Privacy Policy

1. Information We Collect

a. Information You Provide Directly

• Account registration details: name, email address, company name, and role.
• Content, files, or data you submit or process through the Services.
• Support requests, feedback, survey responses, and communication preferences.
• Billing and payment information, processed by our payment provider (Stripe). We do not store full payment card details.

b. Information Collected Automatically

• Usage and log data: IP address, browser type, operating system, device identifiers, pages visited, and access timestamps.
• Performance and telemetry data used for reliability monitoring, diagnostics, and service improvement.
• Session identifiers and authentication tokens.

c. Information from Connected Third-Party Platforms

When you connect third-party services to SYNTRIX, we access data authorized by you through each provider's OAuth consent flow. Connected providers currently include:

• Identity: Microsoft 365, Google Workspace, Okta
• Cloud: Amazon Web Services, Google Cloud Platform
• Delivery: GitHub, Jira
• Collaboration: Slack, Zoom

All connections are read-only. SYNTRIX never writes to, modifies, or executes actions in any connected system. We do not store credentials or passwords for third-party providers. Data accessed through integrations is used solely to generate intelligence for your organization and is not shared with other customers or used for any other purpose.

2. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services.
• Synthesize operational signals from connected providers into executive intelligence.
• Authenticate users, manage access controls, and enforce permissions.
• Process transactions and send billing-related communications.
• Send product updates, security notices, and support information.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with applicable legal obligations.
• Conduct internal analytics and research to improve service quality.

We do not use your data to train shared or public AI models. Data processed through SYNTRIX integrations is used exclusively to deliver intelligence to your organization.

3. How We Share Information

We do not sell, rent, or trade personal data. We share information only in the following circumstances:

• With your authorization: When you explicitly enable integrations or direct us to share data.
• Service providers: With vetted vendors who support our operations (hosting, payments, analytics, support tooling), under confidentiality and data protection obligations consistent with this policy.
• Legal compliance: When required by law, regulation, court order, or governmental authority.
• Safety and security: To prevent or address fraud, unauthorized access, or harm to any person or system.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users.

4. Data Storage and Retention

AlterEnable data is hosted and processed in the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States.

We retain personal data for as long as necessary to deliver the Services, fulfill the purposes described in this policy, meet legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymize it in accordance with our retention schedules.

To request deletion of your personal data, contact us at legal@alterenable.com.

5. Security

We implement technical and organizational measures designed to protect information against unauthorized access, loss, misuse, and alteration. These measures include:

• Encryption of data in transit (TLS) and at rest.
• Role-based access control with least-privilege principles.
• Audit logging and continuous monitoring for anomalous activity.
• Environment isolation and controlled integration boundaries.
• Regular security reviews and responsible disclosure processes.

For SYNTRIX-specific security practices and responsible disclosure information, see syntrix.alterenable.com/support.

No method of transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

6. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, delete, restrict processing, or request portability of your data. You may also have the right to object to certain processing activities.

To exercise any of these rights, submit a request to legal@alterenable.com. We will respond within a reasonable timeframe and in accordance with applicable law.

You may disconnect third-party integrations at any time through the SYNTRIX platform settings. Disconnecting an integration stops further data collection from that provider.

7. Intelligence Processing and AI

SYNTRIX generates executive intelligence by synthesizing operational signals from connected providers. Every finding presented in SYNTRIX traces to a specific, real signal from a connected system. We do not generate synthetic, estimated, or manufactured outputs.

Your organizational data is not used to train public AI models, shared with other customers, or used for any purpose other than delivering the Services to your organization. Intelligence outputs are intended to inform human decision-making and should not be treated as professional legal, financial, or compliance advice.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Services, maintain sessions, remember preferences, and analyze usage patterns. You can control cookie settings through your browser, though disabling certain cookies may affect functionality.

We do not use tracking technologies to build advertising profiles or sell data to advertisers.

9. Third-Party Links and Services

The Services may contain links to third-party websites or integrate with third-party platforms. Those services are governed by their own privacy policies. We are not responsible for the privacy practices of third parties, and linking to or integrating with a third party does not constitute our endorsement of their practices.

10. Children's Privacy

The Services are designed for business use by adults. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have collected information from a minor, we will delete it promptly. Contact us at legal@alterenable.com if you believe this has occurred.

11. International Users

The Services are operated from the United States. If you are located in the European Economic Area, United Kingdom, or other regions with data protection laws that differ from U.S. law, please be aware that information may be transferred to and processed in the United States. We rely on your consent and other lawful bases for processing as applicable under local law.

Organizations requiring a Data Processing Agreement (DPA) for GDPR compliance should contact legal@alterenable.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify registered users by email or in-product notice where appropriate. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

AlterEnable, LLC

Jurisdiction: Illinois, United States

Privacy and legal inquiries: legal@alterenable.com

General inquiries: info@alterenable.com