Notice at a glance

Cognautic is a business-to-business AI automation agency. We collect information needed to operate this website, measure whether our marketing produces qualified inquiries, respond to requests, provide contracted services, secure our systems, and process billing. We do not sell personal information or use customer data to train public AI models.

This notice covers cognautic.com, its public forms, Cognautic client accounts, and related support interactions. A customer service agreement, integration scope, or selected provider’s terms may add more specific rules for a contracted workflow.

Information we collect

The categories depend on how you use Cognautic:

Public-site activity: page path, sanitized referring URL, campaign parameters, advertising click identifiers, event name, time, anonymous session identifier, browser or device information, and user agent.
Security and delivery records: a one-way hash of the request IP address on first-party conversion receipts, rate-limit data, error context, and records needed to detect abuse or troubleshoot delivery.
Contact and diagnostic forms: name, business name, email, phone when requested, website, message, workflow details, tools, lead volume, operational pressure, timeline, budget range, consent, and attribution attached to the request.
Client and account information: authentication profile, organization membership, role, plan and billing status, activity, support requests, and summaries from connected systems included in the customer’s approved scope.
Payment records: payment-provider customer, checkout, subscription, invoice, and status identifiers. Card entry is handled through the approved payment provider rather than Cognautic’s public forms.
Information from selected providers: only the records and fields needed for an approved integration, support request, or contracted automation.

Please do not put passwords, secret keys, full payment-card data, Social Security numbers, medical records, or other unnecessary sensitive information into a public form.

Analytics and browser storage

Public marketing pages use a first-party analytics layer and Google Analytics 4. The runtime excludes private areas such as the admin, client portal, onboarding, intake, and embedded application routes. Before recording a page URL or referrer, it removes query fields commonly used for tokens, emails, phone numbers, and secrets.

Campaign attribution can remain in local browser storage for up to 90 days.
An analytics session rolls after 30 minutes of inactivity.
A same-site conversion click can remain in session storage for up to five minutes so the destination page can complete Google Analytics delivery without delaying navigation.
A checkout-to-lead association can remain in session storage for up to 30 days, although a browser may clear session storage sooner.
Google Signals and advertising-personalization eligibility are disabled in the public tag configuration.

Google processes Analytics data under its own terms and controls. You can clear site data in your browser or use Google’s browser opt-out controls. Blocking analytics does not prevent you from viewing public pages, though attribution and conversion measurement may be less complete.

How we use information

Respond to inquiries, referrals, corrections, and support requests.
Qualify and scope a requested automation, integration, or growth engagement.
Provide, secure, monitor, maintain, and improve contracted services.
Connect an inquiry to later outcomes so we can measure qualified traffic, leads, customers, and revenue instead of page views alone.
Process checkout, subscriptions, invoices, account access, and service communications.
Detect fraud, spam, unauthorized access, delivery failures, and other misuse.
Meet applicable legal obligations and enforce agreements.

When information is shared

We disclose information to service providers that perform a needed function for us or for a customer-approved build, such as hosting and databases, analytics, communications, payments, authentication, monitoring, and the specific phone, CRM, calendar, or AI provider named in an implementation scope. Providers receive only the access appropriate to that function and are governed by their agreements and settings.

We may also disclose information when reasonably necessary to comply with law, protect people or systems, investigate misuse, enforce an agreement, or complete a merger, financing, acquisition, or asset transfer with appropriate confidentiality controls. We do not sell personal information or share it for cross-context behavioral advertising.

Retention and security

Browser attribution windows are stated above. Server-side lead, conversion, account, billing, and service records are retained for as long as reasonably needed to respond, deliver the service, keep operational and financial records, resolve disputes, enforce agreements, and meet legal or security requirements. The exact period varies by record and customer scope. When information is no longer needed, we delete, de-identify, or restrict it as operationally appropriate.

We use administrative and technical safeguards proportionate to the information and service, including scoped access, authenticated private routes, sanitization, rate limits, protected transport, one-way IP hashing for first-party conversion receipts, and provider-managed payment entry. No internet service can promise absolute security.

Your choices and requests

You can decline optional form fields, clear browser storage, use browser privacy controls, and follow the unsubscribe or opt-out mechanism included with an eligible communication. Depending on where you live and our relationship, you may also have rights to request access, correction, deletion, or a copy of certain personal information, or to object to a particular use.

Submit a request through the contact route or email hello@cognautic.com. We may need to verify identity and authority before fulfilling a request. Some records may be retained when required for security, billing, legal obligations, or an active contract.

Children and processing location

Cognautic is a business service and is not directed to children under 13. We do not knowingly collect personal information from children through the public site. Contact us if you believe a child submitted information so we can review and remove it as appropriate.

Cognautic is based in Florida, United States. Information may be processed in the United States and in other locations where approved service providers operate, subject to the provider and contract controls that apply.

Changes and contact

We update this notice when site behavior, providers, or legal requirements materially change and publish the effective date above. Material changes affecting an active customer may also be communicated through the appropriate account or service channel. Questions can be sent to hello@cognautic.com or through Cognautic’s contact page.