Legal
Privacy Policy
Last updated: October 6, 2026
This policy explains what personal information we collect on cognitivvai.com and in the Cognitivv AI workspace app, why we collect it, and what you can do about it. We have tried to keep it short and plain.
Who we are
Cognitivv AI ("we", "us") runs this website and the app. We are operated by Cognitivv Inc, 169 Madison Ave STE 63755, New York, NY 10016. You can reach us at hello@cognitivvai.com or +1 631 258 0200.
We do not have a designated Data Protection Officer. Send any privacy question to the email address above and a person will answer it.
What we collect and why
| What | When we collect it | Why |
|---|---|---|
| Company name, work email address, and optionally your team size | When you join the waitlist | To contact you about Cognitivv AI, including launches and offers |
| Your name, work email address and company name, plus the name and email of each teammate you invite | When you create an account or invite someone | To set up your workspace, sign you in, and send you service notices and, unless you opt out, news and offers |
| The requests, files, comments and approvals you and your team add to your workspace | When you use the app | To do the work you asked for, show your queue and history, and write your monthly report |
| Billing name and email, billing address, any tax number you give us, your plan, and your payment history | When you subscribe or change your billing details | To charge you, send invoices, receipts and renewal notices, and keep our financial records. Stripe collects your card or bank details, not us. We receive only limited details, such as the card brand and the last four digits |
| Records of the AI work we run for you: which tasks ran, how much AI they used and what it cost | When we run work for you | To bill AI usage at cost and to show you what ran |
| Your IP address, browser type and the time of sign-ins and key actions in the app | When you sign in or use the app | To keep accounts secure and to look into misuse |
| Your name, an optional email address, and your comment | When you post a comment on an article | To show your comment once we approve it, and to moderate comments. Your email address is only visible to us. We never show it publicly |
| A random visitor ID, and counts of likes, views and share clicks | When you read an article, like it, or click a share button | To count likes and views once per visitor, and to show how many people found an article useful |
| Your light or dark theme choice | When you pick a theme | To show the site the way you chose |
| Details in the hosting provider's server logs, such as your IP address, browser type and the pages requested | Automatically, when you load any page | To run the site and keep it secure |
| Your name, email address and message | When you send us a message through the contact form | To read your message and reply to you. Only we can see it. We never show it publicly |
| Anything you send us by email | When you contact us | To reply to you |
We do not ask for more than we need. You can read the site without giving us any personal information.
Information in your workspace
We decide how to use information about visitors, account holders and billing. Information in your workspace is different. Your workspace may include personal information about your own customers, staff or suppliers. Your business decides why and how that information is used, and we handle it for your business. In legal terms, we are your "processor" or "service provider". We use it only to do the work you ask for and to run the service, and we follow your instructions about it. You are responsible for having the right to share it with us.
Emails from us
We send two kinds of email.
- Service emails. These are about your account and subscription, such as sign-in and security messages, receipts, and renewal notices. You get them while you have an account, because they are part of the service.
- Marketing emails. These are newsletters, launch updates and offers. We may send them to waitlist members and to clients, including news about services similar to ones you have asked about or bought. Every marketing email has an unsubscribe link. You can also email hello@cognitivvai.com to stop them, and we will stop within 10 business days at the latest. Where the law says we need your consent first, we ask for it.
When we send newsletters or launch emails, we use an email service provider. It receives your email address, name and company so it can send them for us.
What we do not do
- We do not sell your personal information.
- We do not name you, show your logo, or show your work in public without your written permission.
- We do not show advertising on this site.
- We do not use analytics or advertising trackers on this site today. If that changes, we will update this policy first.
- We do not use the content of your workspace to train AI models.
Cookies and browser storage
The public pages of the site store two small things in your browser.
- A cookie named
theme. It remembers whether you chose light or dark. It lasts one year. Your browser sends it to our server so the page loads in the right theme. - A visitor ID in your browser's local storage. It is a random code that we create. It is not linked to your name, your email address or your IP address. We use it so a like or a view counts once per visitor. If you clear your browser's site data, the ID is gone and you become a new visitor.
Neither is used for advertising.
When you sign in to the app, our sign-in provider also sets the cookies or browser storage it needs to keep you signed in. They are used only for that. Stripe's payment pages may set their own cookies for security and fraud prevention, and Stripe's policy applies to those. Your browser lets you block or delete cookies. If you block the sign-in cookies, you will not be able to sign in to the app.
Other companies that see some information
We use other companies to run the service. They only get what they need to do their job.
- Stripe (payments). When you subscribe or update your payment details, Stripe collects your card or bank details and processes your payments. We never see or store your full card number. Stripe handles card data to the PCI-DSS security standard set by the card industry. Stripe also uses some information to prevent fraud and to meet its own legal duties. Stripe's privacy policy applies to that.
- AI model providers. To do your work, we send the text and files of a request to AI models from providers such as Anthropic (Claude), OpenAI and Google (Gemini), chosen to fit the task. For quick decisions, such as routing a request or scoring its urgency, we may also use specialised models, such as Jev from TypeSafe. We send them what the task needs.
- Our sign-in provider (Clerk). It handles account sign-in and keeps you signed in.
- Our database and backend provider (Convex). It stores waitlist entries, comments, contact-form messages, like and view counts, and your account and workspace data for us.
- Our hosting provider (Vercel). It serves the site and keeps server logs.
- Google Fonts. Your browser downloads our fonts from Google. This means Google receives your IP address and browser details when a page loads. Google's privacy policy applies to that.
- Video providers. Some articles embed a video from YouTube, Vimeo or Loom. We use YouTube's privacy-enhanced address and Vimeo's do-not-track setting. Even so, the video provider's server receives a request from your browser when a page with an embedded video loads. Their privacy policies apply.
- Share buttons. The buttons for X, Reddit, LinkedIn and Facebook are ordinary links. They send nothing until you click one, and then you leave our site for theirs.
- Our private admin tools. We use writing and social media scheduling tools to run the site. Only we use them. We do not send visitor details such as comment names or email addresses to them.
We may also share information if the law requires it, or to protect our rights or the safety of others. If we ever sell or merge the business, information may move to the new owner under this same policy.
How long we keep it
- Waitlist details: until you ask us to delete them, or until we no longer need them for the waitlist.
- Account and workspace data: while your subscription is active, and for 30 days after it ends. You can ask us to delete it sooner, and to send you a copy first.
- Billing records: for as long as the law requires us to keep financial records.
- AI usage records: 12 months, so we can bill and report accurately.
- Comments: while the article stays online, unless we or you remove the comment sooner. If we delete an article, its comments, likes and view records are deleted with it.
- Server logs: for as long as our hosting provider keeps them.
- Contact-form messages and emails to us: for as long as we need them to deal with your request.
- Marketing email list: until you unsubscribe. After that we keep only your email address, on a list that stops us emailing you again.
We may keep some information longer where the law requires it, or to settle a dispute or enforce our agreements.
Security
We take reasonable steps to protect your information. Each client's workspace is kept separate from other clients' workspaces, and you need to sign in to reach yours. The admin area needs a sign-in, and only we can see comment email addresses. No website or app can promise perfect security. Please do not put passwords, payment card numbers or other highly sensitive information in a request, a comment, or a form.
Your choices and rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and how we use it (Art. 15 GDPR).
- Correct information that is wrong or incomplete (Art. 16).
- Erase your information, for example when we no longer need it for the purpose we collected it (Art. 17).
- Restrict how we use your information in some situations (Art. 18).
- Receive a copy of the information you gave us in a common, machine-readable format, and have it sent to another company (Art. 20).
- Object to how we use your information, including for direct marketing (Art. 21).
- Withdraw your consent at any time, where we rely on consent. Withdrawing does not undo what we did before (Art. 7(3)).
- Complain to your local data protection authority (Art. 77).
To use any of these rights, email us at hello@cognitivvai.com or call +1 631 258 0200. We may need to confirm it is really you before we act, and we will answer within the time the law allows. If you ask us to delete information we need to run your account, we may not be able to provide the service. You can also clear the cookie and local storage described above at any time in your browser settings.
If your information is in a client's workspace, for example because you are one of their customers, please contact that client first. They decide what goes into their workspace. We will help them answer you.
If you live in the United States
If you live in California or another US state with a privacy law, you also have these rights:
- Know what personal information we collected about you, where it came from, why we use it, and which kinds of companies we share it with.
- Delete the personal information we collected about you.
- Correct information about you that is wrong.
- Limit how we use sensitive personal information. We do not ask for sensitive information such as government ID numbers, health details or precise location.
- Opt out of the sale or sharing of your personal information. We do not sell or share personal information, as those terms are used in US state privacy laws.
- Not be treated worse for using any of these rights.
To make a request, email hello@cognitivvai.com or call +1 631 258 0200. We will compare what you send with what we hold to confirm it is you, then reply as the law requires. We may limit requests to know what we hold to two in any 12 months. When we delete your information, we also ask our service providers to delete it. Sometimes we delete by removing the details that identify you, so that what is left no longer relates to you.
If you disagree with our answer, you can appeal. Contact us within 60 days of our reply and include your original request, the date of our reply, and a short note on why you think we got it wrong.
Do Not Track and California online privacy
You can read the public pages of this site without giving us any personal information. Do Not Track is a browser setting that asks websites not to track you. We do not track you across other websites, but our site does not change how it works when it sees this signal. The cookie and the visitor ID we use are described above. Other companies that receive a request when a page loads, such as Google Fonts and video providers, are listed above too. We post changes to this policy on this page. You can ask us to change the personal information we hold about you by emailing hello@cognitivvai.com.
Children
This site and the app are not meant for anyone under 16, and the app is for businesses. We do not knowingly collect personal information from children. If you think a child has given us information, please email us and we will delete it.
Where your information goes
Our providers, including Stripe and the AI model providers, may handle information in the United States or other countries, which may be different from where you live.
Changes to this policy
We may update this policy. When we do, we will change the date at the top of this page. If a change is important, we will say so clearly on this page, and we will email account holders at least 30 days before it takes effect.
Contact us
Questions about this policy? Email hello@cognitivvai.com, call +1 631 258 0200, or write to Cognitivv Inc, 169 Madison Ave STE 63755, New York, NY 10016.