1. Scope of this statement
This Privacy Statement applies to coryntas.com, demo requests, meetings, correspondence, and other business interactions that link to or refer to this statement. In this statement, “Coryntas,” “we,” and “our” refer to the business operating under the Coryntas brand.
A more specific notice presented when information is collected, or a written agreement with a customer, will control if it conflicts with this statement. This statement does not replace the privacy terms that apply to personal information processed within a customer-directed Coryntas deployment. Section 11 explains that distinction.
“Personal information” means information that identifies, relates to, or could reasonably be linked with an individual. It does not include information that has been aggregated or de-identified so that it cannot reasonably be linked to an individual.
2. Information we collect
Information you provide
When you request a demo, we collect your name, work email address, company, desired agent outcome, consent record, submission time, and the page from which the request was made. You may also provide your role or team and describe the systems and data involved. We collect the content of messages you send us and information you choose to share during meetings or other business discussions.
Please do not submit passwords, access tokens, government identifiers, health records, financial account details, or other sensitive information through the demo form.
Information processed automatically
Our hosting and security infrastructure may process standard technical information needed to deliver and protect the site, such as an IP address, browser and device details, requested URLs, timestamps, and security signals. For demo-form rate limiting, Coryntas converts the network address into a salted, time-bounded hash. The raw address is not stored in the demo lead record.
Optional analytics
If you accept optional analytics, Google Analytics 4 may process information about visits and interactions, including page paths, referral information, approximate location, browser or device characteristics, and events such as demo-form activity. Coryntas configures analytics with IP anonymization, advertising storage denied, and Google Signals disabled. Analytics does not load until you opt in.
Information from other people
We may receive business contact information from a colleague, customer, partner, or other person who introduces you to Coryntas. Anyone providing another person's information should have permission to do so.
3. How we use information
We use personal information to:
- receive, review, and respond to demo or contact requests;
- prepare relevant demonstrations, meetings, proposals, and follow-up communications;
- understand requested workflows, systems, and implementation needs;
- operate, maintain, troubleshoot, and secure the website and submission service;
- detect spam, fraud, abuse, and attempts to bypass service limits;
- measure and improve website performance when optional analytics has been accepted;
- maintain business records, enforce agreements, and establish or defend legal claims; and
- comply with applicable law and lawful requests.
We may combine information collected through these interactions when doing so is consistent with the purposes above. We may also use aggregated or de-identified information for analysis, provided we do not use it to identify you.
4. Legal bases for processing
Where applicable law requires a legal basis, Coryntas relies on one or more of the following:
- Consent, including your choice to enable optional analytics. You may withdraw that consent at any time.
- Steps at your request or contract performance, such as responding to a demo request or preparing a requested commercial discussion.
- Legitimate interests, such as operating and protecting the site, communicating with business contacts, and improving our services, balanced against your rights.
- Legal obligations, including responding to valid legal process and maintaining required records.
5. How we disclose information
Coryntas does not sell personal information collected through this website and does not use website information for cross-context behavioral advertising. We disclose personal information only as reasonably necessary in the following circumstances:
- Infrastructure and service providers. The website uses OpenAI Sites and Cloudflare infrastructure for hosting and storage, Cloudflare Turnstile for abuse prevention, Resend for demo-related email delivery, and—only after opt-in—Google Analytics 4 for website analytics.
- Professional advisers. We may disclose information to legal, security, accounting, insurance, or other advisers when reasonably necessary for their work.
- Legal requirements and safety. We may disclose information if reasonably necessary to comply with law or legal process, investigate misuse, protect rights or safety, or preserve the security of our services.
- Business transactions. Information may be disclosed as part of due diligence or a proposed or completed financing, reorganization, acquisition, merger, or transfer of business assets, subject to appropriate confidentiality protections.
- At your direction. We may disclose information when you ask us to or give us permission.
| Category | Examples | Typical recipients |
|---|---|---|
| Identifiers | Name, email, IP-derived security key | Hosting, security, and email providers |
| Professional information | Company, role, or team | Hosting and email providers |
| Request content | Desired outcome, systems, and data description | Hosting and email providers |
| Internet activity | Source page, browser, device, and site interactions | Hosting and security providers; analytics provider after opt-in |
| Consent and correspondence | Consent version, timestamp, and messages | Hosting and email providers |
6. Retention
Demo lead records that do not become customer records are retained for up to 12 months. The rate-limit keys used to protect the demo form are short-lived; scheduled cleanup deletes records once they are older than two hours, although deletion may occur later depending on the cleanup schedule. Correspondence and records connected with an active customer or commercial relationship may be kept longer when needed to provide services, maintain business and legal records, resolve disputes, or enforce agreements.
Optional analytics is retained only for as long as reasonably needed to understand website performance. Retention can also depend on the nature and sensitivity of the information, security needs, legal requirements, and whether the purpose can be achieved another way. When information is no longer needed, we delete or de-identify it, subject to limited backup, security, and legal-retention requirements.
7. Security
Coryntas uses administrative and technical measures designed to protect personal information against unauthorized access, alteration, disclosure, or loss. The current website uses encrypted transport, restricted service credentials, form validation, origin checks, abuse detection, rate limiting, and automated retention controls.
No internet transmission or storage system can be guaranteed to be completely secure. If you believe information sent to Coryntas may be at risk, contact us promptly using the details in Section 13.
9. International data transfers
Coryntas and its service providers may process personal information in countries other than the country where you are located. Privacy laws and government-access rules may differ across jurisdictions. Where applicable law requires a transfer safeguard, we will use an approved legal mechanism or another recognized basis for the transfer.
10. Your privacy rights
Depending on where you live, you may have the right to request access to personal information, correction, deletion, restriction of processing, portability, or information about how it has been used or disclosed. You may also have the right to object to certain processing, withdraw consent, appeal a decision, or complain to a local data-protection authority.
California residents may have rights to know, access, correct, and delete covered personal information and to receive equal service when exercising those rights. Coryntas does not sell personal information collected through this website or share it for cross-context behavioral advertising. Residents of the EEA, United Kingdom, Switzerland, Brazil, and other jurisdictions may have additional rights under their local law.
To make a request, email hello@coryntas.comwith the subject “Privacy request.” Describe the request and the Coryntas interaction it concerns. We may ask for information reasonably necessary to verify your identity and protect against fraudulent requests. An authorized agent may submit a request where permitted by law, subject to verification of that authority. We will respond within the period required by applicable law.
11. Customer-directed processing
When Coryntas processes personal information within an enterprise deployment on a customer's instructions, the customer organization generally determines why and how that information is processed. The applicable customer agreement and deployment terms govern that processing.
If your request concerns information in a Coryntas deployment provided through your employer or another organization, contact that organization first. Coryntas will assist the customer in responding as required by the applicable agreement and law.
12. Children and external links
The Coryntas website and business services are intended for organizations and business users, not children. We do not knowingly collect personal information from children through this website. If you believe a child has submitted personal information, contact us so that we can review and delete it as appropriate.
The website may link to third-party sites or services that Coryntas does not control. Their privacy statements and practices apply to information you provide directly to them.
13. Contact and updates
For questions, corrections, complaints, or privacy requests, contact:
Coryntas privacy contacthello@coryntas.comWe may update this statement as our website, services, providers, or legal obligations change. Material changes will be identified by a revised date at the top of this page and, when appropriate, an additional notice.