LEGAL
Privacy Policy
Last updated: August 3, 2026
1. What we collect
When you create an account, we collect your name, email address, and company name. When you use Cortez AI, we store the agents you build, the documents you upload for retrieval, your conversation history, and usage data such as token counts, latency, and error rates.
2. Connected accounts
If you connect Gmail, Google Drive, Notion, or Slack, we store an access token for that connection and access only what you've explicitly granted permission for — read access, send access, or both, set per agent. We don't read or act on anything beyond what an agent is granted.
3. How we use your data
Your documents and conversations are used solely to power your own agents — to generate embeddings, retrieve relevant context, and produce replies. We do not use your data to train shared models, and we don't sell it to third parties.
4. Third-party processors
To generate replies and embeddings, your messages and document text may be sent to the AI provider your agent is configured to use (OpenAI, Anthropic, Google, Groq, or Hugging Face's inference API). Payments made via Gumroad are processed by Gumroad; UPI payments are verified manually and no card data is ever stored by us.
5. Data retention
We keep your data for as long as your account is active. You can delete individual agents, documents, or connectors at any time from your dashboard, or request full account deletion.
6. Your rights
You can access, export, correct, or delete your data at any time. Disconnecting a connector immediately revokes our access to that account.
7. Contact
Questions about this policy can be sent through the contact details on our About page.
This is a template policy and should be reviewed by a qualified lawyer before you rely on it for a live product.