Privacy Policy
Your data is yours. Here's exactly how we protect it.
1. Who we are
Cognenta is operated by Apex Integrate LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110. Contact: joe@cognenta.com.
2. Our Privacy Promise
You Own Your Data: We claim no ownership over lead notes or personality profiles.
Minimal Access: We pull only the minimum data required from your authorized sources to function.
Affirmative Support Access: Access to lead data is prohibited unless you provide affirmative, logged, and time-limited consent for a specific support ticket.
3. Role and Relationship
Cognenta acts as a Data Processor. We have no direct relationship with individual leads in your CRM. A standard Data Processing Agreement (DPA) is available upon request.
4. Prohibited Data (Liability Shield)
Users are strictly prohibited from using Cognenta to process Sensitive Information, including Social Security numbers, health data, financial account numbers, or physical/mental health conditions. Any ingestion of such data triggers an automated “Safe Skip” and is excluded from processing.
5. Technically Grounded Protection & Sub-processors
We replace raw identifiers with tokens locally before processing by our vetted sub-processors:
OpenAI
AI text generation
Supabase
Secure multi-tenant database storage
Fly.io & Vercel
Application hosting and infrastructure
Twilio
SMS delivery
GoHighLevel (LeadConnector)
Website forms and CRM
6. Text messages (SMS)
If you opt in to text messages on our website, we use your mobile number only to send the messages you agreed to receive about your request. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent are not shared with any third parties, except the service providers that deliver our messages. Reply STOP at any time to opt out, or HELP for help.
7. Security & Vulnerability Remediation
We commit to annual third-party security assessments. Identified vulnerabilities are remediated based on their CVSS score:
Critical
9.0–10.0
24 Hours
High
7.0–8.9
7 Days
Medium
4.0–6.9
30 Days
Low
0.1–3.9
90 Days
8. Data Retention Schedule
| Data Category | Retention |
|---|---|
| CRM Lead Records | 18 Months |
| Active Profiles | Duration of Account |
| Cancelled Accounts | 60 Days |
| Hashed Identifiers | Permanent |
| System Logs | 30 Days |
9. International Compliance
- Transfers: We are pursuing self-certification under the EU-U.S. Data Privacy Framework (DPF). Until finalized, we rely on Standard Contractual Clauses (SCCs) and the UK IDTA.
- Human Oversight:For leads residing in the UK or EU, we maintain a “human-in-the-loop” workflow where all outputs are pushed as drafts for review to satisfy Article 22 of the UK/EU GDPR.
10. Dispute Resolution and Updates
- Independent Recourse: Unresolved complaints will be referred to BBB National Programs in the United States.
- Material Changes: We will notify users of material policy changes 30 days prior to the effective date.
11. Contact
For DSAR requests, DPA copies, or security reports:
privacy@cognenta.comWe acknowledge all security disclosures within 2 business days.