We may collect the following types of personal data, depending on your interaction with us:

We may also derive or infer additional information (e.g. usage patterns, preferred settings).

We use your personal data for the following purposes:

• To provide, maintain, improve, and operate our Services
• To verify your identity, manage user accounts, and authenticate logins
• To process payments, manage billing, subscriptions, and refunds
• To communicate with you (email newsletters, announcements, support)
• To analyze usage, detect anomalies, understand trends, and optimize performance
• To personalize content, features, and recommendations
• To enforce our Terms of Use, prevent fraud or misuse, and protect security
• To comply with legal obligations and respond to lawful requests
• For internal research and development purposes

We will always strive to limit usage to what is necessary for these purposes.

Where applicable under European data protection law, our legal bases include:

• Consent — when you explicitly opt-in (e.g. newsletters, cookies)
• Contract / Performance of a contract — to deliver Services you request
• Legitimate interests — for analytics, fraud detection, site security, improving Services (balanced with your rights)
• Legal obligation — where required by law
• Vital interests — in rare cases such as emergencies

We and our partners use cookies and similar technologies (e.g. web beacons, local storage) to:

• Remember your preferences and settings
• Provide analytics, usage statistics, and performance insights
• Serve targeted or contextual advertising (if relevant)
• Enable certain features (e.g. "remember me", auto-login)

You can manage or disable cookies via your browser or device settings, but note that disabling some cookies may reduce functionality or degrade your experience.

We may share your personal data under the following circumstances:

• With service providers / subprocessors — e.g. hosting, payment processors, analytics, customer support — under contract with confidentiality and data protection obligations
• Third-party APIs / integrations — if you connect third-party services to your account (you control what is shared)
• Aggregated / anonymized data — which cannot reasonably identify individuals
• Business transfers — in context of mergers, acquisitions, or sale of assets (with protections)
• Legal or regulatory requests — when required by law, court order, or to enforce rights
• To protect rights & safety — e.g. to prevent fraud, abuse, or security violations

We will not sell your personal information to third parties.

Depending on your jurisdiction, you may have the following rights:

• Right to access your personal data
• Right to rectify / correct inaccurate or incomplete data
• Right to delete your data (right to be forgotten), subject to legal limits
• Right to restrict or object to certain processing
• Right to data portability
• Right to withdraw consent (for consent-based processing)
• Right to lodge a complaint with a supervisory authority

You may exercise these rights by contacting us at emrebenian@cogniaai.com. We may request proof of identity before fulfilling certain requests.

You may also: Unsubscribe from marketing emails, disable cookies and trackers (via browser settings), delete or deactivate your account (subject to consequences for access).

We take reasonable technical, administrative, and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit (e.g. TLS / HTTPS)
• Encryption or hashing of stored sensitive data (e.g. passwords)
• Access controls, least privilege, internal audits
• Regular security assessments, vulnerability scans, updates
• Incident response procedures and breach notification

While we strive for strong security, no system is perfect. In case of a data breach, we will follow legal obligations to notify affected users and authorities.