Privacy Policy

1. Information we collect

We may collect:

• Account data: name, email address, phone number, and credentials you provide when registering or updating your profile.
• Practice and company data: information you enter about companies, LLPs, directors, shareholders, partners, documents, and related compliance data necessary to provide the Service.
• Usage and technical data: IP address, browser type, device information, log data, and cookies or similar technologies as described below.
• Communications: messages you send to us (e.g. support requests) and metadata relating to email or in-app notifications where applicable.

2. How we use information

We use the information we collect to:

• Provide, operate, and improve the Service (including AI-assisted features you choose to use).
• Authenticate users, maintain security, and prevent fraud or abuse.
• Send transactional emails (e.g. account verification, password reset, service notices) and, where you opt in or where permitted, product updates.
• Comply with legal obligations and enforce our Terms and Conditions.

3. Legal bases (where applicable)

Depending on your location, we may rely on performance of a contract, legitimate interests (such as securing and improving the Service), consent (where required), or legal obligation as the basis for processing.

4. Service providers and third parties

We may share information with trusted providers who assist us in operating the Service, such as:

• Hosting, authentication, and database services (e.g. Supabase or comparable infrastructure).
• Email delivery services (e.g. for transactional or onboarding emails).
• AI or API providers when you use features that call external models using your own or platform-configured keys.
• Analytics or error monitoring, where used, subject to our instructions.

These parties may process data only as needed to provide their services to us and in line with applicable law and contractual safeguards.

5. Cookies and similar technologies

We use cookies and similar technologies for session management, security, preferences, and to understand how the Service is used. You can control cookies through your browser settings; disabling certain cookies may affect functionality.

6. Data retention

We retain information for as long as your account is active or as needed to provide the Service, comply with law, resolve disputes, and enforce our agreements. Retention periods may vary based on data type and legal requirements.

7. Security

We implement appropriate technical and organisational measures designed to protect your information. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.

8. Your rights

Depending on applicable law, you may have the right to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. You may also have the right to data portability or to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below.

9. International transfers

Your information may be processed in India and other countries where our service providers operate. Where required, we take steps designed to ensure appropriate safeguards apply to such transfers.

10. Children

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy, to the extent permitted by law.

12. Contact

For privacy-related questions or requests, please contact us through the support or contact options provided on the CoSecAI website or within the application.