01
Encryption in transit and at rest
Connections use HTTPS, and stored platform credentials are encrypted with authenticated encryption before they are saved.
Security
Your campaigns. Your approvals. Your audit trail.
Enterprise marketing software with explicit gates — no silent publishing, no exposed provider keys, no claims without evidence.
Encrypted
Stored platform credentials
On request
Data export and deletion
Security
Security built into the operating model
Protection is not a bolt-on checkbox — it is part of how Synthex handles intake, planning, approval and production.
02
Export and deletion on request
You can request an export of your data or deletion of your account at any time through the contact page.
Data protection
Privacy by design at every stage
We follow privacy-by-design principles to ensure your data is protected at every stage of collection, processing, and storage.
01
Data Minimization
We only collect data necessary to provide our services. No unnecessary tracking or profiling.
02
User Control
You own your data. Request an export, correction or deletion of your information at any time.
03
Transparent Processing
Clear documentation of how we process, store, and use your data. No hidden practices.
04
Secure Storage
Data is held with our hosting and database providers, with backups and restricted access.
Infrastructure
Secure infrastructure stack
Built on established hosting and database platforms with layered security.
Hosting Platform
Vercel (AWS)
Hosting and edge network
Database
PostgreSQL (Supabase)
Encrypted at rest, regular backups
Authentication
JWT + OAuth 2.0
bcrypt hashing, secure tokens
AI Processing
OpenRouter API
API calls sent over encrypted (HTTPS) connections
Access control
Authentication and permissions
Multi-layered authentication designed to protect accounts while maintaining a clear operator experience.
JWT tokens with secure httpOnly cookies
OAuth 2.0 support (Google, GitHub, LinkedIn)
Role-based access control (RBAC)
Comprehensive audit logging for all actions
Automatic session expiration and renewal
Rate limiting and brute-force protection
Responsible disclosure
If you discover a security vulnerability, please report it responsibly so we can protect our users.
security@synthex.socialBug bounty: Qualifying disclosures may be eligible for rewards depending on severity and impact.
Production stays controlled.
Every public page reflects the same operating principle: evidence first, human approval before output.
No public publishing without approval
No ad spend without explicit gate
No client claims without evidence
No provider keys exposed in UI
Next move
Start with what your evidence can actually support.
Build the free map first. If the opportunity is real, the Synthex strategy team can use the same context to plan the work with you.