1. Introduction
Cortex Content Intelligence ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use Cortex ("the Service").
2. Information We Collect
Information you provide
- Account information: Name, email address, company name, and password when you register
- Business information: Industry, niche, website domain, and location used to configure the Service
- Content data: Text, prompts, voice profiles, templates, and other content you create or upload
- Payment information: Billing details processed securely through our payment provider (Stripe). We do not store credit card numbers.
- Communications: Messages you send to us via email or support channels
Information collected automatically
- Usage data: Pages visited, features used, actions taken within the Service
- Device information: Browser type, operating system, IP address
- Cookies: Session cookies for authentication and preferences
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide and operate the Service | Account, business, and content data |
| Generate and optimize content | Business info, voice profiles, content data |
| Process payments | Billing information |
| Send service communications | Email address |
| Improve the Service | Usage data, device information |
| Provide customer support | Account info, communications |
| Comply with legal obligations | As required by law |
4. AI Processing
Cortex uses third-party AI providers (including Anthropic, OpenAI, and Google) to generate and process content. When you use AI features:
- Your prompts and business context are sent to AI providers for processing
- We do not use your content to train AI models
- AI providers process data according to their own data processing agreements, which prohibit use of API inputs for model training
- Generated content is stored in your account and is owned by you
5. Data Sharing
We do not sell your personal information. We share data only in these circumstances:
- Service providers: Third-party services that help us operate (hosting, payment processing, AI providers, analytics) under strict data processing agreements
- Publishing platforms: When you choose to publish content to connected platforms (WordPress, GitHub, etc.), content is shared with those platforms per your configuration
- Legal requirements: When required by law, legal process, or to protect our rights
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
6. Data Storage and Security
Your data is stored on secure servers hosted by Supabase (PostgreSQL) and Amazon Web Services (S3) in the United States. We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL) and at rest
- Role-based access controls
- Regular security audits
- Secure authentication via Supabase Auth with JWT tokens
7. Data Retention
We retain your data for as long as your account is active. After account deletion:
- Your content and account data are deleted within 30 days
- Backups containing your data are purged within 90 days
- Anonymized usage data may be retained for analytics
- Data required for legal compliance is retained as required by law
8. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data in a portable format
- Restrict processing of your data
- Object to certain processing activities
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at hello@usecortex.app.
9. Cookies
We use essential cookies required for the Service to function (authentication, session management). We do not use advertising or tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.
10. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.
11. International Data Transfers
Your data is processed in the United States. By using the Service, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place for international transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates the most recent revision.
13. Contact Us
For privacy-related questions or to exercise your data rights:
Cortex Content Intelligence
Email: hello@usecortex.app