Privacy Policy

CogNexus Technologies Inc. ("CogNexus", "we", "us", or "our") operates Forge, an AI-powered construction intelligence platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. By using Forge, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account or use Forge, you may provide us with:

• Account Information: Name, email address, phone number, company name, job title
• Profile Information: Professional details, project preferences
• Project Data: Construction project information, schedules, crew data, documents you upload
• Communication Data: Messages, support requests, feedback
• Payment Information: Billing address and payment details (processed securely through third-party payment processors)

1.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Usage Data: Features used, pages visited, time spent, interactions
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, error logs
• Cookies and Tracking: Session identifiers, preferences, analytics data

2. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: Provide, maintain, and improve Forge's AI-powered features
• AI Training: Train and improve our machine learning models using aggregated, anonymized data
• Personalization: Customize your experience and provide relevant insights
• Communication: Send service updates, security alerts, and support responses
• Analytics: Understand usage patterns and optimize performance
• Security: Detect and prevent fraud, abuse, and security threats
• Compliance: Meet legal obligations and enforce our Terms of Service
• Marketing: Send promotional communications (with your consent, where required)

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party vendors who assist with hosting, analytics, payment processing, and customer support
• AI Services: Cloud AI providers (e.g., AWS, Azure) that process data to deliver our AI features
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• With Your Consent: When you explicitly authorize us to share your information

We do not: Sell your data to third parties, use your data for advertising purposes unrelated to our Service, or share your project data with competitors.

4. AI and Machine Learning

Forge uses artificial intelligence to provide construction intelligence. Here's how we handle your data:

• Model Training: Your project data may be used to train our AI models in an aggregated, anonymized manner
• Data Processing: AI processing occurs on secure cloud infrastructure with industry-standard encryption
• Insights Generation: AI analyzes your data to generate predictions and recommendations
• Opt-Out: You may request to opt out of having your data used for model training by contacting us

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication (multi-factor authentication available)
• SOC 2 Type II compliance (in progress)
• Employee security training and background checks

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and fulfill our contractual obligations
• Comply with legal, tax, and regulatory requirements
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal purposes.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Opt-Out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw consent for processing where we rely on consent

To exercise these rights, contact us at privacy@cognexus.io. We will respond within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use the Service (Google Analytics, Mixpanel)
• Advertising Cookies: Deliver relevant ads (only with your consent)

You can control cookies through your browser settings. Note that disabling cookies may limit some features.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Forge is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@cognexus.io.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those listed in Section 7 above. Our legal basis for processing your data includes:

• Contract Performance: Processing necessary to provide the Service
• Consent: Where you have given explicit consent
• Legitimate Interests: Our legitimate business interests (e.g., fraud prevention)
• Legal Obligation: Compliance with applicable laws

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of Forge after changes become effective constitutes acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: