Legal
Privacy Policy
Effective February 11, 2026
Information We Collect
We collect the following types of information:
- Account Information:Email address, username, and hashed password when you create an account.
- Brain Content:Engrams (knowledge entries), synapses (connections), and associated metadata that you or your AI agents store in Cog.
- Usage Data:API request counts, token usage, and operational metrics to maintain and improve the Service.
How We Use Information
We use your information to:
- Provide and maintain the Service
- Authenticate your account and API requests
- Store and retrieve your knowledge graphs as requested
- Monitor usage for billing, rate limiting, and abuse prevention
- Send essential service communications (account confirmations, security alerts)
- Improve the Service based on aggregate usage patterns
Data Storage & Security
Your data is stored in encrypted databases hosted on secure infrastructure. We use industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), and hashed API keys (SHA-256).
While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your account data and brain content for as long as your account is active. Short-term memories in Cog are automatically cleaned up after 24 hours unless reinforced. If you delete your account, we will delete your data within a reasonable timeframe.
Third-Party Services
We use third-party services for hosting and infrastructure. We do not sell your data to third parties. We may share limited data with service providers who assist in operating the Service, subject to confidentiality obligations:
- Hosting:Cloud infrastructure for running the Service
- Email Delivery:Transactional email for account confirmations and invites
- AI Providers:Embedding models for semantic search (we send engram text for vectorization)
Your Rights
You have the right to:
- Access:View all data stored in your brains through the Service interface or API
- Export:Retrieve your data through the MCP API
- Delete:Delete individual engrams, entire brains, or your account
- Correct:Update your account information and brain content at any time
Cookies
Cog uses only essential session cookies required for authentication and security. We do not use tracking cookies, advertising cookies, or third-party analytics.
Children’s Privacy
The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the “Effective” date. Continued use of the Service after changes constitutes acceptance of the updated policy.
Contact
If you have questions about this Privacy Policy or your data, please contact us at support@trycog.ai.