CCPA/CPRA including the right to know, delete and correct, and the right to opt out of sale or sharing — noting that we do not sell or share personal information as those terms are defined.

9. Security

We apply technical and organisational measures including encryption in transit and at rest, least-privilege access control, multi-factor authentication on administrative systems, secret management outside application code, audit logging and regular security assessment.

No system is completely secure. Where a breach affecting your personal information occurs, we will notify affected parties and authorities as required by applicable law.

10. Children

Our services are directed to businesses. We do not knowingly collect personal information from individuals under 18. If we learn that we have, we will delete it.

11. Changes

We may update this policy. Material changes will be notified through the website or by email where we hold your address. The current version and effective date are shown at the top of this page.