Privacy Policy.
Plain language about the data we collect on this website and in the COGScontrol platform, why we collect it, and the choices you have.
Effective date · October 29, 2026
This Privacy Policy describes how COGScontrol ("COGScontrol", "we", "us") collects, uses, and shares information when you visit www.cogscontrol.ai (the "Site") or use the COGScontrol AI Value Management platform at app.cogscontrol.ai (the "Service").
Information we collect
Information you provide
- Contact and scheduling details — if you request a demo, we collect your name, email address, and any details you share, processed through our scheduling provider (Calendly).
- Account information — if you create a Service account: name, work email, organization, and authentication credentials.
- Provider connection data — the Service ingests cost and usage data from AI and cloud providers you connect (e.g. OpenAI, Anthropic, AWS, Azure, Google Cloud) and business metrics you import. Provider credentials are encrypted at rest; see our Security overview.
Information collected automatically
- Usage analytics — we use analytics tools (Microsoft Clarity, and Google Analytics where enabled) to understand how visitors use the Site: pages viewed, referring site, approximate location, device and browser type, and interaction patterns. These tools may set cookies or similar identifiers.
- Server logs — our hosting provider (Cloudflare) processes IP addresses and request metadata to serve and secure the Site.
How we use information
- To provide, operate, and improve the Site and the Service.
- To respond to demo requests and other inquiries.
- To understand Site usage and improve content and performance.
- To secure our systems, prevent abuse, and comply with legal obligations.
We do not sell personal information, and we do not use customer cost or business-metric data for any purpose other than providing the Service to that customer.
How we share information
We share information only with service providers who process it on our behalf — hosting (Cloudflare), analytics (Microsoft Clarity, Google Analytics), scheduling (Calendly), and payment processing (Stripe, for paid Service plans) — under terms that limit their use of it; with professional advisers; or where required by law. Customer data in the Service is isolated at the organization level.
AI assistant connectors
If you connect an AI assistant such as Claude to your COGScontrol account, the assistant sends COGScontrol a request each time it looks something up for you (for example, the cost by project for a month). COGScontrol answers from your organization's data, limited to what your role allows, and the connector cannot change any data or setting. We receive only the request itself, never your conversation with the assistant, its memory or your files. For each request we keep an operational record (which lookup was made, for which organization, when, whether it succeeded and how long it took) for 30 days, and request metadata (such as time, address and response status, without content) for 90 days. We never keep the figures returned or your sign-in token. When an administrator turns the connector off or on, or pauses an organization's access, we keep a record of who made the change and when for 365 days. The assistant itself is operated by its provider under that provider's own terms and privacy policy.
Cookies and analytics choices
You can control cookies through your browser settings. Microsoft Clarity's practices are described in Microsoft's privacy statement, and Google Analytics offers an opt-out browser add-on.
Data retention
We retain personal information for as long as needed for the purposes above. Service data is retained per your plan's data-retention terms and deleted or anonymized after account closure, subject to legal requirements.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law (including GDPR and CCPA/CPRA where they apply).
Security
We protect information with encryption in transit (TLS 1.3) and at rest (AES-256), access controls, and audit logging. Read more in our Security overview.
Children
The Site and Service are intended for business use and not directed to children under 16. We do not knowingly collect information from children.
Changes to this policy
We will post any changes on this page and update the date above. Material changes to how we handle Service data will be communicated to account owners.
Contact
COGScontrol · San Francisco, CA · [email protected]