Personal Data Processing

Last updated: September 2, 2026

1. Purpose of this notice

This notice describes the principal categories and purposes of personal data processing within CogShield. It supplements the Privacy Policy.

1. Service operator

CogShield is currently in pre-launch international deployment.

The legal identity, registered contact information, and any jurisdiction-specific controller or operator details will be published before commercial launch.

1. Categories of personal data

CogShield may process the following categories where applicable:

• authentication-provider identifiers;
• email address and verification status when supplied by the authentication provider;
• account role and account status;
• secure session information;
• subscription, plan, entitlement, and usage information;
• text and documents intentionally submitted for analysis;
• analysis results and associated metadata;
• technical, operational, and security information required to operate and protect the service.

1. Purposes of processing

Personal data may be processed to:

• register and authenticate users;
• maintain secure user sessions;
• provide cognitive-security analysis requested by the user;
• maintain analysis history;
• calculate and enforce service limits;
• administer subscriptions and account access;
• secure the platform and investigate abuse;
• maintain service reliability;
• satisfy applicable legal obligations.

1. Authentication

CogShield's international account foundation supports external identity providers.

For Google sign-in, CogShield verifies the Google identity token and associates the verified provider subject with a local CogShield user account.

CogShield does not use an email address alone as an automatic account-linking key.

1. Analysis content

Users control what text or documents they submit for analysis.

Submitted material is processed only as necessary to perform the requested service and related security or operational functions.

When a third-party AI provider is enabled, analysis content may be transmitted to that provider as necessary to perform the requested analysis.

1. Automated processing

CogShield performs automated analysis of submitted content to identify possible manipulation patterns, pressure, cognitive risks, information risks, and other signals supported by the configured analysis system.

Analysis results are informational and should not be treated as a substitute for professional legal, medical, financial, security, or other regulated advice.

1. Retention

Analysis history currently uses a 30-day retention period.

Original source text and uploaded source files are not stored as part of analysis history.

Other records may be retained for periods reasonably necessary for account administration, security, fraud prevention, contractual requirements, or applicable law.

1. Disclosure

CogShield does not sell personal data.

Personal data may be disclosed to infrastructure, authentication, security, or analysis service providers when necessary to operate the service, and to competent authorities where disclosure is legally required.

1. User choices and rights

Depending on applicable law, users may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where applicable.

Requests will be handled through the production contact channels listed on the Contact Us page.

1. Security

CogShield applies security controls intended to limit unauthorized access to personal data, including secure authentication sessions, restricted application permissions, and isolated database networking.

1. Updates

This notice may be updated before or after commercial launch as CogShield's providers, jurisdictions, commercial model, or regulatory obligations change.

The current version will remain available on this page.