What we collect and how documents are handled.
Last updated 18 September 2026. Syntra Health Analytics, Texas, USA.
Use Syntra for de-identified business records only. Syntra is designed for de-identified commercial case records, not patient records. Do not enter or upload patient names, MRNs, dates of birth or other protected health information. Import and text checks catch some identifying patterns; they cannot identify every sensitive detail. Document capture is optional. A captured photo or PDF is sent to the configured extraction provider as it was taken, and you can black out part of a case-sheet photo afterwards, before it is attached to the case; extracting only business fields does not remove sensitive information from the source document or from what was sent. Case-sheet attachments may be retained in private storage under the workspace retention policy. Contact us before considering a workflow that would require a Business Associate Agreement. See our privacy and security pages for the data flow.
- 1. When you visit this website
- 2. When you use the Syntra app
- 3. Who else processes data
- 4. How long we keep it
- 5. Your choices
- 6. Contact
1. When you visit this website
This site carries no analytics, no advertising trackers and no third-party pixels. It sets no cookies.
What you send us, and only when you choose to
Nothing leaves this site until you submit a form. When you do, we receive:
- The booking and enquiry forms: your name, work email, optional company name, and whatever you type in the message field.
- The chase-number estimator (/chase) — in addition to your name and work email, the estimate itself travels with your request: the slider values you set (billed revenue, number of reps, commission rate, PO exception rate, never-collected rate) and the three figures they produce. We do this so that when we speak we are looking at the same numbers. The sliders move entirely in your browser and are transmitted only when you press Send.
- The live-demo form: your name, work email and optional company, so we know who is looking at the demo.
These submissions are stored in our own database (see section 3) and are used to reply to you and to understand who is interested in the product. We do not sell them, rent them, or share them with anyone for marketing.
Browser storage
If you open the live demo, this site stores a single flag in your browser's local storage
(syn-demo-lead) so you are not asked for your details a second time on the same
browser. It contains no personal information — only the value 1 — it never leaves your
device, and clearing your browser data removes it.
2. When you use the Syntra app
If your distributorship is a customer, the app holds the business records you put into it:
- Case records: surgery date, surgeon name, facility, vendor, sales rep, the billed amount, commission figures, purchase-order number and status, and any notes you add.
- Your directory: vendors and their rates, rep tiers and rates, facilities and their contacts, surgeons.
- Account data: the email address and role of each person you invite, and your subscription status.
- An append-only activity log: what changed, who changed it, and when. Ordinary application roles cannot edit or erase these entries; they are retained for the life of the workspace.
- Anything you attach: when document capture is enabled, you review and redact the document before sending it. The full reviewed file goes to the configured extraction provider. A case sheet attached to a saved case is stored privately; a PO used only for extraction is not retained as an attachment by Syntra. Provider retention follows the provider configuration and terms.
- Assistant conversations: if you use the in-app assistant, your messages are stored so the thread persists.
Your workspace is isolated from every other customer. Each request runs inside a database transaction pinned to your workspace under a non-privileged role, with row-level security enforced by the database itself rather than by application code. There is more detail on the security page.
The data in your workspace is yours. We access it only when you ask us to — for support, or to fix a fault — and that access is recorded in the same activity log you can read.
3. Who else processes data
We run on a small number of established providers. Each one processes data only to provide its part of the service.
| Provider | What it does |
|---|---|
| Vercel | Hosts this website and the application. |
| Supabase | Database, sign-in, and file storage. |
| Stripe | Subscriptions and payment. Card details go directly to Stripe; we never see or store them. |
| Anthropic | Powers the in-app assistant. Your question and relevant business records are sent to answer it. May also process reviewed documents when configured as the extraction provider. |
| Google (Gemini) | Processes the full reviewed image or PDF when configured for document extraction. This is separate from storing the extracted business fields. |
| Resend | Delivers website enquiry notifications when configured. |
| ElevenLabs | Speech for the voice assistant, when you use it. |
| Intuit (QuickBooks) | Only if you buy the optional QuickBooks connection and connect it yourself. We read your profit-and-loss report, chart of accounts and invoice/payment reconciliation metadata to show them beside your commission figures; we write nothing back to QuickBooks. The access tokens are encrypted, and disconnecting removes local access and requests revocation from Intuit. |
If we add or change a provider we will update this page.
4. How long we keep it
New case-sheet attachments are scheduled for deletion after 30 days by default. An owner can select 30, 90 or 365 days for future uploads. Existing documents retain their previously assigned expiry. Failed deletions remain queued for retry; expiry is not a guarantee of removal at that exact instant. These settings do not control an extraction provider's retention.
- Customer workspace data: for as long as your subscription is active. If you cancel, tell us and we will delete your workspace; otherwise we keep it so you can come back to it.
- Enquiries from this website: until they are no longer useful, and we will delete yours sooner on request.
- The activity log: retained for the life of the workspace. That is the point of it.
5. Your choices
Email us and we will, without charging you: tell you what we hold about you, correct anything wrong, delete it, or send you a copy. If you are a user inside a customer's workspace, the business that owns that workspace controls its records — we will point you to them and help them act.
6. Contact
Privacy questions, deletion requests, anything on this page: hello@syntrahealthanalytics.com.
This page describes how the service actually works today, in plain language. It is not legal advice, and it is not a substitute for a contract — the terms of service govern your use of Syntra.