Privacy Policy

1. Data Collection and Scope

This Privacy Policy describes how Cortlet ("we," "us," or "our") collects, uses, and discloses your personal information in connection with our software services, websites, and developer tools. By using our services, you consent to the data practices described in this statement.

• Account Information: Names, email addresses, and authentication credentials provided via Clerk.
• Technical Data: IP addresses, browser types, device identifiers, and operating system versions.
• Usage Metadata: Interaction logs, API request history, and performance telemetry.
• Analytics data: Country, Device family, and platform.

2. Purpose of Processing

We process personal data under the following legal bases:

1. Provision of services and maintenance of developer accounts.
2. Internal analytics to optimize software performance and security.
3. Compliance with statutory legal obligations and law enforcement requests.
4. Protection of intellectual property and prevention of fraudulent activity.

3. Third-Party Data Disclosures

Cortlet does not sell personal user data. We disclose information to third-party service providers only to the extent necessary to provide our services:

4. Data Retention and Deletion

Personal data is retained only for as long as an account remains active or as required by law. Users may initiate a permanent account purge via the Developer Settings interface. Upon confirmation, all associated identity shards are marked for deletion from our primary databases within 30 days.

5. Security Protocols

We implement industry-standard AES-256 encryption for data at rest and TLS 1.3 for data in transit. While we strive to protect your personal information, no method of transmission over the internet is 100% secure.