Privacy Policy

1. Introduction

Cogment Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered code intelligence platform ("the Service").

Our Core Privacy Principle: Your code is yours. We process it only to provide our Service, and we never use it to train AI models or share it with third parties without your consent.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Password (encrypted)
• Organization/team information
• Billing information (processed by Stripe)

2.2 Usage Data

We automatically collect:

• Log data (IP address, browser type, operating system)
• Feature usage analytics (which features you use and how often)
• Performance metrics (scan times, file counts)
• Error reports and crash logs

2.3 Code and Project Data

Local Processing: By default, all code analysis happens on your machine. We do not see or store your source code.

Optional Cloud Features: If you enable cloud sync or team features, we may store:

• Metadata about your projects (file names, structure, statistics)
• Semantic embeddings (mathematical representations, not source code)
• Search queries and results
• Team collaboration data

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process your transactions and manage your account
• Analyze usage patterns to improve our Service
• Communicate with you about updates, security, and support
• Detect and prevent fraud or technical issues
• Comply with legal obligations

We do NOT use your code to:

• Train AI models for other users
• Develop competing products
• Share with third parties for their benefit

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your information to third parties except:

4.1 Service Providers

We may share information with trusted third parties who assist us in:

• Payment processing (Stripe)
• Analytics and monitoring (with anonymized data)
• Customer support
• Infrastructure and hosting

4.2 Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

4.3 Team Features

If you use team features, certain information may be shared with your team members as necessary to provide collaboration functionality.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data in transit and at rest is encrypted
• Access Controls: Strict employee access policies
• Monitoring: Continuous security monitoring and auditing
• Compliance: SOC 2 Type II certified
• Local Processing: Your code never leaves your environment by default

6. Your Rights and Choices

You have the following rights regarding your personal information:

6.1 Access and Portability

You can access and export your account data at any time through our dashboard.

6.2 Correction and Deletion

You can update or delete your account information through your profile settings.

6.3 Opt-Out

You can opt out of:

• Marketing communications
• Non-essential analytics
• Optional cloud features

6.4 Account Deletion

You can delete your account at any time. We will remove your personal information within 30 days, except as required for legal or security purposes.

7. Data Retention

We retain your information for as long as necessary to provide the Service:

• Account Data: Until you delete your account
• Usage Analytics: Up to 2 years for service improvement
• Billing Records: 7 years for legal compliance
• Code Metadata: Only while you use cloud features

8. International Data Transfers

Our Service is hosted in the United States. If you access our Service from outside the US, your information may be transferred to, stored, and processed in the US. We ensure appropriate safeguards are in place for international transfers.

9. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We will also send you an email notification for significant changes.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: