Privacy Policy
This policy explains what personal information Cortix Inc. ("Cortix", "we", "us") collects when you use the CortiX sites, apps and connections, how we use it and the choices you have. It repeats the privacy sections of the Cortix Account Terms and Privacy Notice (version 1.2), which every account accepts, and adds how AI chats and connected apps handle your information. If the two ever differ, the Account Terms and Privacy Notice govern.
Who this covers
This policy covers people who visit the CortiX sites, create an account or connect an app to CortiX. You must be at least 16 years old to create an account. Where local law sets a higher age, that age applies.
Information we collect
- Account details: email address, name, account type, role, the hash of your password (never the password itself), whether your email is confirmed and authenticator settings.
- Sign-in records: when you sign in, the browser you use and a shortened network address (the first three parts of an IPv4 address or the first three groups of an IPv6 address).
- Plan and billing records: your plan, subscription status and the customer and subscription references that Stripe gives us.
- Messages and applications you send us through the site.
- App loads: each time the CortiX AI app loads for your account we record the time, the shortened network address, the browser family and the random mark written into that copy, so that we can protect the software and trace copies.
- Traffic records: for security and to run the service we record each request to our server (time, page, result, response time, shortened network address and browser family) and count page views. Page views use a visitor code that changes every day and cannot be used to follow you from day to day. We do not use advertising or tracking cookies.
Cookies
We use one essential cookie that keeps you signed in. It is removed when you sign out or when the sign-in expires. The site does not need any other cookie from us.
How we use it and who sees it
We use this information to run your account, secure the service, provide the plan you chose, protect the CortiX AI software, answer your messages, understand how the site is used in aggregate and meet legal obligations. Cortix staff see it only when their role needs it. Staff access is logged. Service providers that act for us see only what they need: our hosting provider, our email provider and Stripe for payments. We do not sell your personal information and we do not share it for cross-context behavioral advertising.
How long we keep it
Account details are kept while your account exists. Request and page view records are kept for 90 days unless a security investigation needs them longer. Records of app loads are kept for 12 months. Billing records are kept for as long as tax and accounting law requires. Job applications follow the Candidate Privacy Notice.
Your choices and rights
You can update your name, change your password, turn authenticator codes on, sign out other devices, download a copy of your data and delete your account in Account settings. Depending on where you live, you may also have the right to access, correct, delete or receive a copy of your information, to object to or restrict certain processing and to complain to a data protection authority. Write to info@cortixinc.ai for any request; we will verify your identity first.
Security
Passwords are stored as Argon2id hashes, connections use HTTPS and secrets such as authenticator keys are encrypted at rest. No system is completely secure, so we cannot guarantee absolute security. We will tell you about a breach that affects your information where the law requires.
Your chats, files and the AI models
What you type, the files you attach and the context CortiX adds for you, such as project files or memories you chose to keep, are sent to the AI model that writes the answer. The models run at AI providers: Amazon Bedrock (Amazon Web Services) by default, and for some models the model maker's own service, such as Anthropic or OpenAI. Each provider processes this content to produce the answer under its terms for business customers.
- Chats, files and memories are stored on Cortix servers so you can come back to them.
- A chat you delete is hidden at once and removed after 30 days. Deleting your account removes every chat at once.
- A file you add to a temporary chat is read in memory and not stored.
- Each answer records the model used, the amount of text processed and the time, so that plans and allowances can be counted.
Changes to this policy
This page changes when the Account Terms and Privacy Notice change. If a change materially affects you, we will tell you by email or in the site before it takes effect.
Contact
Cortix Inc., Valley Stream, NY. Privacy requests and questions: info@cortixinc.ai. Phone: 816-963-0213.
We verify your identity before we act on a request about your information.