Legal
Privacy Policy
Last updated: 2026-05-02
This Privacy Policy explains how COGNITEX S.A.S. ("COGNITEX", "we", "us") collects, uses, stores, and discloses information when you use COGNITEX Bridge (the "Service") at cognitex-bridge.fly.dev and any associated production domain.
1. Data we collect
- Account data: name, email, locale preference, organization name, JobNimbus instance metadata.
- Operational data: JobNimbus jobs, contacts, attachments, status history — replicated into your tenant-isolated database for analytics and AI.
- Usage telemetry: tool invocation logs (tool name, latency, tokens, redacted args), web request logs, and error reports. PII is redacted before logging.
- Payment data: payment provider (PayPal or bank transfer), receipt URLs, status. Card data and account numbers never touch our servers — PayPal handles them entirely.
2. How we use it
- Operate and improve the Service.
- Run AI features that summarize, extract, and surface insights from your own data — never to train shared models.
- Send transactional email (signup, password reset, payment instructions, receipt approvals) via Resend.
- Comply with applicable law, respond to legal requests, and prevent abuse.
3. Sub-processors
We use the following sub-processors to deliver the Service. Each is contractually bound to handle data only for the purposes we instruct.
| Provider | Purpose | Region |
|---|---|---|
| Supabase (Postgres + Storage) | Database, file storage, auth | US East |
| Anthropic (Claude API) | AI inference | US |
| Voyage AI | Embeddings + reranker | US |
| Mistral AI | Document OCR | EU / US |
| Resend | Transactional email | US |
| PayPal | Card payments + payouts | Global |
| Fly.io | Application hosting | Region miami (mia) |
| Telegram | Bot messaging (opt-in) | Global |
4. Data retention
Operational data lives in your tenant database for as long as your account is active. On cancellation, we retain replicated data for 30 days to allow re-activation, then purge it permanently. Audit logs are retained 12 months.
5. Your rights
- Access: request a JSON export of your tenant data at any time.
- Correction: edit your profile and team data inline, or write to support.
- Deletion: cancel your account and request a hard delete via privacy@cognitex.app.
- Portability: data is exported as JSON / CSV in machine-readable form.
6. Cookies
We use first-party cookies only — for authentication (Supabase session) and locale preference. We do NOT use third-party tracking cookies, ad-tech pixels, or session-replay tools.
7. International transfers
Your data may be processed in the United States. Where required, transfers rely on Standard Contractual Clauses (SCC) executed with each sub-processor.
8. Contact
Questions about privacy: privacy@cognitex.app