Legal

Privacy Policy

What getcog.ai and licence.getcog.ai collect, why, and your rights. We run on the same principle as the product: as little as possible. Last updated 24 September 2026.

  1. 1. Controller

    Grey & Associates is the data controller for this website and the licence API. Contact: hello@getcog.ai.

  2. 2. The headline

    The Free tier of cog collects nothing. It does not phone home. Anything below applies to our websites and, for Pro subscribers, the licence API check-ins — never to your agent's conversations, files, or prompts, which never leave your machine.

  3. 3. What we collect

    • Website. We serve pages over TLS via nginx. Standard server access logs (IP address, user agent, request line, timestamps) are kept for a short period for security and abuse detection only. We set no tracking cookies and load no third-party analytics, ads, or embedded scripts.
    • Pro checkout. When you buy Pro, we send your work email to the licence API, which creates a Stripe customer and checkout session. Stripe processes payment on our behalf (we are the merchant; Stripe is a processor and independent controller for payment data). You never enter your card details on our pages — Stripe's hosted checkout handles that.
    • Licence check-in (Pro only). Your instance contacts licence.getcog.ai periodically to verify its licence and receive licence status. The request contains an instance identifier and the current licence state — not your data, prompts, or credentials.
    • Support & billing emails. If you email us, we keep that correspondence to deal with your query and, for billing, as required by law.

  4. 4. Legal bases (UK GDPR / GDPR)

    • Contract — email and licence records needed to run your Pro subscription.
    • Legitimate interest — server access logs for security, fraud prevention, and basic traffic understanding, balanced against the minimal data involved.

  5. 5. How long we keep it

    • Server access logs: at most 30 days, then deleted or irreversibly anonymised.
    • Subscription records: for the life of the subscription, then retained for as required by tax and accounting law (up to 6 years), after which they are deleted.
    • Support emails: 12 months after the matter is closed.

  6. 6. Who we share it with

    • Stripe — payment processing (processor under our instruction; separate controller for its own card-processing records, per Stripe's terms).
    • DigitalOcean — hosts the website and database (infrastructure processor).
    • Legal authorities — only where required by law, with your notice where lawful to give.
    • We do not sell or share personal data for marketing, and we do not have marketing email at all.

  7. 7. Your rights

    You may request access to, correction of, or deletion of your personal data, and object to or restrict processing, by emailing hello@getcog.ai. We respond within one month. You can also cancel a Pro subscription any time from Manage Pro billing via the Stripe Customer Portal. If you believe we are mishandling your data, you have the right to complain to the Information Commissioner's Office (ICO).

  8. 8. Cookies

    The only persistent storage on this site is a local preference for your theme (light/dark), kept in your browser's localStorage. It never leaves your machine. No other cookies are set.

  9. 9. Changes

    If this policy changes in a way that matters to you, we'll tell you by email at your subscription address before the change takes effect.