Privacy Policy

This Privacy Policy explains how Cortlet ("Cortlet," "we," "us," or "our") handles information in connection with the Cortlet website, waitlists, online services, developer tools, and other products or services that expressly reference this policy.

This policy does not mean that every Cortlet product collects the same information. Installed software and product-specific services may have different data behavior, which may be described separately where appropriate.

Cortlet is not currently available to users in the European Union or the United Kingdom.

Cortlet services are not intended to be offered to users in those regions at this time.

We may collect information that you choose to provide directly to Cortlet.

This may include:

• email addresses submitted through a waitlist;
• account, organization, or profile information where a Cortlet service requires an account;
• messages, support requests, feedback, bug reports, or other communications you send to Cortlet;
• information you submit through forms, product interfaces, or developer tools;
• other information you voluntarily provide.

When you use the Cortlet website, certain technical and usage information may be processed automatically.

This may include information such as:

• pages viewed;
• referring pages or URLs;
• browser and device characteristics;
• operating system information;
• general request and connection information;
• performance and loading metrics;
• timestamps and similar technical information.

Cortlet uses Vercel Analytics to understand general website usage and improve the website.

Vercel Analytics may process technical information related to website visits, page views, browser or device characteristics, referrer information, and similar usage information depending on Vercel's implementation and configuration.

Cortlet does not use Vercel Analytics for third-party behavioral advertising or cross-site advertising profiles.

Cortlet uses Vercel Speed Insights to measure website performance and user-experience metrics.

This may include technical information relating to page loading, responsiveness, browser performance, and similar diagnostic or performance information.

Speed Insights is used for website performance monitoring rather than behavioral advertising.

When you join a Cortlet waitlist, we may collect your email address and any additional information you submit with the waitlist form.

We use this information to manage waitlists, provide product or availability updates, communicate about launches or previews, and operate related communications.

Cortlet uses Resend for waitlist and related email processing.

When you submit an email address to a Cortlet waitlist or receive related communications, Resend may process information necessary to manage or deliver those communications.

Cortlet does not use Resend as a behavioral advertising or cross-site profiling service.

Cortlet may use Amazon Web Services, including Amazon S3 and Amazon CloudFront, to store and deliver certain static assets such as images.

When those assets are requested, AWS may process technical request information such as IP address, browser or device information, requested URLs, timestamps, and similar information necessary to provide, secure, and operate content delivery.

Cortlet does not use Amazon S3 or Amazon CloudFront as behavioral advertising services.

If a Cortlet service requires an account, we may process information necessary to create, authenticate, secure, and manage that account.

Depending on the service, this may include account identifiers, organization information, authentication-related information, session information, permissions, and security events.

Certain Cortlet services may process information that you submit, transmit, route, analyze, or otherwise provide as part of using the service.

This may include technical information such as requests, logs, configuration, connection metadata, API inputs, webhook payloads, or other developer-provided data depending on the product.

Cortlet processes such information only as necessary to provide, secure, maintain, and improve the applicable service, subject to any product-specific terms or disclosures.

The fact that the Cortlet website uses Vercel Analytics and Vercel Speed Insights does not mean that installed Cortlet software includes analytics, telemetry, or tracking.

Where a particular Cortlet product collects diagnostics, analytics, crash information, telemetry, or similar product-level information, that collection will be described in the applicable product documentation or privacy disclosure.

We may use information to:

• provide and operate Cortlet websites and services;
• manage accounts, organizations, and access;
• process waitlist submissions and related communications;
• respond to support requests, feedback, and inquiries;
• maintain security and prevent abuse;
• diagnose errors and technical issues;
• measure website performance and general usage;
• improve products, documentation, and user experience;
• comply with legal obligations;
• protect Cortlet, users, and third parties.

We may process technical, account, request, and security information where reasonably necessary to detect, investigate, prevent, or respond to abuse, fraud, unauthorized access, malicious activity, security incidents, or violations of Cortlet policies.

Cortlet may use cookies, local storage, session storage, or similar technologies for website functionality, security, preferences, analytics, or performance.

More information is available in the Cortlet Cookie Policy at /legal/cookies.

Cortlet does not currently use third-party behavioral advertising networks, retargeting systems, or cross-site advertising cookies to build advertising profiles about website visitors.

Cortlet does not sell personal information to advertisers.

We may share or make information available to third parties only where reasonably necessary for purposes such as:

• providing infrastructure or technical services;
• processing email or waitlist communications;
• security, fraud prevention, or abuse prevention;
• legal compliance;
• protecting rights, safety, or service integrity;
• completing a merger, acquisition, restructuring, asset transfer, or similar transaction.

Cortlet may rely on third-party service providers to operate parts of its website and services.

Current providers may include Vercel for website hosting, analytics, and performance monitoring; Resend for waitlist and email processing; and Amazon Web Services, including Amazon S3 and Amazon CloudFront, for storage and delivery of certain static assets.

Cortlet may change service providers over time as its technical infrastructure evolves.

Cortlet websites or products may link to or integrate with third-party websites, repositories, APIs, platforms, or services.

Those third parties operate independently and may have their own privacy policies and data practices. Cortlet is not responsible for the privacy practices of third-party services that it does not control.

Cortlet retains information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining security, resolving disputes, complying with legal obligations, and enforcing agreements.

Retention periods may vary depending on the type of information, the service involved, operational needs, security requirements, and legal obligations.

Where appropriate and legally permitted, you may request deletion of personal information that Cortlet maintains about you.

Certain information may need to be retained where required for legal compliance, fraud prevention, security, dispute resolution, enforcement, or other legitimate operational purposes.

You are responsible for ensuring that information you provide to Cortlet is accurate and current where accuracy is relevant to the service.

You may contact Cortlet through the appropriate channel if you need to correct information associated with you.

Cortlet uses reasonable technical and operational measures intended to protect information against unauthorized access, alteration, disclosure, or destruction.

No internet-connected system or method of electronic storage can be guaranteed to be completely secure.

You are responsible for protecting credentials, API keys, access tokens, private keys, certificates, environment variables, and other secrets that you use with Cortlet.

You should not intentionally provide Cortlet with sensitive credentials unless doing so is required by the functionality of a product and you understand how that product handles them.

Unless Cortlet expressly states otherwise for a specific product, Cortlet services should not be assumed to be designed or certified for regulated, classified, highly sensitive, or safety-critical information.

You are responsible for determining whether a Cortlet product is appropriate for the information you intend to process.

Cortlet services are not directed to children who are below the minimum age required to use the applicable service under relevant law.

Cortlet does not knowingly seek to collect personal information from children in circumstances where doing so would be unlawful.

Cortlet and its service providers may process information in countries other than the country in which you are located.

Those locations may have different data-protection rules from your jurisdiction.

Cortlet may preserve, use, or disclose information where reasonably necessary to comply with applicable law, regulation, court orders, subpoenas, warrants, or other valid legal process.

Cortlet may also act where reasonably necessary to protect Cortlet, users, third parties, security, or service integrity.

If Cortlet is involved in a merger, acquisition, restructuring, financing, sale of assets, transfer of a service, or similar transaction, information may be transferred as part of that transaction subject to applicable law.

Depending on the service and your location, you may be able to:

• unsubscribe from certain email communications;
• manage cookies and browser storage through your browser;
• stop using a Cortlet service;
• request correction or deletion of certain information;
• contact Cortlet with questions about information associated with you.

Where Cortlet sends optional product, waitlist, launch, or promotional communications, available unsubscribe controls may be provided as required by applicable law.

You may still receive transactional, operational, security, or service-related communications where they are necessary for your use of a Cortlet service.

Cortlet may update this Privacy Policy as its products, infrastructure, service providers, business practices, or legal obligations change.

The current version will be published with a revised "Last updated" date. Where required by applicable law, additional notice will be provided.

This Privacy Policy should be read together with other applicable Cortlet policies, including the Terms of Service, Cookie Policy, Acceptable Use Policy, and any product-specific privacy disclosures.

Additional legal information is available at /legal.

Questions, privacy requests, or concerns regarding this Privacy Policy may be submitted through Cortlet's designated contact or legal channel.

When making a privacy request, Cortlet may ask for information reasonably necessary to verify the request and protect against unauthorized disclosure or deletion.