Legal
Privacy Policy & Cookies
Last updated: August 30, 2026
This Privacy Policy explains how Cortex Engines ("we", "us", or "our") collects, uses, stores, and protects information when you use cortexengines.com, including ASK and CHECK. By using our platform, you agree to the practices described in this policy.
1. Information We Collect
Account information
When you create an account, we collect your email address and, where applicable, your name. If you sign in via Google OAuth, we receive your email and profile name from Google.
Usage data
We collect information about how you interact with the platform, including ASK and CHECK operations, reports generated, and PDF exports created. This data is used to enforce promotional allowances and credit consumption, operate the service, and improve it.
Content you submit
When you use ASK or CHECK, we process the question, claim, document text, evidence, and context you provide to generate the requested report. Saved results may be associated with your account for report history.
Payment and billing data
If you purchase Cortex Analysis Credits or subscribe to a plan, payment is processed by Stripe. We do not store your full credit card details. We receive and store relevant purchase, subscription status, plan tier, and subscription period information.
Technical data
We may collect IP addresses, browser type, device information, and access timestamps as part of standard server logging and security monitoring.
2. How We Use Your Data
We use the information we collect to provide and operate the platform, authenticate your identity, enforce promotional allowances and credit consumption, store your report history, process purchases and subscriptions, send transactional communications, monitor platform security, and improve the platform based on aggregate usage patterns. We do not sell your personal data to third parties. We do not use your submitted documents or query content to train AI models.
3. Cookies and Tracking
Essential cookies
Required for the platform to function. These include authentication session cookies managed by Supabase that keep you logged in across page loads. These cannot be disabled without breaking core functionality.
Authentication cookies
Set by Supabase Auth when you sign in. These are secure, HTTP-only cookies used to maintain your authenticated session. They expire when your session ends or when you sign out.
Payment provider cookies
When you interact with Stripe for purchases or subscription management, Stripe may set cookies on its secure checkout pages. These are governed by Stripe's privacy policy.
Analytics cookies
We may use privacy-respecting analytics tools to understand aggregate platform usage. Where analytics are used, we do not collect personally identifiable information through analytics.
4. Third-Party Services
Cortex Engines integrates with: Supabase (authentication, database, and session management), Stripe (purchase and subscription payment processing), OpenAI and Google Gemini (configured AI model roles for research and verification), Tavily (live web retrieval), Vercel (frontend hosting and edge delivery), and Railway (backend API hosting). Content you submit for research or verification is transmitted to the configured AI and retrieval providers needed to process your request. We do not control how these providers handle data at the model level, though their API products include commitments regarding data use.
5. Data Retention
We retain your account information for as long as your account is active. Verification reports saved to your account are retained until you delete them or close your account. Usage tracking records are retained for billing, quota enforcement, and platform improvement purposes. Server logs are retained for a limited period for security monitoring. If you close your account, we will delete your personal information within a reasonable timeframe, except where retention is required by law.
6. Your Rights
Depending on your jurisdiction, you may have the right to access the personal data we hold about you, correct inaccurate personal data, request deletion of your personal data, withdraw consent where processing is based on consent, data portability where applicable, and to lodge a complaint with a supervisory authority. To exercise any of these rights, please contact us at support@cortexengines.com.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. These include encrypted data transmission (HTTPS), secure authentication via Supabase, and access controls on our backend systems. No system is completely secure. We encourage you to use a strong password and sign out of your account when using shared devices.
8. Children's Privacy
Cortex Engines is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.
10. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: support@cortexengines.com — cortexengines.com