Privacy Policy

1. Introduction

Syndrix ("we," "our," or "us") is a Philippine-based technology company committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and disclose data when you access our website, software platforms, applications, and services (collectively, the "Services").

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our Services.

2. Information We Collect

2.1 Personal Information

When you create an account, submit a contact form, or engage our services, we may collect:

• Full name, email address, phone number, and mailing address
• Organization name and role/position
• Government-issued identification (when required for LGU or institutional contracts)
• Account credentials (username and encrypted password)

2.2 Business and Organizational Data

When you use our software platforms, you may input data related to your organization's operations, including but not limited to:

• Business records, inventory data, and financial information
• Government records, permits, and public service documentation
• Student records and academic data (for educational clients)
• Uploaded files, documents, and media

2.3 Payment Information

When you engage our services, we collect billing details such as billing address and transaction history. This includes invoice reference numbers and payment confirmations. Syndrix does not collect or store payment card details — payments are processed via bank transfer or another mutually agreed payment method.

2.4 Usage and Technical Data

We automatically collect certain technical information when you interact with our Services:

• IP address, browser type, device information, and operating system
• Pages visited, features used, and time spent on the platform
• Referring URLs and search queries that led you to our site
• Error logs and performance data

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our software products and consulting services
• Account Management: To create and manage your user account, authenticate access, and provide customer support
• Communication: To respond to inquiries, send service updates, and notify you of changes to our policies or offerings
• Billing: To process payments, generate invoices, and maintain payment records
• Security: To detect, prevent, and respond to fraud, abuse, and security threats
• Improvement: To analyze usage patterns, conduct research, and enhance the functionality and user experience of our Services
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing

In accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations, we process your personal information based on one or more of the following lawful criteria:

• Consent: You have provided clear and informed consent for a specific purpose
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you
• Legitimate Interest: Processing is necessary for our legitimate business interests, provided it does not override your fundamental rights
• Legal Obligation: Processing is required to comply with Philippine law or regulation

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party providers who assist us in operating our platform (hosting, payment verification, analytics), bound by confidentiality agreements
• Legal Requirements: When required by law, regulation, court order, or governmental authority, including compliance with the National Privacy Commission (NPC)
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case your data will remain subject to this Privacy Policy
• With Your Consent: When you have explicitly authorized us to share your information with a third party

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access controls and multi-factor authentication
• Regular security assessments and vulnerability testing
• Secure software development practices
• Incident response procedures in compliance with NPC breach notification requirements

While we strive to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any breach in accordance with RA 10173.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, it will be securely deleted or anonymized.

Specific retention periods may vary depending on the type of data and the applicable legal requirements. For government-related projects, retention periods may be governed by applicable Philippine record-keeping regulations.

8. Your Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the following rights:

• Right to Be Informed: To be informed of the collection and processing of your personal data
• Right to Access: To obtain a copy of your personal data that we hold
• Right to Correction: To request correction of inaccurate or incomplete personal data
• Right to Erasure: To request deletion of your personal data, subject to legal retention requirements
• Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format
• Right to Object: To object to the processing of your personal data under certain circumstances
• Right to File a Complaint: To lodge a complaint with the National Privacy Commission if you believe your rights have been violated

To exercise any of these rights, please contact us at hello@syndrix.dev. We will respond to your request within a reasonable timeframe, as prescribed by the NPC.

9. Cookies and Tracking Technologies

Our website and platforms may use cookies, local storage, and similar technologies to enhance your experience, analyze usage, and deliver relevant content. These include:

• Essential Cookies: Required for the platform to function properly (authentication, session management)
• Analytics Cookies: Help us understand how users interact with our Services so we can improve them
• Preference Cookies: Remember your settings and preferences (e.g., language, theme)

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services.

10. Children's Privacy

Our Services are not directed to individuals under the age of 15. We do not knowingly collect personal information from children without verifiable parental or guardian consent. If we discover that we have inadvertently collected data from a child under 15, we will take steps to delete such information promptly. If you believe a child has provided us with personal data, please contact us at hello@syndrix.dev.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the revised policy on our website with an updated "Last Updated" date. We encourage you to review this policy periodically.