Privacy Policy
Last Updated: January 8, 2025
At SynexIntel, we handle sensitive financial data every day. We know you're trusting us with information that matters to your business. This policy explains exactly what we do with that data — in plain language, without the usual legal maze. If something here doesn't make sense, reach out. We'd rather answer questions than hide behind jargon.
Who We Are and What This Covers
SynexIntel operates from Busan, South Korea, and provides financial reporting automation services. This policy applies to anyone who uses our platform, visits our website, or interacts with our services in any way.
We're governed by South Korean privacy laws, specifically the Personal Information Protection Act (PIPA), and we follow international standards where they make sense for our clients. If you're working with us from outside South Korea, your data still gets the same level of protection.
Information We Collect
Let's be specific. Here's what we actually gather and why:
Information You Give Us Directly
- Business contact details when you sign up or reach out (name, email, phone, company name, role)
- Account credentials and authentication information
- Financial data you upload for reporting purposes
- Payment information when you subscribe to our services
- Communication records when you contact our support team
Information We Collect Automatically
- Usage patterns — which features you use, how often, what time of day
- Technical details like IP address, browser type, device information
- Performance metrics that help us identify bugs or slowdowns
- Session data to keep you logged in and maintain your preferences
We don't collect: Personal browsing history outside our platform, social media activity, or information from third-party sources without your explicit consent.
How We Use Your Information
Everything we collect serves a purpose. We're not in the business of hoarding data. Here's the breakdown:
| Purpose | What We Do |
|---|---|
| Service Delivery | Process your financial data, generate reports, maintain your account, and ensure our automation tools work correctly for your specific needs. |
| Platform Improvement | Analyze usage patterns to identify features that need work, fix bugs, and build tools that actually solve problems you're facing. |
| Communication | Send important updates about your account, respond to support requests, notify you about system changes or maintenance. |
| Security | Detect unusual activity, prevent unauthorized access, protect against fraud, and maintain system integrity. |
| Legal Compliance | Meet our obligations under South Korean financial regulations and data protection laws. |
We don't use your data for advertising, don't sell it to third parties, and don't train AI models on your financial information without explicit permission.
How We Protect Your Data
Financial data needs serious protection. Here's what we've put in place:
- Encryption: All data transfers use TLS 1.3 encryption. Stored data is encrypted at rest using AES-256 standards.
- Access Controls: Our team operates on strict need-to-know basis. Only authorized personnel can access client data, and every access is logged.
- Infrastructure Security: We use enterprise-grade servers with regular security audits, automated threat detection, and 24/7 monitoring.
- Regular Testing: Quarterly penetration testing and vulnerability assessments help us stay ahead of potential threats.
- Backup Systems: Encrypted backups in geographically separate locations ensure data recovery if something goes wrong.
No system is completely invulnerable. If we experience a data breach that affects your information, we'll notify you within 72 hours and explain exactly what happened and what we're doing about it.
Data Sharing and Third Parties
We keep data sharing to a minimum. When we do share information, here's who sees it and why:
Service Providers
We work with carefully vetted companies that help us deliver our service:
- Cloud hosting providers for infrastructure (AWS, with servers in South Korea)
- Payment processors for handling subscriptions
- Email service providers for account communications
- Analytics tools for platform performance monitoring
All these providers sign data processing agreements and can only use your information for the specific services they provide to us.
Legal Requirements
We'll disclose information if legally required by South Korean authorities, court orders, or regulatory bodies. We review every request carefully and only share what's legally necessary.
Business Transfers
If SynexIntel is acquired or merged with another company, your data would transfer with the business. We'd notify you beforehand and ensure the new entity maintains the same privacy standards.
What we never do: Sell your data to marketers, share it with advertisers, or use it for purposes unrelated to our service delivery.
Your Rights and Control
Your data belongs to you. South Korean law gives you specific rights, and we've built tools to make exercising them straightforward:
- Access Your Data: Request a complete copy of all personal information we hold about you. We'll deliver it in a readable format within 10 business days.
- Correct Inaccuracies: Update or fix any incorrect information directly through your account settings or by contacting support.
- Delete Your Account: Request full account deletion, and we'll remove your data within 30 days (except what we're legally required to keep).
- Export Your Data: Download your financial reports and uploaded data in standard formats for use elsewhere.
- Restrict Processing: Pause certain uses of your data while maintaining your account functionality.
- Withdraw Consent: Revoke permissions you've previously granted, though this might limit some service features.
- Object to Processing: Challenge how we're using your information if you believe it's not necessary for service delivery.
To exercise any of these rights, email us at info@synexintel.com with your request. We'll verify your identity and process it promptly.
Data Retention
We keep your data as long as your account is active. After you close your account, here's what happens:
- Immediate: Your access to the platform is disabled
- Within 30 days: Most personal and financial data is permanently deleted
- Up to 3 years: We retain transaction records and basic account information for tax compliance and dispute resolution, as required by Korean financial regulations
- Anonymized forever: Some usage statistics may be kept in anonymized form for service improvement, with all identifying information removed
If you want faster deletion, contact us. We can expedite the process for most data types, keeping only what's legally required.
International Data Transfers
Our primary servers are located in South Korea. If you're accessing our service from another country, your data crosses borders. Here's how we handle that:
We ensure any international transfer meets South Korean legal requirements and includes appropriate safeguards. This means:
- Data processing agreements with international providers
- Standard contractual clauses approved by Korean authorities
- Encryption during transit and storage
- Regular audits of international partners
If your country has specific data localization requirements, let us know. We can work with you on solutions that meet both your legal obligations and our service capabilities.
Cookies and Tracking
We use cookies, but only what's necessary. Here's the breakdown:
Essential Cookies
Required for the platform to function — these keep you logged in, remember your settings, and maintain security. You can't opt out of these if you want to use our service.
Analytics Cookies
Help us understand how people use the platform so we can make improvements. These are optional, and you can disable them in your account settings.
We don't use advertising cookies or third-party tracking scripts. Your activity on our platform stays on our platform.
Children's Privacy
Our service is designed for businesses and professional use. We don't knowingly collect information from anyone under 14 years old. If you're a parent who believes your child has provided us with personal information, contact us immediately and we'll delete it.
Changes to This Policy
We update this policy occasionally as our service evolves or regulations change. When we make significant changes, we'll notify you by email at least 30 days before they take effect.
You can always find the current version on our website, with the last update date clearly marked at the top. Continued use of our service after changes take effect means you accept the updated terms.
Questions and Complaints
If you have concerns about how we handle your data, we want to hear about it. Start by contacting us directly — most issues get resolved quickly through conversation.
If you're not satisfied with our response, you have the right to file a complaint with:
- Korea Internet & Security Agency (KISA)
- Personal Information Protection Commission
- Your local data protection authority if you're outside South Korea
We take every complaint seriously and use them to improve our practices.
Contact Our Privacy Team
672 Jungang-daero, Busanjin-gu
Samjeong Tower 2F
Busan, South Korea