Privacy Policy

1. Introduction

Cyndr ("we", "us", or "the Service") is a construction lead and project management platform. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. By using the Service you agree to the practices described here.

2. Information We Collect

• Account information — name, email address, phone number, business name, and address you provide when registering or configuring your organization.
• Business content — projects, contacts, estimates, change orders, invoices, line items, documents, and signatures you create or upload.
• Payment-related information — records of payments made against your documents (amounts, dates, status, and a reference to the processor's transaction). We do not collect or store full card numbers or bank account numbers; those are entered directly on the payment processor's secure pages.
• Connected-service data — when you connect a third-party account such as QuickBooks Online, we access and store limited data from that account as described in Section 5.
• Usage and device data — log data, IP address, and basic analytics used to operate and secure the Service.

3. How We Use Information

• To provide, maintain, and improve the Service.
• To create and manage estimates, change orders, invoices, and payment requests on your behalf.
• To process and reconcile payments through your chosen payment provider.
• To communicate with you about your account, documents, and support requests.
• To protect against fraud and to comply with legal obligations.

We do not sell your personal information or your connected-service data.

4. Payment Processing

Online payments are handled by third-party payment processors — Stripe and Intuit QuickBooks Payments, depending on the option your service provider has enabled. When you pay online, your card or bank details are entered directly on the processor's secure, hosted pages and are never transmitted to or stored on Cyndr's servers. Each processor's handling of your data is governed by its own privacy policy.

5. QuickBooks Online / Intuit Integration

If your organization connects a QuickBooks Online account, Cyndr integrates with Intuit's services to create invoices and collect and reconcile payments. This section describes that integration specifically.

Data we access

With your authorization (OAuth 2.0, scope com.intuit.quickbooks.accounting), we access only what is needed to bill and reconcile payments, which may include: customers, items/products and services, income accounts, and invoices and their payment status and balances in your connected QuickBooks company.

How we use it

• To find or create a customer record for the person being billed.
• To create an invoice for a progress payment, deposit, or change order and to enable Intuit's hosted online card/ACH payment page for it.
• To read an invoice's balance so we can mark the corresponding payment as paid in Cyndr once it clears.

What we store

• The OAuth access and refresh tokens and your QuickBooks company (realm) identifier, used to maintain the connection on your behalf.
• A mapping between each QuickBooks invoice we create and the corresponding Cyndr payment, plus that invoice's identifier and status.
• We do not store cardholder data or bank-account numbers. Payment card and bank details are collected solely on Intuit's PCI-compliant hosted pages.

How we protect it

Connection tokens are stored with restricted access and transmitted only over encrypted (TLS) connections to Intuit's APIs. Access is limited to the functions described above.

Disconnecting and deletion

An organization owner can disconnect QuickBooks at any time from Organization Settings → Online Payment Provider → Disconnect, or by removing Cyndr from the Apps section of QuickBooks. Disconnecting revokes our access and stops further data exchange. Upon disconnection or upon written request to support@cyndr.app, we delete the stored QuickBooks tokens and company identifier. Our use and transfer of information received from Intuit APIs adheres to the Intuit Developer Services Agreement and applicable API rules.

6. How We Share Information

We share information only as needed to operate the Service:

• With payment processors (Stripe, Intuit) to process and reconcile payments you initiate.
• With infrastructure and service providers (e.g., cloud hosting, email delivery) that process data on our behalf under appropriate safeguards.
• With people you choose to share documents with (for example, a customer who receives a signable estimate sees the signer's name and email).
• When required by law, or to protect the rights, safety, and security of Cyndr and its users.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data as described below.

8. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and restricted access to credentials. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

9. Your Choices and Rights

• Access, update, or correct your account information at any time within the Service.
• Disconnect connected services such as QuickBooks at any time.
• Request a copy or deletion of your personal data by contacting us.

10. Children's Privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new "Last updated" date. Material changes may be communicated through the Service.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Cyndr
Email: support@cyndr.app