Privacy Policy

1. Who We Are

Coznix (“we”, “us”) operates the Coznix platform at coznix.com. We are the data controller for the personal data described in this policy. You can reach us at info@coznix.com.

2. Data We Collect

Account data

When you sign up: your email address and encrypted password (stored by Supabase).

Usage data

Search queries you submit, analysis results generated, actor code produced, job history, and credit balance. This data is stored in our Supabase database hosted in the EU (eu-west-1).

Payment data

Payments are processed by Polar.sh. We receive a webhook notification confirming your purchase and store only the order ID and credit amount. We never see or store your card number or billing details.

Analytics data

We use PostHog to understand how the product is used (page views, feature usage). PostHog collects anonymised event data. No personal identifiers are sent to PostHog beyond a pseudonymous user ID.

Technical data

Standard server logs (IP address, browser, timestamp) retained for up to 30 days for security and debugging.

3. How We Use Your Data

• To provide and operate the Service (legal basis: contract performance).
• To send transactional emails — welcome email, purchase confirmation (legal basis: contract performance).
• To prevent fraud, abuse, and unauthorised access (legal basis: legitimate interest).
• To analyse and improve product features (legal basis: legitimate interest).
• To comply with legal obligations.

We do not sell your personal data. We do not use your data to train AI models.

4. Third-Party Services

We share data with the following sub-processors to operate the Service:

For transfers to providers outside the EU, we rely on Standard Contractual Clauses (SCCs) or the provider's EU-US Data Privacy Framework certification where applicable.

5. Data Retention

We retain your account data and job history for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by law to retain it (e.g. payment records for tax purposes, retained for 7 years).

6. Your Rights

If you are in the EU/EEA or UK, you have the following rights under the GDPR / UK GDPR:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Restriction — ask us to pause processing in certain circumstances.

To exercise any of these rights, email info@coznix.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

Coznix uses only essential cookies required for authentication (session token). We do not use tracking or advertising cookies. The PostHog analytics SDK uses localStorage, not cookies, and respects your browser's Do Not Track setting.

8. Security

We use industry-standard security measures: TLS in transit, encrypted passwords (bcrypt via Supabase Auth), Row Level Security on all database tables, and scoped API keys. No system is perfectly secure; we will notify you promptly in the event of a data breach that affects your personal data.

9. Children

Coznix is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email of any material changes before they take effect. The “effective date” at the top of this page reflects when the current version came into force.

11. Contact

Privacy questions or requests: info@coznix.com