Privacy Policy

Introduction

Cortara ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content generation platform.

Information We Collect

Account Information

When you create an account, we collect information such as your name, email address, company name, and billing information.

Brand Brain Data

To provide our services, we collect and process information about your brand including voice & tone guidelines, content samples, brand values, audience information, and content constraints.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, content generated, and technical data (IP address, browser type, device information).

How We Use Your Information

We use your information to:

• Provide and maintain our AI content generation services
• Train and improve our Brand Brain AI models specific to your brand
• Process payments and manage your subscription
• Send you service updates, security alerts, and support messages
• Analyze platform usage to improve features and user experience
• Comply with legal obligations and enforce our Terms of Service

Data Storage and Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit, regular security audits, and strict access controls.

Your Brand Brain data is stored securely and isolated per client. We use Supabase (PostgreSQL) with pgvector for semantic search capabilities.

AI Training and Your Content

Your content belongs to you. We use your Brand Brain data and content samples solely to train AI models specific to your account. Your data is never used to train models for other customers or shared publicly.

You retain all intellectual property rights to content you create using Cortara.

Third-Party Services

We use the following third-party services:

• Anthropic Claude: AI content generation
• OpenAI: Embeddings and semantic search
• Supabase: Database and authentication
• Vercel: Hosting and deployment
• Stripe: Payment processing

These services have their own privacy policies and data processing agreements.

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your Brand Brain data and content within 30 days, except where required by law to retain certain information.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications
• Lodge a complaint with a supervisory authority

GDPR Compliance

For users in the European Economic Area (EEA), we comply with GDPR requirements. Your data is processed lawfully based on consent, contract performance, and legitimate interests.

CCPA Compliance

For California residents, we comply with the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, delete your data, and opt out of data sales (note: we do not sell your data).

Children's Privacy

Cortara is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our platform. Continued use of Cortara after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: