Privacy Policy

This Privacy Policy applies to information processed through https://cogerphere.com and other Cogerphere-operated websites, applications, products, and services that link to this Privacy Policy, except where a separate privacy notice is provided.

This policy does not cover third-party products or services that Cogerphere does not control. Where you follow a link to a third-party service — including model providers, code hosts, or product subdomains operated under separate terms — that party's privacy notice applies.

Cogerphere AI Labs is an AI research and product company working on small language models, local AI systems, efficient inference technologies, research tools, and AI products.

Data Controller / Data Fiduciary:

[LEGAL ENTITY NAME — insert the exact registered legal entity that owns/operates Cogerphere; do not assume it is “Cogerphere AI Labs”]

Address:

[REGISTERED ADDRESS, STATE / COUNTRY, COMPANY REGISTRATION DETAILS IF APPROPRIATE]

Privacy contact: support@cogerphere.com
Research privacy/contact: research@cogerphere.com

Where relevant under applicable law, Cogerphere acts as a controller (data fiduciary) for the personal information described in this policy. The visible public brand remains “Cogerphere AI Labs,” but the contracting entity is the registered legal entity identified above.

This policy applies to:

• website visitors;
• people contacting Cogerphere (including through our contact form and email);
• research collaborators;
• product users;
• account holders, where accounts are offered;
• beta users;
• people submitting forms;
• applicants, where the relevant privacy notice applies; and
• people interacting with Cogerphere online services.

Individual products may provide additional notices, documentation, or in-product settings that supplement this policy where data flows are materially different. Where a product-specific notice conflicts with this policy for that product, the product-specific notice controls for that product.

We collect information in the categories below. We collect only what is reasonably necessary for the purposes described in Section 10.

A. Identity and contact information — for example, name, email address, username, organization, job title, and profile information you choose to share.

B. Account information — for example, account identifiers, authentication information, preferences, and account settings, where accounts are offered. We never store passwords in plaintext.

C. Communications — for example, contact-form submissions, support requests, research inquiries, feedback, emails, and other messages you send to Cogerphere.

D. Product data — depending on the product you use, this may include documents, files, projects, prompts, AI interactions, generated outputs, workspace settings, saved content, and usage activity. Only the categories actually collected by the relevant product are processed; see Sections 8 and 9.

E. Technical and usage information — for example, IP address, browser type, device type, operating system, approximate location derived from IP address, referrer, pages visited, timestamps, interaction data, and crash or diagnostic information. Only fields actually collected by our infrastructure and analytics are processed; see Section 5.

When you interact with our websites, our servers and analytics tooling may automatically receive technical information, including IP address, browser type, device information, operating system, pages visited, approximate location derived from IP address, referring URL, date and time of access, and diagnostic information.

We do not collect exact geolocation through this website. If any product collects precise location in the future, it will be described in the applicable product notice and collected only with an appropriate legal basis or permission.

We use only the cookies and similar technologies necessary to operate this website and understand aggregated usage. See our Cookie Policy for details, including the categories below as they apply:

• strictly necessary cookies;
• authentication/session cookies, where accounts are offered;
• security cookies;
• preferences;
• analytics and performance measurement.

Our website analytics are provided by Vercel Analytics, which is designed to operate without advertising cookies. Cogerphere does not use third-party advertising cookies on this website. We do not use cross-site tracking pixels, social embeds that track you, or A/B-testing trackers on this website as of the date above. If that changes, we will update our Cookie Policy first.

Where consent is required under applicable law before setting non-essential cookies, we will implement a consent mechanism offering accept, reject, and preferences choices — rather than relying on policy wording alone — and our technical behaviour will match your selection. Because this website currently sets no non-essential cookies that require prior consent, no consent banner is displayed.

When you contact us, submit a form, sign up for an account, request research collaboration, apply for opportunities, or otherwise communicate with us, we may collect the information you choose to provide.

Please do not submit sensitive personal information (such as government identifiers, financial credentials, or health data) unless we specifically ask for it to provide a service you requested. Never send passwords or authentication secrets by email.

Depending on the Cogerphere product you use, we may process information necessary to provide the product, maintain your account, secure our services, troubleshoot problems, and improve reliability.

Different Cogerphere products may process different categories of information. Product-specific notices, documentation, or settings may provide additional information. This policy describes the general practices for Cogerphere-operated services; products hosted on separate subdomains (for example, Openbentt, Cobentt, or ChillarOps) or distributed as local software may process data differently — including locally on your device — as described in their own notices and documentation.

When you use an AI-enabled Cogerphere product, the service may process prompts, instructions, uploaded files, documents, text, code, generated outputs, or other content you choose to submit, as necessary to provide the requested functionality.

Depending on the product, configuration, and model provider involved, submitted content may be processed locally on your device or transmitted to Cogerphere-operated infrastructure or third-party service providers used to provide the requested functionality.

Whether and how submitted content is retained or used may vary by product and configuration and will be described in the applicable product documentation or notice. We make no global promise that data never leaves your device, that prompts are never logged, or that content is never retained — the applicable product notice governs.

[INCLUDE ONLY AFTER TECHNICAL + CONTRACTUAL VERIFICATION: “Unless expressly stated otherwise for a specific service and with an appropriate legal basis or permission, Cogerphere does not use customer-submitted content to train Cogerphere's general-purpose models.” Confirm model-provider agreements and infrastructure logging before publishing this sentence.]

You are responsible for ensuring you have the rights to submit any content you provide, and for not submitting content you do not wish to have processed as described in the applicable notice.

We use personal data for purposes including:

• providing and operating our services;
• creating and managing accounts, where offered;
• responding to inquiries and providing support;
• operating products and securing our services;
• security and fraud prevention, debugging, and improving reliability;
• understanding aggregated product usage;
• research and development;
• communicating important service changes;
• sending marketing communications where permitted by law;
• complying with legal obligations;
• establishing or defending legal claims; and
• protecting rights, safety, and property.

Where laws such as the EU/UK General Data Protection Regulation (GDPR) apply, we process personal data only where we have a valid legal basis. Depending on context, we may rely on:

• your consent;
• performance of a contract, or steps before entering into a contract;
• our legitimate interests (or those of a third party) where permitted by law — for example, operating and securing our services;
• compliance with legal obligations; or
• protection of vital interests, where applicable.

We do not claim legitimate interests for every processing activity; the applicable basis depends on the context and will be identified where required. For India, processing is described in a manner consistent with the Digital Personal Data Protection (DPDP) Act requirements around consent, notice, and withdrawal, and our product flows are designed to match this policy.

We do not sell personal information as a business model.

We may share personal data with categories of recipients including:

• cloud hosting providers;
• database and storage providers;
• authentication providers, where accounts are offered;
• analytics providers;
• email and form-handling providers;
• customer support tooling providers;
• AI/model providers used to provide requested functionality;
• security providers;
• professional advisers, including legal and accounting providers;
• authorities, where legally required; and
• transaction or acquisition counterparties, where legally permitted.

We name only providers we actually use; see our subprocessors page. We maintain an internal subprocessor list and require appropriate contractual protections where processor relationships apply.

Service providers acting as processors process personal data only on our documented instructions and subject to appropriate data-processing terms. See https://cogerphere.com/subprocessors for the provider, service, purpose, data categories, location, and transfer mechanism where applicable. We publish no fabricated providers: that page lists only vendors we actually use.

Cogerphere may use service providers located in countries other than your own. For example, contact-form submissions through this website are transmitted to our form-handling provider's infrastructure (see subprocessors), and analytics data may be processed outside your country. Where required by applicable law, we use appropriate safeguards or other lawful mechanisms for international transfers.

We do not promise that all data stays in India, and we do not promise EU data localisation, unless such measures are actually implemented and described in an applicable product notice.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing services, maintaining business and security records, resolving disputes, enforcing agreements, and complying with legal obligations.

Where a specific retention period is required or can reasonably be defined, Cogerphere will apply that period or the criteria used to determine it. Current defined practices for this website:

• Contact-form submissions (including via our form-handling provider): retained for [RETENTION PERIOD TO BE CONFIRMED — e.g. 24 months from submission, then deleted or anonymised].
• Support correspondence: retained for as long as reasonably necessary to resolve the matter and maintain business records, and no longer than [RETENTION PERIOD TO BE CONFIRMED].
• Aggregated analytics: retained in aggregated or anonymised form; raw event-level data (if any) retained no longer than [RETENTION PERIOD TO BE CONFIRMED WITH ANALYTICS PROVIDER SETTINGS].

[PRODUCT RETENTION SCHEDULES TO BE ADDED: for each of Openbentt, Cobentt, ChillarOps, Meridian-hosted demos, and any account systems — what is stored, where, and for how long; include deletion/anonymisation method.]

We maintain technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, and destruction.

Safeguards currently in place for this website include [LIST ONLY MEASURES ACTUALLY IMPLEMENTED — e.g. TLS encryption in transit; least-privilege access to form inboxes; secrets kept out of client code; dependency updates — delete any item not true]. We do not list security measures that do not actually exist.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Cogerphere's services are not directed to children under 18 unless a product expressly states otherwise.

If we knowingly need to process personal data of a child in circumstances where applicable law requires verified parental or guardian consent (including under India's DPDP framework, which defines a child as an individual under 18), we will take the measures required by applicable law before processing that data for the relevant purpose.

Do not knowingly submit children's personal information to Cogerphere unless the applicable service expressly permits it. If you believe a child has provided us personal data without required consent, contact support@cogerphere.com and we will take appropriate steps.

Depending on applicable law, you may have rights including access to your data, information about processing, correction, deletion or erasure, withdrawal of consent, restriction, objection, portability where applicable, opt-out rights where applicable, marketing preference controls, and complaint or grievance rights.

Rights vary by jurisdiction, and we provide the rights that apply to you under the law applicable to our processing of your data. To exercise a right, see Section 29. We will verify your identity as appropriate before disclosing or modifying personal information.

Where India's Digital Personal Data Protection Act applies, Cogerphere provides the applicable rights and mechanisms required by the Act and its Rules, including the rights of Data Principals to access, correct, erase, and withdraw consent, and to seek grievance redressal.

Privacy/grievance contact: support@cogerphere.com.

[IF A DESIGNATED PRIVACY/GRIEVANCE OFFICER IS APPOINTED, REPLACE WITH LEGALLY REQUIRED DETAILS: NAME, ROLE, EMAIL, ADDRESS IF REQUIRED. Do not state that an officer or DPO exists unless one has actually been appointed.]

If you are located in the European Economic Area or United Kingdom and applicable data-protection law applies to Cogerphere's processing of your personal data, you may have additional rights, including rights to access, correction, deletion, restriction, objection, portability, and withdrawal of consent where processing relies on consent.

Where applicable, you may lodge a complaint with your local data protection supervisory authority. We have not appointed an EU/UK representative or Data Protection Officer; if that becomes legally required, we will arrange it and update this policy.

If Cogerphere is subject to applicable U.S. state privacy laws, including the California Consumer Privacy Act as amended, eligible residents may have additional rights. Depending on the law and Cogerphere's circumstances, these may include the right to know, the right to delete, the right to correct, the right to opt out of sale or sharing where applicable, the right to limit certain uses of sensitive personal information where applicable, and the right to non-discrimination.

We do not sell personal information as a business model. We provide no “Do Not Sell or Share” control on this website because we do not engage in sales or sharing that would trigger it; if our practices change so that such a mechanism is required, we will add it.

Where processing is based on consent, you may withdraw that consent where permitted by applicable law, including by contacting support@cogerphere.com.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Where the DPDP Act applies, withdrawing consent is designed to be no materially harder than giving it.

We may send product, research, company, or marketing communications where permitted by law. Where required, we will provide appropriate consent or opt-out mechanisms, and every marketing email will include a way to unsubscribe.

Transactional or service-related messages (for example, responses to your inquiries) may continue where reasonably necessary to provide the requested service or fulfil legal obligations.

Cogerphere develops and operates AI systems. AI-generated outputs may be inaccurate, incomplete, outdated, biased, or unsuitable for a particular purpose. This applies to Cobentt, Meridian, research tools, security tools, and other Cogerphere AI systems.

Users are responsible for reviewing outputs before relying on them. Unless expressly stated otherwise, Cogerphere's AI outputs are not professional advice, including legal, medical, financial, cybersecurity, or other professional advice. If an output could materially affect a person, organisation, system, or important decision, independently verify it before relying on it.

Cogerphere may link to third-party websites, repositories, model providers, services, or integrations (for example, GitHub, Hugging Face, Zenodo, social platforms, and product subdomains operating under their own terms). We are not responsible for the privacy practices of third parties we do not control. Please read their privacy policies before providing them information.

In the event of a personal-data incident, Cogerphere will assess the incident and take actions required by applicable law, including notifications to affected individuals, regulators, or other parties where legally required. Our internal workflow covers detection, containment, assessment, and legally required notification; see also our security page.

We may update this Privacy Policy from time to time to reflect changes in our services, processing practices, legal requirements, or business operations. For material changes, we may provide additional notice where required by law. The “Last updated” date at the top shows when this policy was most recently revised; we do not change dates automatically on deployment.

For privacy questions or requests, contact:

support@cogerphere.com
For research-related privacy matters: research@cogerphere.com

To request access to, correction of, deletion of, or information about personal data Cogerphere processes about you — or to withdraw consent or raise a privacy grievance — email support@cogerphere.com with a subject line such as:

• Privacy Request - Access
• Privacy Request - Correction
• Privacy Request - Deletion
• Privacy Request - Consent Withdrawal
• Privacy Request - Other

See also https://cogerphere.com/privacy/requests for request categories and what to include. We verify identity appropriate to the request before disclosing or deleting personal information. Do not send passwords or sensitive authentication secrets by email.