Privacy policy.

1Scope

This Privacy Policy explains how Synthesyx LLC (“Synthesyx”, “we”, “us”) collects, uses, and shares information when you use synthesyx.com and our analytical testing services (the “Service”). We act as a business-to-business service provider; the Service is not directed at consumers or children.

2Information we collect

• Account and business information: name, work email, phone, company name and address, and role, provided when you apply for or are provisioned an account.
• Order and sample information: order details, sample descriptions, lot or batch identifiers, shipping and tracking data, test results, and Certificates of Analysis.
• Billing information: invoice history and payment status. Online payments are processed by Intuit QuickBooks Payments — we never receive or store your card or bank numbers.
• Technical information: log data, IP address, browser type, and session cookies required to operate the portal.

3How we use information

We use information to operate the Service: receive and track samples, perform testing, issue results and certificates, invoice and reconcile payments, provide support, secure our systems (including audit logs and two-factor authentication), and meet legal and tax obligations. We do not sell personal information, and we do not use your information for third-party advertising.

4How we share information

We share information only with service providers that operate parts of the Service on our behalf: Amazon Web Services (hosting, US regions), Intuit QuickBooks (invoicing and payment processing), Resend (transactional email), our laboratory information management system for sample tracking and results, and Google Workspace (business email). Each provider processes data solely to provide its service to us. We may also disclose information when required by law or to protect the rights, safety, or property of Synthesyx and its customers.

5Cookies

The portal uses first-party session cookies for sign-in, security (CSRF protection), and preferences such as theme and sidebar state. We do not use third-party advertising or analytics cookies.

6Retention

We retain account, order, and testing records for as long as your account is active and thereafter as needed for legitimate business purposes, including quality traceability of issued Certificates of Analysis, tax, and accounting requirements. You may request deletion of your account; we will delete or anonymize personal information not required for those purposes.

7Security

Data is encrypted in transit (TLS) and at rest. Access to customer data is role-restricted, staff accounts require two-factor authentication, and administrative actions are logged. No system is perfectly secure; we will notify affected customers of a breach as required by applicable law.

8Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information. Contact us at the address below and we will respond within a reasonable period. Portal users can update most account details directly in Settings.

9Changes and contact

We may update this policy from time to time; material changes will be posted here with an updated effective date. Questions or requests: