loading workspace…
Cognoverge collects the least amount of data needed to run the platform and to deliver the audit you asked for. No surprises, no model training on your data, no third-party sale.
What we collect: the firm name and work email you submit when you request an audit; account data when you create a workspace; usage telemetry on the platform; the public-facing content of your firm site we crawl to compute visibility scores.
What we never collect: privileged client matter content, internal documents from your firm intranet, content behind authentication on your site.
What we never do: sell or rent your data to third parties; train third-party models on your data; share workspace data across competing-firm engagements.
robots.txt and rate-limit conservatively.We share data with sub-processors strictly necessary to operate the service — see /trust for the current list, which includes our cloud host (AWS), our model providers when explicitly enabled, our email provider, our error-monitoring service, and our payment processor. Each is bound by a data processing agreement.
Workspaces are strictly segregated. Where the same data may concern two firms (e.g., shared public publications), the visibility readings and reports are computed per-workspace and never cross-shared. Where ethical walls between competing firms apply, infrastructure is fully isolated; see /compliance.
To exercise any right, email privacy@cognoverge.com. We respond within 30 days.
Workspace data is retained for the duration of your contract and 30 days after termination, then deleted unless we're legally required to retain it. Audit submission data not converted to a workspace is deleted within 6 months. Backups are retained for 35 days then rotated.
See /security for our security posture, SOC 2 Type II status, encryption details, and incident-response process. In short: encryption in transit (TLS 1.3) and at rest (AES-256), least-privilege access, audited admin actions, 24/7 monitoring.
For customers in the EU and UK we offer EU and UK data residency on Counsel and Enterprise. Where we transfer data outside the EEA we rely on the EU's Standard Contractual Clauses and the EU-US Data Privacy Framework. Our DPF certification is at /trust.
If we materially change this policy we'll notify you by email and post the change with the date above. Continued use of the service after the effective date constitutes acceptance.
Data Protection Officer — dpo@cognoverge.com. EU representative — Cognoverge EU Sàrl, 23 Boulevard Royal, L-2449 Luxembourg. UK representative — Cognoverge UK Ltd., 1 Stephen Street, London W1T 1AT.