Privacy Policy

1. Who we are and this policy's scope

CogniSphere ("CogniSphere," "we," "us," or "our") provides AI-powered agent tools. This Privacy Policy applies to our website, applications, and related services (collectively, the "Service"). It does not apply to services operated by third parties, including Google and Microsoft, which have their own policies.

2. Information we collect

We may collect the following categories of information:

• Account and contact information, such as your name, email address, profile information, and authentication details.
• Service and usage information, such as configuration choices, agent instructions, prompts, activity records, device and log data, and support communications.
• Connected-service information, limited to the permissions you approve. Depending on the connection and scopes you authorize, this can include account profile information and content from services such as Google Workspace/Gmail, Google Calendar, Microsoft Outlook, Microsoft 365, and other integrations.
• OAuth credentials, such as access and refresh tokens, which let the Service access a connected account without receiving or storing your third-party password.

3. How we use information

We use information to operate, secure, support, and improve the Service; authenticate you; maintain connected accounts; perform the agent features you request or configure; communicate with you; prevent abuse; and comply with law. An agent may read, organize, summarize, search, draft, create, modify, send, or otherwise act on connected-service data only within the permissions you grant and the instructions or automations you configure.

You can review the permissions requested during a connection flow. We ask for only the access needed for the feature you choose, and you can decline, disconnect, or revoke access at any time.

4. Google user data and Limited Use

CogniSphere's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve user-facing CogniSphere features that you request or configure.

We do not sell Google user data, use it for advertising or ad targeting, use it to determine creditworthiness or lending eligibility, or allow people to read it unless you give affirmative permission for a specific review, it is necessary for security or legal compliance, or it is otherwise permitted by Google's policy. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.

5. How information is shared

We do not sell your personal information. We share information only as needed to operate the Service: with service providers that support hosting, security, authentication, AI/model processing, customer support, and analytics; with integrations you connect or direct us to use; to comply with law or protect rights and safety; or in connection with a corporate transaction. Providers may process data only on our instructions and for the purposes described in this policy.

6. Retention and security

We retain information only for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. When you disconnect a third-party account or revoke its authorization, we stop using its access token and delete or disable it promptly. We delete associated connected-service data within 30 days unless a longer period is required for security, legal compliance, or a legitimate operational need that is compatible with this policy.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your choices and rights

You may manage or revoke a connection from the Service or from the connected provider's security settings. You may also request access, correction, deletion, or export of your personal information, subject to applicable law, by emailing privacy@cognisphere.sh. We may need to verify your identity before processing a request.

8. International transfers

We and our service providers may process information in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers of personal information.

9. Children's privacy

The Service is not directed to children under 13, or the minimum age required in your jurisdiction to consent to online services. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate action.

10. Changes and contact

We may update this policy from time to time. We will post the updated version here and revise the date above. If a change materially affects how we use connected-account data, we will provide notice and request consent where required before using that data in the new way.

For privacy questions or requests, contact us at privacy@cognisphere.sh.