Legal
Privacy Policy & Cookies
Last updated: May 10, 2026
This Privacy Policy explains how Cortex Engines ("we", "us", or "our") collects, uses, stores, and protects information when you use cortexengines.com and its associated products, including Cortex Verify. By using our platform, you agree to the practices described in this policy.
1. Information We Collect
Account information
When you create an account, we collect your email address and, where applicable, your name. If you sign in via Google OAuth, we receive your email and profile name from Google.
Usage data
We collect information about how you interact with the platform, including queries submitted, verification runs executed, reports generated, and PDF exports created. This data is used to enforce usage quotas and improve the service.
Content you submit
When you use Cortex Verify, we process the document text, evidence, and context you provide in order to generate verification reports. This content is processed transiently and associated with your account for report history purposes only.
Payment and billing data
If you subscribe to a Pro plan, payment is processed by LemonSqueezy. We do not store your full credit card details. We receive and store your subscription status, plan tier, and subscription period dates.
Technical data
We may collect IP addresses, browser type, device information, and access timestamps as part of standard server logging and security monitoring.
2. How We Use Your Data
We use the information we collect to provide and operate the platform, authenticate your identity, enforce usage quotas, store your report history, process subscription payments, send transactional communications, monitor platform security, and improve the platform based on aggregate usage patterns. We do not sell your personal data to third parties. We do not use your submitted documents or query content to train AI models.
3. Cookies and Tracking
Essential cookies
Required for the platform to function. These include authentication session cookies managed by Supabase that keep you logged in across page loads. These cannot be disabled without breaking core functionality.
Authentication cookies
Set by Supabase Auth when you sign in. These are secure, HTTP-only cookies used to maintain your authenticated session. They expire when your session ends or when you sign out.
Payment provider cookies
When you interact with LemonSqueezy for subscription management, LemonSqueezy may set cookies on their hosted checkout pages. These are governed by LemonSqueezy's own privacy policy.
Analytics cookies
We may use privacy-respecting analytics tools to understand aggregate platform usage. Where analytics are used, we do not collect personally identifiable information through analytics.
4. Third-Party Services
Cortex Engines integrates with: Supabase (authentication, database, session management), LemonSqueezy (subscription payment processing), OpenAI (AI model inference for query processing and claim verification), Tavily (live web search for research queries), Anthropic/Claude (AI synthesis and verdict generation), Vercel (frontend hosting and edge delivery), and Railway (backend API hosting). Content you submit for verification is transmitted to OpenAI and Anthropic APIs for processing. We do not control how these providers handle data at the model level, though both providers have commitments regarding data use on their API products.
5. Data Retention
We retain your account information for as long as your account is active. Verification reports saved to your account are retained until you delete them or close your account. Usage tracking records are retained for billing, quota enforcement, and platform improvement purposes. Server logs are retained for a limited period for security monitoring. If you close your account, we will delete your personal information within a reasonable timeframe, except where retention is required by law.
6. Your Rights
Depending on your jurisdiction, you may have the right to access the personal data we hold about you, correct inaccurate personal data, request deletion of your personal data, withdraw consent where processing is based on consent, data portability where applicable, and to lodge a complaint with a supervisory authority. To exercise any of these rights, please contact us at support@cortexengines.com.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. These include encrypted data transmission (HTTPS), secure authentication via Supabase, and access controls on our backend systems. No system is completely secure. We encourage you to use a strong password and sign out of your account when using shared devices.
8. Children's Privacy
Cortex Engines is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.
10. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: support@cortexengines.com — cortexengines.com