Privacy Policy

Information we process

• Account information such as name, email address, sign-in provider, and organisation membership.
• Subscription, licence, plan, seat, and authorised-device information.
• Authentication, session, security, support, and device-authorisation records.
• Project and workspace metadata needed to deliver requested features, including project names, selected contract types, runtime requests, and Git action status.
• Technical records needed to operate, secure, diagnose, and improve the service.

Why we use it

We process information to create and secure accounts, provide requested services, administer licences and organisations, authorise Desktop devices, send transactional sign-in messages, prevent abuse, support users, and meet legal obligations.

Service providers

Information may be processed by hosting providers, enabled sign-in providers such as Google, GitHub or Apple, and transactional email providers. CogentSpec uses Stripe to process payments and manage billing. When you use a payment feature, relevant billing information is processed by Stripe, and CogentSpec receives the payment, customer and subscription records needed to administer the service. Providers receive the information needed for their role and process it under applicable terms and privacy policies.

Sharing and selling

CogentSpec does not sell personal information. Information may be disclosed where required by law, to protect users or the service, or as part of a legitimate business reorganisation subject to appropriate safeguards.

Retention and security

Information is retained only for as long as needed for accounts, licences, security, service delivery, disputes, and legal requirements. CogentSpec uses access controls, revocable credentials, secure session cookies, and operational backups, but no online system can guarantee absolute security.

Legal acceptance records

When you accept or freshly confirm the Terms & Conditions and EULA while signed in, CogentSpec records your account identifier, the document versions, the server timestamp, the setup surface, and any linked subscription identifier needed to evidence and enforce that action. For Desktop installation, CogentSpec also records whether the account-bound request is pending, superseded, expired, or redeemed so duplicate tabs cannot detach the confirmation from the request that Desktop claims. The durable versioned account acceptance and the separate confirmations made for later protected actions are retained as legal and security records.

Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to complain to the UK Information Commissioner’s Office.