Privacy Policy

1. Who We Are

Coznix (“we”, “us”) operates the Cosnify product at cosnify.app. We are the data controller for the personal data described in this policy. Product and privacy requests can be sent to hello@cosnify.app.

2. Data We Collect

Account data

When you sign in with Google, we receive your email address, name, profile image, and authentication identifiers needed to create and secure your Cosnify account. Authentication is handled through Google and Supabase Auth; Cosnify does not receive your Google password.

Usage data

Search queries you submit, analysis results generated, actor code produced, job history, and credit balance. This data is stored in our Supabase database, currently hosted in the EU (eu-west-1).

Payment data

Payments are processed by Polar.sh. We receive payment and customer metadata needed to match an order to your account, including the order ID, customer email, product, and credit amount. Polar handles card and billing details; Cosnify does not store card numbers.

Analytics data

We use PostHog to understand how the product is used (page views and feature usage). Cosnify's event calls use a pseudonymous account ID and do not intentionally send account email addresses. PostHog may still process technical identifiers and event data under its own privacy terms.

Technical data

Standard technical data such as IP address, browser, timestamp, and request information may be processed by our hosting, security, and infrastructure providers for security, reliability, and debugging. Retention varies by provider and operational need.

3. How We Use Your Data

• To provide and operate the Service (legal basis: contract performance).
• To send transactional emails, including welcome email and purchase confirmation (legal basis: contract performance).
• To prevent fraud, abuse, and unauthorised access (legal basis: legitimate interest).
• To analyse and improve product features (legal basis: legitimate interest).
• To comply with legal obligations.

We do not sell your personal data. We do not intentionally use your inputs to train our own models. Third-party AI providers process inputs under their applicable terms and contractual data-protection commitments.

4. Third-Party Services

We share data with the following sub-processors to operate the Service:

For transfers to providers outside the EU, we rely on Standard Contractual Clauses (SCCs) or the provider's EU-US Data Privacy Framework certification where applicable.

5. Data Retention

To request account or personal-data deletion, email hello@cosnify.app from the account email and describe the request. We will verify the request and respond within 30 days. Some records may be retained for legal, fraud-prevention, accounting, or dispute-resolution requirements.

6. Your Rights

If you are in the EU/EEA or UK, you have the following rights under the GDPR / UK GDPR:

• Access: request a copy of the data we hold about you.
• Rectification: ask us to correct inaccurate data.
• Erasure: request deletion of your personal data.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Restriction: ask us to pause processing in certain circumstances.

To exercise any of these rights, email hello@cosnify.app. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

Cosnify uses essential authentication cookies and browser storage for preferences. When enabled, PostHog and Vercel Analytics may process analytics events and use cookies or local storage according to their configuration. We do not use advertising cookies or sell data for targeted advertising.

8. Security

We use security measures including TLS in transit, Google sign-in through Supabase Auth, access controls on application data, and scoped API keys. No system is perfectly secure; we will provide notices required by applicable law if a breach affects your personal data.

9. Children

Cosnify is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email of any material changes before they take effect. The “effective date” at the top of this page reflects when the current version came into force.

11. Contact

Privacy questions or requests: hello@cosnify.app