Legal
Privacy
What we collect, why we collect it, and how we use it.
Last updated 26th September 2026
The short version
We collect the email address you give us, the briefs you submit, and the reports produced from them. We use that material to run MEDICI, improve the product, run analytics, and train, fine-tune, evaluate, and benchmark the models and agent workflows behind the service. We may also use aggregated or de-identified data derived from customer use for research and future commercial offerings that do not identify you. We do not sell your identifiable briefs or reports as a standalone dataset. You can ask us to delete your account data and we will.
What we collect
Your email address, when you join the list or create an account. If you tick the marketing box we also record the date and time you ticked it, because consent that cannot be evidenced is not consent.
Your briefs and reports. The question you ask, the settings you choose, and the report the agents produce. These are stored against your account so you can return to them and re-run them.
Operational records. For each session we record how long it took, which model was used, how many searches ran, and what it cost us to produce. We use this to set fair limits from evidence rather than guesswork.
How we use your data
You grant Cogdroid a worldwide, non-exclusive license to use the briefs, reports, session settings, product usage data, and related metadata you provide through MEDICI to operate the service, provide support, secure and debug the platform, improve features, run analytics, and train, fine-tune, evaluate, and benchmark models and agent workflows used in MEDICI or successor products. This matches the data-use section in our terms of service.
We may use aggregated or de-identified data derived from customer use for product improvement, research, and future commercial offerings, including insights products that do not identify you or your customers. Where law requires a different basis or consent for a specific processing activity, we comply with that requirement.
What we do not do
We do not sell or rent your personal data as a contact list or ad profile. We do not sell your identifiable briefs or reports as a standalone dataset. We do not run third-party advertising trackers on this site.
Processors we rely on
Running MEDICI means sending parts of your data to a small number of suppliers: a hosting provider for the site and application, a language model provider to generate the analysis, a web search provider for live research, an email provider for account and list email, and a payment provider once billing opens. Each receives only what it needs to do its job.
Your brief text is sent to the model provider, because that is how the analysis is produced. Do not paste confidential material into a brief unless you have satisfied yourself that this is acceptable under your own obligations.
Retention
Sessions and reports are kept while your account is open, since their value is that you can come back to them. Delete your account and we remove them. Operational cost records are retained in aggregate without the brief text attached.
Your rights
You can take a copy of your data or delete your account yourself, at any time, from Account → Privacy & data inside the app. The export is one JSON file with your account details, billing state, every session and report, and the documents you uploaded. Deletion removes all of that, your stored payment cards and your login; invoices are kept only as the financial record the law requires. To correct something, or if you would rather we do it for you, email us and we will action it. Every marketing email and trial reminder we send carries a working one-click unsubscribe and a link to manage your email preferences; billing notices and receipts do not, because you need those to use the service.
Cookies
Necessary cookies are required for the site and the app to work. Performance is optional. There is no advertising. The list is on the cookies page.