Cogzia Privacy Policy

Version: 1.1 Effective Date: December 10, 2025 Last Updated: December 10, 2025

1. Introduction

Cogzia, Inc. ("Cogzia," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI infrastructure platform and related services (the "Service").

By using the Service, you consent to the practices described in this Privacy Policy and in our Terms of Service.

For consistency with our Terms of Service:

"Your Content" (also referred to as "Your Data") means the data, files, prompts, code, configurations, and other materials you upload to or process through the Service, together with any associated metadata.
"Personal information" means any information that identifies or can reasonably be linked to an individual.

2. Information We Collect

2.1. Information You Provide

Account Information: Name, email address, and other information you provide when creating an account.
Payment Information: Billing address and payment method details (processed by our payment processor).
Your Content: Data, files, prompts, and other materials you upload or create through the Service.
Communications: Messages you send to us, including support requests and feedback.

2.2. Information Collected Automatically

Usage Data: How you interact with the Service, including features used, actions taken, and time spent.
Device Information: Browser type, operating system, device identifiers, and IP address.
Log Data: Server logs that record requests, errors, and system events.
Cookies and Similar Technologies: We use cookies and similar technologies for authentication, preferences, and analytics.

3. How We Use Your Information

3.1. To Provide the Service

We use your information to operate, maintain, and deliver the Service to you, including processing your requests, storing your content, and enabling Service features.

3.2. Your Content and AI Training

We respect the confidentiality and ownership of Your Content.

We do NOT use Your Content to train AI models (ours or third-party) without your explicit consent.
Your uploaded data, prompts, conversations, configurations, and generated outputs that are based on or derived from your inputs are Your Content / Your Data, as described in our Terms of Service.
We process Your Content as needed to provide, operate, maintain, secure, and support the Service, and as otherwise described in this Privacy Policy and our Terms of Service.
If you choose to contribute Your Content to help train or fine-tune AI models, you may opt in through your account settings or a separate agreement.
You may withdraw such consent at any time through your account settings; withdrawal will not affect processing that has already occurred but will stop future processing for model training purposes.

3.3. Product Improvement and Understanding Usage

Separately from AI model training, we analyze how users interact with the Service to improve our product. This includes understanding:

What types of MCPs, agents, and workflows users build;
How users configure and customize the Service;
Which features are most valuable and which need improvement;
Common patterns, pain points, and use cases.

This analysis helps us build better features, improve documentation, and prioritize our roadmap. We may review the structure, configuration, and metadata of what you build (such as MCP definitions, agent configurations, and workflow designs) for these purposes.

Important distinction:

Product improvement: We analyze what you build and how you use the Service to make Cogzia better. This does NOT require opt-in consent.
AI model training: We do NOT use your actual content, prompts, or outputs to train AI models without your explicit opt-in consent.

3.4. Anonymous Usage Analytics

We collect and analyze anonymized, aggregated usage patterns to:

Understand how users interact with the Service
Identify popular features and areas for improvement
Make data-driven product decisions

This aggregated data cannot identify you or be used to reconstruct Your Content.

3.5. Error Monitoring and Service Improvement

We monitor for technical errors and exceptions to:

Identify and fix bugs and system issues
Improve Service reliability and performance
Ensure system stability

Error logs may contain metadata about your usage but are used solely for troubleshooting.

3.6. Abuse Prevention and Security

We monitor usage patterns to:

Detect and prevent fraud, abuse, and security threats
Enforce our Terms of Service and Acceptable Use Policy
Protect the Service and our users

3.7. User-Initiated Error Reporting

When you submit a support request or error report that includes a URL to a specific project, run, or conversation:

You explicitly grant designated Cogzia support personnel access to view the data associated with that URL.
Access is granted solely for the purpose of diagnosing and resolving the reported issue.
Access is limited to authorized personnel who are bound by confidentiality obligations.
We will only access the specific resources you identify in your report.
Once the issue is resolved, support access to that data ends.

This user-initiated sharing does not constitute general consent to access your other data or use your data for purposes beyond troubleshooting.

3.8. Training and Consulting Services

If you engage Cogzia for training, consulting, or professional services and share URLs or data as part of that engagement:

You explicitly grant designated Cogzia personnel access to the shared data for the purposes described in the service agreement.
Access is limited to personnel assigned to your engagement.
Data shared for consulting purposes will be used only to deliver the agreed-upon services.
This does not grant Cogzia rights to use your data for AI training or other purposes beyond the scope of the engagement.
Any additional data use requires separate written consent.

3.9. Communications

We may use your contact information to:

Send Service-related notices (e.g., updates, security alerts, billing)
Respond to your inquiries and support requests
Send marketing communications (with your consent, which you may withdraw)

4.1. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2. Service Providers

We may share information with third-party service providers who perform services on our behalf, including:

Cloud infrastructure providers
Payment processors
Analytics services
Customer support tools

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.3. AI Model Providers

To provide AI functionality, we transmit certain data to third-party AI providers (for example, Anthropic, OpenAI, Google, or similar providers). These transmissions are necessary to process your requests (such as generating text, code, or other outputs).

We take the following measures:

We select providers with strong security and privacy commitments and review their data handling practices.
We configure our API integrations to disable training on your data where such options are available.
We share only the data reasonably necessary to perform the requested operation.

We cannot guarantee how third-party providers handle data once transmitted, but we select providers who commit to not using API data for model training.

4.4. Legal Requirements

We may disclose information if required by law, legal process, or government request, or to:

Protect our rights, privacy, safety, or property
Enforce our Terms of Service
Protect against legal liability

4.5. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

5.1. Your Content

We retain Your Content for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete Your Content within a reasonable period, unless retention is required by law.

5.2. Account Information

We retain account information for as long as your account exists and for a reasonable period afterward for legal and business purposes.

5.3. Anonymized Data

Anonymized, aggregated data that cannot identify you may be retained indefinitely for analytics and research purposes.

6. Your Rights and Choices

6.1. Access and Portability

You may access Your Content through the Service. You may request a copy of your personal information by contacting us.

6.2. Correction

You may update your account information through your account settings or by contacting us.

6.3. Deletion

You may delete Your Content through the Service. You may request deletion of your account and personal information by contacting us. Some information may be retained as required by law.

6.4. Opt-Out of AI Training Contribution

If you have opted in to contribute Your Content for AI improvement, you may opt out at any time through your account settings.

6.5. Marketing Communications

You may opt out of marketing emails by clicking "unsubscribe" in any marketing email or updating your communication preferences.

6.6. Cookies

Most browsers allow you to control cookies through settings. Note that disabling cookies may affect Service functionality.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit and at rest
Access controls and authentication
Regular security assessments
Employee training on data protection

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA") and its amendments.

We do not "sell" or "share" personal information as those terms are defined under the CCPA. We also do not use or disclose sensitive personal information for purposes that, under CCPA, require a right to limit such use.

10.2. Your CCPA Rights

Subject to certain exceptions, you have the right to:

Right to Know: Request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.
Right to Delete: Request deletion of your personal information that we have collected, subject to certain exceptions (for example, where retention is required to comply with law or to protect our legal rights).
Right to Correct: Request correction of inaccurate personal information we maintain about you.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at privacy@cogzia.com and indicate that you are making a "CCPA request." We may need to verify your identity before responding.

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under applicable data protection laws (including the GDPR and UK GDPR).

11.1. Legal Bases for Processing

We process personal data on the following legal bases:

Contract: To provide and administer the Service you have requested, including account management, billing, and support.
Legitimate Interests: To operate, secure, and improve the Service (for example, usage analytics, error monitoring, abuse prevention), where our interests are not overridden by your rights and interests.
Consent: For certain activities, such as optional marketing communications or optional use of Your Content for AI improvement, where you have given clear consent. You may withdraw consent at any time.
Legal Obligations: To comply with legal requirements, law enforcement requests, and regulatory obligations.

Subject to certain conditions, you have the right to:

Access your personal data and obtain a copy;
Request correction of inaccurate or incomplete data;
Request deletion of your data;
Request restriction of processing;
Object to processing based on our legitimate interests;
Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller (data portability);
Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@cogzia.com. You also have the right to lodge a complaint with your local supervisory authority.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after such notice constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Cogzia, Inc. 4206 E. Lake Sammamish Pkwy SE Sammamish, WA 98075

Email: privacy@cogzia.com General Legal: legal@cogzia.com

By using Cogzia, you acknowledge that you have read and understood this Privacy Policy.