v15.0 — Effective October 25, 2026

Privacy Policy

Your data is yours. Here's exactly how we protect it.

1. Who we are

Cognenta is operated by Apex Integrate LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110. Contact: joe@cognenta.com.

2. Our Privacy Promise

  • You Own Your Data: We claim no ownership over lead notes or personality profiles.

  • Minimal Access: We pull only the minimum data required from your authorized sources to function.

  • Affirmative Support Access: Access to lead data is prohibited unless you provide affirmative, logged, and time-limited consent for a specific support ticket.

3. Role and Relationship

Cognenta acts as a Data Processor. We have no direct relationship with individual leads in your CRM. A standard Data Processing Agreement (DPA) is available upon request.

4. Prohibited Data (Liability Shield)

Users are strictly prohibited from using Cognenta to process Sensitive Information, including Social Security numbers, health data, financial account numbers, or physical/mental health conditions. Any ingestion of such data triggers an automated “Safe Skip” and is excluded from processing.

5. Technically Grounded Protection & Sub-processors

We replace raw identifiers with tokens locally before processing by our vetted sub-processors:

OpenAI

AI text generation

Supabase

Secure multi-tenant database storage

Fly.io & Vercel

Application hosting and infrastructure

Twilio

SMS delivery

GoHighLevel (LeadConnector)

Website forms and CRM

6. Text messages (SMS)

If you opt in to text messages on our website, we use your mobile number only to send the messages you agreed to receive about your request. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent are not shared with any third parties, except the service providers that deliver our messages. Reply STOP at any time to opt out, or HELP for help.

7. Security & Vulnerability Remediation

We commit to annual third-party security assessments. Identified vulnerabilities are remediated based on their CVSS score:

Critical

9.0–10.0

24 Hours

High

7.0–8.9

7 Days

Medium

4.0–6.9

30 Days

Low

0.1–3.9

90 Days

8. Data Retention Schedule

Data CategoryRetention
CRM Lead Records18 Months
Active ProfilesDuration of Account
Cancelled Accounts60 Days
Hashed IdentifiersPermanent
System Logs30 Days

9. International Compliance

  • Transfers: We are pursuing self-certification under the EU-U.S. Data Privacy Framework (DPF). Until finalized, we rely on Standard Contractual Clauses (SCCs) and the UK IDTA.
  • Human Oversight:For leads residing in the UK or EU, we maintain a “human-in-the-loop” workflow where all outputs are pushed as drafts for review to satisfy Article 22 of the UK/EU GDPR.

10. Dispute Resolution and Updates

  • Independent Recourse: Unresolved complaints will be referred to BBB National Programs in the United States.
  • Material Changes: We will notify users of material policy changes 30 days prior to the effective date.

11. Contact

For DSAR requests, DPA copies, or security reports:

privacy@cognenta.com

We acknowledge all security disclosures within 2 business days.