Privacy Policy

Effective September 20, 2026. Cortex is operated by Afferent Signal.

What we collect

• Account details: your email address, your company name, and your password (stored only as a salted hash, never in readable form).
• Review files you upload: for each review we keep the rating, text, title, date and product variant. Any other column in your file (for example reviewer names or emails) is ignored and never stored.
• Analysis results: the personas, labels, retail banners and sell-in lines generated from your reviews.
• Security data: failed-login and email-request counters tied to an email address and IP address, kept briefly to block abuse.

Reviewer privacy

Cortex is built for anonymous consumer review text. We do not collect reviewer identities. Email addresses and phone numbers that appear inside review text are automatically replaced with placeholders, but this is a best-effort safeguard: it cannot recognize every name or personal detail written into free text. Do not upload files that contain sensitive personal information.

Cookies

We set one essential cookie to keep you signed in. We do not use advertising or analytics cookies.

Who processes data for us

• Vercel hosts the application.
• Supabase stores the database.
• Google (Gemini API) analyzes review text when AI analysis is enabled; the review text of your upload is sent to Google for that purpose. Google's own terms govern its handling of that data.
• Resend delivers account emails such as confirmation and password-reset links.

We do not sell your data, and we do not use it to train our own models.

Retention and deletion

We keep your data until you delete it. Deleting a project permanently removes its reviews and personas. You can delete your entire account, including every project, from the Account page at any time. Routine database backups may retain deleted data for a limited period before they expire.

Security

Data is encrypted in transit, passwords are hashed, and each company's data is isolated from every other company's in our systems. No system is perfectly secure, and we cannot guarantee absolute security.

Your choices

You can access, export (CSV) and delete your data yourself from within the app. For anything else, contact us through Afferent Signal's website.

Children

Cortex is a business tool and is not directed to children.

Changes

If we make material changes to this policy we will update the date above and, where appropriate, notify account holders.