Privacy Policy, Terms of Service & Data Processing Agreement
Effective April 25, 2026 · Version v1.0-2026-04-25
1. Acceptance
By creating a Cogniver account, signing in, or using any part of the Cogniver platform ("Service"), you confirm that you have read, understood, and agree to be bound by this combined document, which sets out the Privacy Policy, the Terms of Service, and the Data Processing Agreement (collectively the "Terms").
If you do not agree, do not use the Service. Continued use of the Service after the effective date of any updated Terms constitutes acceptance of the updated Terms.
2. Who you are agreeing with
The Service is provided by the entity operating Cogniver (referred to in this document as "Cogniver", "we", "us", or "our"), together with its founders, officers, directors, employees, contractors, agents, advisors, suppliers, and successors (collectively the "Cogniver Parties").
3. What you are agreeing to do
- Provide accurate signup information and keep account credentials confidential.
- Use the Service only for lawful business purposes consistent with the Terms.
- Take responsibility for the actions of every user you invite, provision, or permit to use your organization's workspace, including any data they submit.
- Hold us, our suppliers, and downstream service providers (including Supabase, Vercel, OpenAI, Resend, and any other vendor we engage) harmless to the maximum extent permitted by law for any consequence of your use.
4. Data we collect, store, process, and transmit
You acknowledge and consent that the Service:
- Stores all data you submit (including but not limited to names, email addresses, photographs, identification documents, education credentials, payment information, workflow content, file attachments, organizational structure, and any free-text you enter) in cloud infrastructure operated by Cogniver and its third-party vendors.
- Processes that data using artificial intelligence and machine-learning models, including but not limited to models operated by OpenAI, in order to generate suggestions, draft content, classify inputs, verify documents, and otherwise power the Service's features.
- Transmits relevant portions of the data to and from those third-party AI vendors over the public internet. Once data has been sent to a third-party AI vendor, that vendor's privacy policy and data-handling practices apply in addition to ours.
- Logs usage events, performance metrics, error reports, IP addresses, browser fingerprints, device characteristics, and authentication events to operate, secure, debug, and improve the Service.
- May retain backups, audit logs, and historical snapshots of your data for as long as we deem operationally necessary, including after you cease using the Service.
5. AI processing: express consent
By using the Service, you expressly consent to the use of artificial intelligence on every input you provide. This includes, but is not limited to:
- Sending the textual and visual content of your workflow requests, attachments, identification documents, education credentials, organizational chart, free-text fields, and chat messages to AI models for analysis, extraction, summarization, classification, and suggestion generation.
- Receiving automated suggestions, drafts, classifications, verifications, and decisions produced by AI models.
- The possibility that AI output may be inaccurate, incomplete, biased, hallucinated, offensive, or otherwise unsuitable for any particular purpose. You are solely responsible for reviewing AI output before relying on it.
You acknowledge that AI processing is fundamental to the Service and that you cannot use the Service without consenting to it.
6. Cloud storage: express consent
You acknowledge and consent that all data you submit is stored in cloud infrastructure that is, by design, accessible from anywhere on the internet through authenticated interfaces. You accept all risks associated with cloud storage, including but not limited to: vendor outages, credential compromise, software vulnerabilities, vendor policy changes, lawful access by government authorities in the jurisdictions where the cloud infrastructure operates, and physical or logical loss of stored data.
7. Disclaimer of warranties
The Service is provided "AS IS" and "AS AVAILABLE", without warranty of any kind, express or implied. To the maximum extent permitted by applicable law, the Cogniver Parties disclaim all warranties, including but not limited to: merchantability, fitness for a particular purpose, non-infringement, accuracy, completeness, security, availability, uptime, error-free operation, and that any defect will be corrected.
We make no warranty regarding AI output. AI output may be wrong, made up, or harmful, and you accept the full risk of relying on it.
8. Limitation of liability: full waiver
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE COGNIVER PARTIES BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DAMAGES OF ANY KIND, INCLUDING BUT NOT LIMITED TO: DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE, OR ANY OTHER DAMAGES, LOSS OF PROFITS, LOSS OF REVENUE, LOSS OF GOODWILL, LOSS OF DATA, LOSS OF BUSINESS, BUSINESS INTERRUPTION, COST OF SUBSTITUTE PROCUREMENT, OR ANY OTHER COMMERCIAL OR REPUTATIONAL HARM, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF, OR INABILITY TO USE, THE SERVICE, REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE), AND EVEN IF THE COGNIVER PARTIES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
This waiver applies to (without limitation): security incidents and data breaches; loss, corruption, or unauthorized disclosure of your data or your customers' data; AI output that is inaccurate, harmful, biased, offensive, or unlawful; failure of integrations with third- party services; downtime, performance degradation, or scheduled or unscheduled outages; loss of access during credential or session termination; consequences of any automated decision the Service makes on your behalf; consequences of any user action taken by anyone using your organization's workspace; and any other event whatsoever connected to the Service.
Where applicable law does not permit a complete exclusion of liability, the aggregate liability of the Cogniver Parties to you for all claims arising under or relating to the Terms or the Service shall not exceed the lesser of (a) the total amount actually paid by you to Cogniver for the Service in the three (3) months immediately preceding the event giving rise to the claim, or (b) one hundred U.S. dollars (US$100.00).
9. Indemnification: you indemnify us
You agree to indemnify, defend, and hold harmless the Cogniver Parties from and against any and all claims, demands, actions, suits, proceedings, losses, liabilities, damages, settlements, judgments, fines, penalties, costs, and expenses (including reasonable attorneys' fees and court costs) arising out of or relating to: (a) your use of the Service; (b) any content you, your users, or anyone in your organization submits, uploads, transmits, or stores through the Service; (c) any breach by you or your users of the Terms; (d) any misuse of the Service by you or anyone using your organization's workspace; (e) any violation by you or your users of any law, regulation, or right of any third party; and (f) any consequence of AI output that you, your users, or downstream recipients act upon.
10. Acceptable use
You will not, and will not allow any user to:
- Upload illegal content, content that infringes intellectual property, or content prohibited by applicable law.
- Attempt to bypass security controls, rate limits, quota gates, or any other technical protection measure.
- Probe, scan, or test the vulnerability of the Service or its underlying infrastructure without our prior written consent.
- Reverse-engineer, decompile, or otherwise attempt to derive the source code of any part of the Service.
- Resell, sublicense, or commercialize the Service except as expressly permitted by a separate written agreement with us.
- Use the Service to build a competing product.
- Submit content intended to manipulate, prompt-inject, or otherwise compromise our AI systems.
Violation of this section is grounds for immediate termination of your account and any associated workspace, without refund.
11. Termination
We may suspend or terminate your access to the Service at any time, for any reason or for no reason, with or without notice. Upon termination, your right to use the Service immediately ceases. We may, but are not required to, retain or delete your data; you are solely responsible for exporting any data you wish to keep prior to termination.
12. Modifications to the Terms
We may modify the Terms at any time by posting the updated text at this URL and bumping the version identifier. Your continued use of the Service after the effective date of any modification constitutes binding acceptance of the modified Terms. We are under no obligation to notify you of changes individually.
13. Governing law and disputes
The Terms are governed by the laws of the jurisdiction in which Cogniver is incorporated, without regard to conflict- of-laws principles. Any dispute arising out of or relating to the Terms or the Service shall be resolved exclusively in the courts of that jurisdiction, and you irrevocably consent to that personal jurisdiction and venue.
Class-action waiver: you agree to bring any claim against the Cogniver Parties only in your individual capacity, and not as a plaintiff or class member in any purported class or representative proceeding.
14. Data Processing Agreement (DPA)
This section forms the binding Data Processing Agreement between you (Controller) and Cogniver (Processor) for any personal data you submit to the Service.
14.1 Roles
You are the Controller of personal data submitted to the Service. Cogniver acts as the Processor and processes that data only on documented instructions from you, with the documented instruction being "operate the Service as configured by the Controller".
14.2 Sub-processors
You authorize Cogniver to engage sub-processors to assist in providing the Service. Current sub-processors include (without limitation): Supabase (database, authentication, storage), Vercel (hosting, edge compute), OpenAI (AI processing), Resend (transactional email). We may add or substitute sub-processors at any time without prior notice. By using the Service, you authorize all current and future sub-processors of our choosing.
14.3 Security measures
Cogniver maintains commercially reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, or alteration. We do not warrant that those measures will prevent every incident, and we are not liable for the consequences of any incident, regardless of cause. See Section 8.
14.4 Sub-processor liability is yours
Where data flows through a sub-processor (including but not limited to OpenAI processing your content), the sub- processor's privacy policy and data-handling practices apply in addition to ours. You acknowledge that the Cogniver Parties have no control over those practices and assume no liability for any sub-processor's acts or omissions, including any data loss, breach, misuse, or unauthorized retention by a sub-processor.
14.5 International data transfers
You acknowledge and consent that personal data submitted to the Service may be transferred to, stored in, and processed in any country in which Cogniver or its sub- processors operate, including jurisdictions whose data protection laws may differ from yours and may not provide equivalent protection.
14.6 Data subject requests
You are responsible for handling data subject requests (access, rectification, erasure, portability, objection, etc.) raised by your users. Cogniver will provide reasonable assistance through the data export and account deletion features built into the Service. We are not required to take any action beyond what those features support.
14.7 Audit
You may not audit Cogniver or its sub-processors. Where a regulator with binding authority over Cogniver demands an audit, we will respond as required and bill you for any cost we incur on your behalf.
14.8 Termination
On termination of the Service, Cogniver may delete or retain your personal data at our sole discretion. We are under no obligation to return data; the export feature is available at all times before termination.
14.9 Conflict
In the event of conflict between this DPA and any other part of the Terms, this DPA controls only as to data processing matters; the rest of the Terms (including the limitation of liability and indemnification) remain in full force.
15. Severability and survival
If any provision of the Terms is held unenforceable, the remaining provisions remain in full effect, and the unenforceable provision shall be modified to the minimum extent necessary to render it enforceable while preserving its intent. Sections concerning disclaimer of warranties, limitation of liability, indemnification, and dispute resolution survive termination of the Terms.
16. Entire agreement
The Terms constitute the entire agreement between you and Cogniver concerning the Service and supersede all prior agreements and understandings, whether written or oral. No waiver of any provision will be effective unless in writing and signed by an authorized representative of Cogniver.
17. Contact
Questions about the Terms should be sent to the email address printed at signup. We are not obligated to respond.
Document generated by Cogniver. Version v1.0-2026-04-25, effective April 25, 2026. By using the Service you confirm you have read this document and accept it in full.