Skip to main content

Security & privacy

Built so one shop never sees another.

How Synhelm protects your business's information, what it collects, and what you can do with your data.

Your data is yours

Export clients, hours, and paper any time on every plan. Cancelling never deletes anything; deleting is a separate request you can take back for 30 days.

Separate by design

Every request is checked on the server for who you are and which business you belong to. Hiding a button is never the only lock.

Only what's needed

Crew sign in with a PIN — no email or phone number required. Location is stamped only at clock-in, clock-out, and photos, only when the owner turns it on and the phone allows it.

Sign-in that watches for trouble

Turn on two-step login with an authenticator app. You get an email when your account signs in on a new device, new passwords found in known data breaches are refused, and 5 wrong passwords in a row pause sign-in for 10 minutes.

Crew phones you approve

On by default, crew sign-in opens only on phones the business has approved, so someone with the link never sees your crew list. A new phone asks, and the office approves it.

No one signs in as you

Synhelm staff can't see passwords or sign in as a customer. Support views a business read-only unless they turn on a logged, time-limited edit mode.

Encrypted in transit

Every page and file travels over HTTPS. Sign-in cookies are secure, HTTP-only, and locked to this site.

Private links stay private

Client paper, pay, and progress links use long random codes, expire or stop working when you revoke them, and are kept out of search engines.

Privacy and security

  • How your business's information is kept separate

    Every request is checked on Synhelm's server: who is signed in, which business they belong to, and what they're allowed to open. A business can never see another business's clients, jobs, crew, photos, files, or paper, and hiding a button is never the only protection.

    Office admins only reach the areas the owner turned on for them. Crew only see their own hours and the jobs they're on.

    Synhelm staff can't see your password and can't sign in as you. When Synhelm support opens a business to help, it's view-only unless they turn on a time-limited edit mode with a reason, and every step is logged.

  • Signing in safely

    Owners sign in with email and password, and new accounts confirm their email first. Forgot your password? Use the link on the sign-in page; a reset signs out every other device.

    Synhelm will never ask for your password by email or phone.

  • Bringing in clients and crew from a spreadsheet

    Settings → Data & export → Bring in your lists. Save your list as CSV (from Excel, Google Sheets, or your old app); the first row names the columns, in any order. Clients: Name (or First and Last name), Company, Email, Phone, Address (Street, City, State or Province, ZIP or Postal code), Notes. Crew: Name, Role, Email, Phone, Hourly rate. You see a preview before anything is added, and people already here are skipped.

    Imported crew each get their own 4-digit PIN, shown once after the import and always on their profile. Your plan's crew limit still applies.

  • Connections (Zapier, Make, webhooks)

    Settings → Connections: paste a webhook address and Synhelm sends a small signed message when an invoice is paid, a client decides on an estimate or change order online, or someone sends your quote request page. Send a test checks the address; the last result shows under it.

  • Exporting and deleting your information

    Your records are yours. Download every record as spreadsheets (Settings → Data, hours included), a client as a ZIP, and paper as PDF any time — on every plan. Synhelm Pro adds ready-made files for payroll software and your bookkeeper.

    Deleted something by mistake? Right after deleting a client, a project or a punch, tap Undo on the message that pops up. Clients, projects, appraisals, estimates, invoices, hours, photos and files stay in Settings → Data → Recycle bin for 30 days. Restore puts them back with their photos, files and links; after 30 days they're gone for good.

    Settings → Data & export → Close this business and delete its data: everything for the business is removed after 30 days. You can cancel until then.

The details are in the privacy policy. Found a security problem? Please tell us through the contact page and don't share it publicly until we've fixed it.

Run the whole shop from one place.

Set up your shop in a few minutes. Add your logo, your crew, and your first job — the rest follows the job.