Privacy Policy

Our privacy policy and how we use your data

Last updated: July 2025

1. Information We Collect

When you sign in with Google, we receive your name, email address, and profile picture from Google. We also collect information you provide directly, such as project data, integration configurations, and chat messages with our AI agent.

2. How We Use Your Information

We use your information to provide and improve our automation services, authenticate your identity, communicate with you about your account, and deliver AI-powered workflows you configure. We do not sell your personal data.

3. Third-Party Services

Cossist integrates with third-party services (e.g. Google Drive, Gmail, Jira) that you choose to connect. These integrations operate under your authorization and the respective third-party privacy policies. We store OAuth tokens securely and only use them to perform the automations you configure.

4. Data Storage & Security

Your data is stored on Cloudflare Workers (D1, R2, Durable Objects) and Supabase. We use encryption in transit and at rest where supported by our infrastructure providers. Authentication is handled via Supabase Auth with JWT-based session management.

5. Data Retention & Deletion

We retain your data as long as your account is active. You may request deletion of your account and all associated data by contacting us. Upon deletion, your data is removed from all production systems within 30 days.

6. Contact

If you have questions about this privacy policy, contact us at hello@cossist.ai.