Who we are

Cogmates ("we", "us") is the data controller for personal data we collect when you use the Cogmates website, platform and paid plans. Contact us any time at sales@cogmates.com.

What we collect and why

Account data (name, email, password hash, sign-in method): to create and secure your account.
Usage data (which pages, which AI generations, which features): to operate the service, enforce plan limits (1 / 20 / 90 generations per cycle), and improve the product.
Content you submit (assessment inputs, ROI inputs, data-quality uploads, saved reports): to generate the results you asked for and, on the Transformation Leader plan, to persist them in your workspace.
Device & technical data (IP address, browser, device type, time-zone): for security, fraud prevention and basic analytics.
Support messages: to answer your questions.
Billing data: collected and stored by Paddle (our Merchant of Record), not by us. We receive only the minimum needed to confirm your plan (customer ID, plan, status, country for tax).

Legal basis

We rely on contract performance to deliver the service you've signed up for, legitimate interests for security, fraud prevention and product improvement, legal obligation for tax and accounting records, and consent for optional marketing emails (you can opt out any time).

Who we share data with

Paddle: Merchant of Record. Handles checkout, payments, subscription management, tax compliance and invoicing.
Hosting & infrastructure providers: to run the platform (compute, database, storage, email delivery).
AI model providers: your assessment / ROI / data-quality inputs are sent to AI providers via our gateway solely to generate your result. They don't train on your data.
Professional advisers (legal, accounting): only when needed.
Authorities: only when required by law.

How long we keep it

We keep account and usage data while your account is active and for a reasonable period afterwards to handle disputes, support, and legal obligations. Saved reports persist as long as your Transformation Leader subscription is active; you can delete them any time from My Workspace. We delete or anonymise data we no longer need.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, withdraw consent, or object to processing. To exercise any of these, email sales@cogmates.com. UK/EEA users can also lodge a complaint with their local supervisory authority.

Security

We use industry-standard technical and organisational measures : encryption in transit, role-based access, row-level security on our database, and least-privilege keys for third-party integrations.

International transfers

Some of our service providers are located outside your country. Where data leaves the UK / EEA we rely on adequacy decisions or Standard Contractual Clauses as the safeguard.

Cookies

We use only essential cookies for sign-in and session security, and a small amount of first-party analytics. We don't run third-party advertising cookies.

AI generated outputs and probabilistic findings

Cogmates uses AI models to produce assessments, scores, reports, roadmaps, ROI estimates and product intelligence. The following applies to every AI generated output on the platform:

Probabilistic, not definitive. All findings are estimates derived from the inputs you provide and industry benchmarks. They are directional decision support, not guarantees, forecasts or commitments of any business outcome.
Not professional advice. AI outputs do not constitute financial, legal, tax, engineering or professional advice and must not be relied upon as such.
Accuracy depends on your inputs. Incomplete, stale or inaccurate data will produce misleading results. You are responsible for the quality and completeness of what you submit.
No ownership of outcomes. Cogmates does not own, underwrite or accept responsibility for any outcome or result produced by or derived from its AI outputs, including savings, revenue uplift, payback periods, readiness scores, maturity stages or transformation results.
Independent validation required. You are responsible for verifying any AI output before making investment, operational or strategic decisions based on it.

Changes

If we make a material change to this notice we'll update the "last updated" date and notify you in-app or by email before it takes effect.

Privacy Notice