Privacy Policy

Last updated 2026-11-06

Table of contents

Product Privacy Policy

Last updated: 2026-11-06

This Product Privacy Policy explains how Cognida, Inc. (“Cognida,” “we,” “us,” or “our”) collects, uses, shares, transfers, secures, and retains personal information when you access the SaaS application or its related in-product features (“Automate”). We may update this Policy from time to time. We will indicate the date of the latest update at the top. Where required by law, we will provide notice of material changes or obtain any necessary consent. Questions: info@cognida.ai

1. Information We Collect

  • Account data – name, title, business contact details, account identifiers, and authentication information.

  • Customer Content – documents, contracts, prompts, field values, and other data uploaded by customers to Automate (“Customer Content”).

  • Outputs – results generated by Automate from Customer Content.

  • Device data – IP address, browser or device type, session identifiers, and basic usage metrics collected through server logs, application telemetry, cookies, and similar technologies.

  • Data from others – information from publicly available sources or third parties, for account administration, user verification, or access management.

  • Children’s privacy – Automate is not directed to children under 16, and we do not knowingly collect data from anyone under 16. If you believe we have done so, email dpo@cognida.ai so that we can delete it.

2. How We Use Personal Information

We use personal information to:

  • operate, improve, and troubleshoot Automate (contract performance; legitimate interests);

  • protect security and prevent fraud by detecting, investigating, and acting on threats or illegal activity (legitimate interests; legal obligations);

  • communicate with you for support, feature updates, account notices, and invoices (contract performance; legitimate interests; consent where required for marketing);

  • comply with laws, enforce agreements, and resolve disputes (legal obligations; legitimate interests).

Legal bases: the legal basis for each purpose is shown in brackets above. Where we rely on consent, you may withdraw it by emailing dpo@cognida.ai.

3. Sharing and Transfers

  • Cognida personnel and affiliates – who need access for legitimate business purposes.

  • Authorized users designated by the customer – personnel and auditors designated by the customer. The customer controls who gets access.

  • Service providers – cloud hosting, authentication, analytics restricted to product performance, and payment processors bound by contract.

  • Business-transaction counterparties – we may disclose personal information to purchasers, investors, successors or other counterparties in a merger, acquisition, financing, sale of assets or other corporate transaction, subject to confidentiality and data-protection requirements.

  • Legal or safety authorities – when required to comply with law or protect rights, property, or safety.

  • Cross-border transfers – personal information may be transferred to, stored in, or accessed from other countries. Where required, we use safeguards such as Standard Contractual Clauses.

We do not sell personal information for monetary consideration. We do not make decisions that produce legal or similarly significant effects solely through automated processing. We may disclose aggregated or anonymized data that cannot identify you.

4. Data Security and Retention

We encrypt personal information in transit and at rest and apply layered technical, administrative, and physical safeguards designed to protect it. No online system is completely secure, and we cannot guarantee absolute security. We keep personal information only while necessary for the purposes above, based on the purpose of processing, our legal duties, and the need to resolve disputes. Customer Content is retained and deleted in accordance with the customer agreement and DPA, including backups.

Suspect a security issue? Email dpo@cognida.ai.

5. Your Privacy Rights

Depending on local law, you may request to access, correct, port, delete, object to, restrict, or withdraw consent for personal information. You may also lodge a complaint with your supervisory authority if you reside in the European Economic Area, Switzerland, the United Kingdom, or California.

We will not discriminate against you for exercising any right. To make a request, email dpo@cognida.ai and be prepared to verify your identity.

6. U.S. State Privacy Rights

Residents of certain U.S. states, including California under the California Consumer Privacy Act (CCPA), have the right to:

  • access their personal information;

  • correct their personal information;

  • delete their personal information;

  • port their personal information; and

  • opt out of the sale or sharing of their personal information.

To submit a request, email dpo@cognida.ai. We will verify your identity before acting on your request. You may use an authorized agent to submit a request on your behalf. If we decline your request, you may appeal by emailing dpo@cognida.ai.

Website, Marketing & Events Privacy Policy

Last updated: 2026-11-06

This Website, Marketing & Events Privacy Policy (“Policy”) explains how Cognida, Inc. (“we,” “us,” or “our”) collects, uses, shares, transfers, secures and retains personal information when you: (i) visit our public websites; (ii) receive our marketing communications; or (iii) register for or attend events hosted by us or third parties (collectively, “Websites, Marketing Activities, and Events”). We may update this Policy from time to time. We will indicate the date of the latest update at the top. Where required by law, we will provide notice of material changes or obtain any necessary consent. Questions: info@cognida.ai