1. Scope of this statement
This Privacy Statement applies to coryntas.com, business enquiries, demo requests, Trust Center security-information requests, meetings, correspondence, and other business interactions that link to or refer to this statement. In this statement, “Coryntas,” “we,” and “our” refer to the business operating under the Coryntas brand.
A more specific notice presented when information is collected, or a written agreement with a customer, will control if it conflicts with this statement. This statement does not replace the privacy terms that apply to personal information processed within a customer-directed Coryntas deployment. Section 11 explains that distinction.
“Personal information” means information that identifies, relates to, or could reasonably be linked with an individual. It does not include information that has been aggregated or de-identified so that it cannot reasonably be linked to an individual.
2. Information we collect
Information you provide
Get started and Contact use two steps. Continue sends your first name, last name and email, even if you do not finish the second step. The second step adds your company website, a description of your business and the work you’d like AI agents to handle, and optional tools or systems and start timeline to the same request. We record the privacy notice version and time, request ID and allowed source context such as selected agent, industry, referring article or campaign parameters. This notice record is not a checkbox consent record. A same-origin website gateway validates your submission and forwards it to Console, which saves each stage and an internal email job together in PostgreSQL. Only a hashed network identifier is forwarded for spam prevention. Console sends a notification for each stage to hello@coryntas.com through Hostinger SMTP, using your email as Reply-To. Without JavaScript, the form sends one complete request and one notification. Submission does not create a public ticket, account or order and does not send an automatic reply to you. Older enquiries retain their original information and consent records.
When you apply to our partner program, we collect your name, email, business name, optional website, partner type, markets served, description of typical client needs, application ID and the version of the Partner Terms and privacy notice you acknowledge. The application is emailed through Resend to our business inbox for review and follow-up. No partner account is created by submitting the form. Please do not include client names, personal data or confidential client information.
When you request a demo, we collect your name, work email address, company, desired agent outcome, consent record, submission time, and the page from which the request was made. You may also provide your role or team and describe the systems and data involved. We collect the content of messages you send us and information you choose to share during meetings or other business discussions.
When you request security information through the Trust Center, we collect your first and last name, work email address, company, relationship to Coryntas, requested information areas, optional additional context, consent record, submission time, and source page.
Please do not submit passwords, access tokens, government identifiers, health records, financial account details, or other sensitive information through website forms.
Information processed automatically
Our hosting and security infrastructure may process standard technical information needed to deliver and protect the site, such as an IP address, browser and device details, requested URLs, timestamps, and security signals. Console uses hashed keys derived from network addresses and email addresses to rate limit business enquiries. Raw network addresses are not stored in the enquiry record. Enquiry verification uses self-hosted ALTCHA challenges; partner applications use Cloudflare Turnstile.
Optional analytics
If you accept optional analytics, Google Analytics 4 may process information about visits and interactions, including page paths, referral information, approximate location, browser or device characteristics, and events such as enquiry-form activity. Names, email addresses, and the text of business enquiries are not sent to analytics. Coryntas configures analytics with IP anonymization, advertising storage denied, and Google Signals disabled. Analytics does not load until you opt in.
Information from other people
We may receive business contact information from a colleague, customer, partner, or other person who introduces you to Coryntas. Anyone providing another person's information should have permission to do so.
3. How we use information
We use personal information to:
- receive, review, and respond to business enquiry, demo, security-information, or contact requests;
- prepare relevant demonstrations, meetings, proposals, and follow-up communications;
- understand requested workflows, systems, and implementation needs;
- operate, maintain, troubleshoot, and secure the website and submission service;
- detect spam, fraud, abuse, and attempts to bypass service limits;
- measure and improve website performance when optional analytics has been accepted;
- maintain business records, enforce agreements, and establish or defend legal claims; and
- comply with applicable law and lawful requests.
We may combine information collected through these interactions when doing so is consistent with the purposes above. We may also use aggregated or de-identified information for analysis, provided we do not use it to identify you.
4. Legal bases for processing
Where applicable law requires a legal basis, Coryntas relies on one or more of the following:
- Consent, including your choice to enable optional analytics. You may withdraw that consent at any time.
- Steps at your request or contract performance, such as responding to a demo request or preparing a requested commercial discussion.
- Legitimate interests, such as operating and protecting the site, communicating with business contacts, and improving our services, balanced against your rights.
- Legal obligations, including responding to valid legal process and maintaining required records.
5. How we disclose information
Coryntas does not sell personal information collected through this website and does not use website information for cross-context behavioral advertising. We disclose personal information only as reasonably necessary in the following circumstances:
- Infrastructure and service providers. The public website is hosted and delivered by Vercel. Business enquiries are stored in PostgreSQL by the Coryntas Console backend, with self-hosted ALTCHA verification and internal notifications sent through Hostinger SMTP. Partner applications use Cloudflare Turnstile for abuse prevention and Resend for email delivery. Google Analytics 4 is used for optional website analytics only after opt-in. Providers process information needed to supply their respective hosting, security, or email services.
- Professional advisers. We may disclose information to legal, security, accounting, insurance, or other advisers when reasonably necessary for their work.
- Legal requirements and safety. We may disclose information if reasonably necessary to comply with law or legal process, investigate misuse, protect rights or safety, or preserve the security of our services.
- Business transactions. Information may be disclosed as part of due diligence or a proposed or completed financing, reorganization, acquisition, merger, or transfer of business assets, subject to appropriate confidentiality protections.
- At your direction. We may disclose information when you ask us to or give us permission.
| Category | Examples | Typical recipients |
|---|---|---|
| Identifiers | Name, email, IP-derived security key | Hosting, security, and email providers |
| Professional information | Company, role, or team | Hosting and email providers |
| Request content | Desired outcome, systems, data description, requested security areas, and additional review context | Hosting and email providers |
| Internet activity | Source page, browser, device, and site interactions | Hosting and security providers; analytics provider after opt-in |
| Consent and correspondence | Consent version, timestamp, and messages | Hosting and email providers |
6. Retention
Business enquiries, demo lead records and Trust Center security-information requests that do not become customer records are retained for up to 12 months. Console worker maintenance removes business enquiry records and their internal email jobs after 365 days; deletion may occur later depending on the cleanup schedule. Enquiry verification challenges expire after ten minutes and are removed after expiry by scheduled maintenance. Correspondence and records connected with an active customer or commercial relationship may be kept longer when needed to provide services, maintain business and legal records, resolve disputes, or enforce agreements.
Optional analytics is retained only for as long as reasonably needed to understand website performance. Retention can also depend on the nature and sensitivity of the information, security needs, legal requirements, and whether the purpose can be achieved another way. When information is no longer needed, we delete or de-identify it, subject to limited backup, security, and legal-retention requirements.
7. Security
Coryntas uses administrative and technical measures designed to protect personal information against unauthorized access, alteration, disclosure, or loss. The current website uses encrypted transport, restricted service credentials, form validation, origin checks, abuse detection, rate limiting, and automated retention controls.
No internet transmission or storage system can be guaranteed to be completely secure. If you believe information sent to Coryntas may be at risk, contact us promptly using the details in Section 13.
9. International data transfers
Coryntas and its service providers may process personal information in countries other than the country where you are located. Privacy laws and government-access rules may differ across jurisdictions. Where applicable law requires a transfer safeguard, we will use an approved legal mechanism or another recognized basis for the transfer.
10. Your privacy rights
Depending on where you live, you may have the right to request access to personal information, correction, deletion, restriction of processing, portability, or information about how it has been used or disclosed. You may also have the right to object to certain processing, withdraw consent, appeal a decision, or complain to a local data-protection authority.
California residents may have rights to know, access, correct, and delete covered personal information and to receive equal service when exercising those rights. Coryntas does not sell personal information collected through this website or share it for cross-context behavioral advertising. Residents of the EEA, United Kingdom, Switzerland, Brazil, and other jurisdictions may have additional rights under their local law.
To make a request, email hello@coryntas.comwith the subject “Privacy request.” Describe the request and the Coryntas interaction it concerns. We may ask for information reasonably necessary to verify your identity and protect against fraudulent requests. An authorized agent may submit a request where permitted by law, subject to verification of that authority. We will respond within the period required by applicable law.
11. Customer-directed processing
When Coryntas processes personal information within an enterprise deployment on a customer's instructions, the customer organization generally determines why and how that information is processed. The applicable customer agreement and deployment terms govern that processing.
If your request concerns information in a Coryntas deployment provided through your employer or another organization, contact that organization first. Coryntas will assist the customer in responding as required by the applicable agreement and law.
12. Children and external links
The Coryntas website and business services are intended for organizations and business users, not children. We do not knowingly collect personal information from children through this website. If you believe a child has submitted personal information, contact us so that we can review and delete it as appropriate.
The website may link to third-party sites or services that Coryntas does not control. Their privacy statements and practices apply to information you provide directly to them.
13. Contact and updates
For questions, corrections, complaints, or privacy requests, contact:
Coryntas privacy contacthello@coryntas.comWe may update this statement as our website, services, providers, or legal obligations change. Material changes will be identified by a revised date at the top of this page and, when appropriate, an additional notice.