Privacy Policy
Last updated: March 1, 2026
1. Information We Collect
We collect information you provide directly (account details, payment information) and information generated through your use of the Platform (agent traces, API logs, usage metrics). We also collect standard web analytics data including IP addresses, browser type, and referring URLs.
2. How We Use Your Information
We use your information to: (a) provide and maintain the Service; (b) process transactions; (c) send service-related communications; (d) improve the Platform; (e) comply with legal obligations. We do not sell your personal data to third parties.
3. Agent Data and Traces
Reasoning traces, tool call logs, and agent outputs submitted to the Platform are your property. We process this data only to provide the Service. Trace data is encrypted at rest and in transit. You may delete your trace data at any time.
4. Data Retention
We retain account data for the duration of your account plus 30 days after deletion. Trace data retention depends on your plan: 7 days (Starter), 30 days (Pro), or 1 year (Enterprise). You may request earlier deletion.
5. Data Security
We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, infrastructure designed to support [CUSTOMISE: your compliance commitments, e.g. SOC 2 Type II], and regular penetration testing. Access to production systems is restricted and audited.
6. Third-Party Services
We use third-party services for payment processing, infrastructure, and analytics — [CUSTOMISE: list your sub-processors]. These services are bound by data processing agreements. We do not share more data than necessary for each service.
7. Your Rights
Depending on your jurisdiction, you may have the right to: access your data, request correction or deletion, object to processing, request data portability, and withdraw consent. Contact privacy@cortex.ai to exercise these rights.
8. International Transfers
Your data may be processed in regions outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for EU data transfers.
9. Cookies
We use essential cookies for authentication and session management. Optional analytics cookies are used only with your consent. You can manage cookie preferences in your browser settings.
10. Changes to This Policy
We will notify you of material changes to this Privacy Policy via email or in-app notification at least 14 days before they take effect. Continued use of the Service constitutes acceptance.