Privacy Policy

Cogni is a product of Transparent AI, Inc., doing business as Synthetic Cognition Labs (“Cogni,” “we,” “us”). This Privacy Policy explains what information we collect when you use the Cogni memory service (the “Service”), how we use it, who we share it with, and the choices you have. Because Cogni is a memory tool for AI assistants, we’ve written this to be specific about what a memory service stores and how you stay in control.

By using the Service, you agree to this Policy. If you don’t agree, please don’t use the Service.

1. What this Policy covers

This Policy covers the hosted Cogni service at getcogni.io and mcp.getcogni.io — the MCP memory endpoint your AI client connects to, and this website. It does not cover the third-party AI clients (such as Claude or ChatGPT) you use Cogni through; those have their own privacy policies.

2. Information we collect

Account and identity information. When you sign in, our authentication provider gives us an account identifier and, typically, your email address. We use this to create your isolated memory store and to recognize you across the clients you connect. We never receive or store your sign-in password.

Memory content. The heart of the Service is the content you — or your AI assistant, acting on your behalf — choose to save: the facts, notes, preferences, people, projects, and observations sent to the remember tool, along with any labels/entities and timestamps. Because you decide what to store, memory content can include personal or sensitive information. We treat all of it as yours (see “Your rights and controls”). We receive only what is explicitly saved to Cogni — we do not read your AI assistant’s chat history, its own memory, or your files.

API keys. If you create a Cogni API key to connect a client, we store only a cryptographic hash of the key (never the key itself), plus a short prefix and a label so you can recognize it.

Usage and technical information. To operate and secure the Service, we process operational data such as request metadata, timestamps, coarse usage counts (for example, how many memories you’ve stored or written this month, to enforce plan limits), and error logs. We keep server-side logging of raw memory content to the minimum needed to run and debug the Service.

Payment information (paid plans). Paid plans are billed through a third-party payment processor acting as merchant of record. That processor handles your card details; Cogni does not receive or store full payment-card numbers. We receive only what we need to manage your subscription (such as plan status and a customer reference).

Waitlist and contact information. If you join the waitlist or email us, we collect the email address and any message you provide — via our form provider and email provider — to respond and to send you access and setup information.

3. How we use information

We use the information above to:

• provide the Service — store your memories and return them when your AI assistant recalls them;
• generate the vector embeddings that make connected recall work (see §4);
• authenticate you and keep each user’s store isolated;
• enforce plan limits and process subscriptions;
• operate, secure, debug, and improve the Service; and
• respond to support requests and send service-related communications.

We do not sell your personal information or memory content, we do not use your memory content to train AI models, and we do not serve advertising.

4. How memory content is processed and stored

To make recall work, Cogni converts your memory text into numeric vector embeddings. On the hosted service, this embedding step is performed via OpenAI’s API: the text of a memory is sent to OpenAI at the moment it is stored, and your query text is sent when you recall, solely to produce the embedding. Under OpenAI’s API data-usage terms, data sent to the API is not used to train their models. We use no other AI model on your content.

Your memories are stored in a per-user, isolated store on our cloud infrastructure. Data is encrypted in transit using TLS, and encrypted at rest at the storage layer by our infrastructure providers, each of which maintains a SOC 2 Type II attestation. A self-hosted option with fully local embeddings — so memory content never leaves your environment — is on our roadmap for teams with stricter requirements.

5. Who we share information with

We share information only with the service providers we use to run Cogni, each acting on our behalf:

• Authentication provider — sign-in and identity.
• OpenAI — generating vector embeddings from memory text and queries (§4).
• Cloud hosting provider — hosting and storage of your memories.
• Cloudflare — DNS, content delivery, and website hosting.
• Email provider — email and support correspondence.
• Form provider — processing waitlist submissions.
• Payment processor / merchant of record — subscription billing on paid plans.

We may also disclose information if required by law, to protect our rights or the safety of users, or in connection with a merger, acquisition, or sale of assets (you’ll be notified of any change in control that affects your data). We do not otherwise share your memory content with third parties.

6. Data retention

We keep your memories until you delete them or your account is closed. On the Free plan, to keep your store fast and bounded, memories you haven’t accessed for an extended period may be archived out of active recall (and remain restorable); paid plans retain everything. Operational logs are kept only as long as needed to run and secure the Service. See your plan for specific limits and retention windows.

What deletion does. When you delete a memory, it is removed immediately from every retrieval path: it is no longer returned by recall in any mode, no longer acts as a connection between your other memories, and is no longer included in an export. The deletion is recorded durably, so the memory stays deleted across restarts — it is not reinstated later.

What deletion does not do. We store memories in an append-only log, so deleting a memory records the deletion rather than overwriting the original entry in place. That underlying entry stays in the log until the log is next compacted — a routine maintenance rewrite that keeps the live entries and drops the deleted ones. Compaction runs automatically once enough of a store’s entries have been deleted, and again when the service next restarts; we don’t commit to a fixed schedule for it, so we can’t promise a specific interval. Separately, a copy of the memory remains in any backup snapshot taken before you deleted it; those snapshots rotate and are deleted automatically as described below. In other words: a deleted memory is genuinely unreachable through the Service from the moment you delete it, and the underlying entry is cleared the next time that store’s log is compacted — not at the instant you delete it.

Backups. We take periodic snapshots of the service storage — currently about every six hours — and keep them offsite with an object-storage provider, so that a hardware failure or an operational mistake cannot permanently lose your memories. Snapshots are transmitted over TLS and encrypted at rest by that provider. We retain only a rolling window of the most recent snapshots — in normal operation about a week — and our storage provider is configured to delete any snapshot older than 90 days regardless, so that is the outside limit. Backups exist solely to restore the Service after data loss — we do not use them to bring back an individual memory you deleted.

7. Your rights and controls

Because Cogni is your memory, you have direct control over it:

• Delete individual memories — available on every plan, including Free.
• Access / browse your stored memories (with the memory-management tools, on paid plans).
• Correct / update a memory (on paid plans).
• Export a portable copy of your memories (on paid plans).
• Close your account and ask us to delete it and the data associated with it.

Deleting your account. To delete your account and the data we hold for it, email support@getcogni.io from the address on your account with the subject “Delete my account”. We’ll confirm the request and complete the deletion within 30 days. This removes your memories, your settings, your API keys, your plan record and your usage history.

What account deletion cannot remove. Two things survive, and we would rather say so than imply otherwise. First, anything you contributed to a shared team space stays in that space: those memories belong to the space rather than to one member, and they carry no record of who wrote them, so we can neither find nor remove your individual contributions — much like a message you posted to a group. If that matters to you, remove those memories yourself before asking us to delete your account. Second, backup snapshots taken before your request are not individually edited; they age out of the rotation described in §6.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA (access, correction, deletion, portability, and objection). To exercise any right, or if you have questions, email support@getcogni.io and we’ll help.

8. Security

We protect your information with encryption in transit (TLS), encryption at rest provided by our SOC 2 Type II–attested infrastructure providers, access controls, hashed API keys, and per-user store isolation. No method of transmission or storage is perfectly secure, but we work to protect your data and to address issues promptly.

9. International users

Cogni is operated from, and processes data in, the United States. If you use the Service from outside the U.S., you understand that your information is processed in the U.S. and in other countries where our providers operate.

10. Children

Cogni is not directed to children. Please don’t use the Service if you’re under 13 (or the minimum age of digital consent in your country). We don’t knowingly collect data from children.

11. Changes to this Policy

We may update this Policy as the Service evolves. We’ll change the “Last updated” date above and, for material changes, provide additional notice. Continued use of the Service after an update means you accept it.

12. Contact

Questions about privacy or this Policy? Email support@getcogni.io.
Transparent AI, Inc. (doing business as Synthetic Cognition Labs)