Privacy Policy

• You Own Your Data: We claim no ownership over lead notes or personality profiles.

• Minimal Access: We pull only the minimum data required from your authorized sources to function.

• Affirmative Support Access: Access to lead data is prohibited unless you provide affirmative, logged, and time-limited consent for a specific support ticket.

• No Training: Your data is never used to train global AI models.

Cognenta acts as a Data Processor. We have no direct relationship with individual leads in your CRM. A standard Data Processing Agreement (DPA) is available upon request.

Users are strictly prohibited from using Cognenta to process Sensitive Information, including Social Security numbers, health data, financial account numbers, or physical/mental health conditions. Any ingestion of such data triggers an automated “Safe Skip” and is excluded from processing.

We replace raw identifiers with tokens locally before processing by our vetted sub-processors:

We commit to annual third-party security assessments. Identified vulnerabilities are remediated based on their CVSS score:

• Transfers: We are pursuing self-certification under the EU-U.S. Data Privacy Framework (DPF). Until finalized, we rely on Standard Contractual Clauses (SCCs) and the UK IDTA.
• Human Oversight:For leads residing in the UK or EU, we maintain a “human-in-the-loop” workflow where all outputs are pushed as drafts for review to satisfy Article 22 of the UK/EU GDPR.

• Independent Recourse: Unresolved complaints will be referred to BBB National Programs in the United States.
• Material Changes: We will notify users of material policy changes 30 days prior to the effective date.