❯

    privacy

    Privacy Policy

    Effective Date: March, 2026

    Welcome to Cogny.com (the “Website”), operated by Cogny AB (“us,” “we,” or “our”). This Privacy Policy outlines how we collect, use, and protect your personal data when you use our services. By using the Website, you agree to the practices described in this Privacy Policy. Please take a moment to understand our policies and make informed decisions about your data.

    Information Collection And Use

    We collect different types of data to enhance and provide the best possible experience for you. This section clarifies the types of information we collect.

    Personal Data

    When you use our Website, we may request certain personally identifiable information (“Personal Data”), including but not limited to:

    • Email address
    • First name and last name

    Usage Data

    We also collect Usage Data that helps us understand how the Website is accessed and used. Usage Data may include:

    • Internet Protocol (IP) address
    • Browser type and version
    • Pages visited on our Website
    • Date and time of your visit
    • Time spent on pages
    • Device identifiers

    Tracking & Cookies Data

    We use cookies and similar tracking technologies to improve your experience on the Website. These technologies gather information to enhance and analyze our services. Examples of cookies we use include:

    • Session Cookies for operational purposes
    • Preference Cookies to remember your settings
    • Security Cookies for added protection

    You have the option to refuse cookies through your browser settings, but note that this may affect certain features of our service.

    Use of Data

    We use collected data for various purposes:

    • To maintain and provide our services
    • To inform you about service changes
    • To engage you in interactive features
    • To offer customer care and support
    • To analyze usage patterns and improve our services
    • To detect and address technical issues

    Google API Data

    Cogny integrates with Google APIs to provide AI-powered marketing analytics and optimization. When you connect your Google accounts through our platform, we access data from the following services:

    Data We Access

    • Google Ads: Campaign performance data including impressions, clicks, conversions, costs, and ad group configurations, to provide AI-powered campaign analysis and optimization recommendations.
    • Google Analytics 4: Website traffic, user behavior, conversion data, and audience information, to deliver AI-powered analytics insights and enable AI-assisted audience and event management.
    • Google Search Console: Search performance data including queries, clicks, impressions, click-through rates, and search positions, to provide AI-powered SEO analysis and recommendations.
    • Google Tag Manager: Tag configurations, triggers, and container settings, to enable AI-assisted tag auditing and management.

    How We Use Google Data

    Google API data is used exclusively to provide the Cogny platform's core functionality: AI-powered marketing analysis, automated reporting, and optimization recommendations. Users interact with their Google data through natural language queries, and our AI agents retrieve and analyze the data in real time to deliver actionable insights.

    Cogny does not use Google user data for AI or machine learning model training purposes. Google data is not sold, shared with third parties for advertising, or used for any purpose unrelated to providing the Cogny platform services to the authenticated user.

    How We Store Google Data

    OAuth refresh tokens are stored encrypted in our database (Supabase Vault). We do not store bulk copies of your Google data — our AI agents query Google APIs on demand when you request analysis. Cached or temporary data used during report generation is retained only for the duration needed to complete the request.

    Revoking Access

    You can disconnect any Google service at any time from Settings > API Connections in the Cogny app. When you disconnect a service, we delete the associated OAuth tokens from our database. You can also revoke Cogny's access directly from your Google Account permissions page.

    Third-Party Platform Data (Shopify)

    Cogny integrates with Shopify to provide AI-powered analytics and automated optimization for e-commerce merchants. When you connect your Shopify store through our platform, we access data via the Shopify Admin API.

    Data We Access

    • Products: Product catalog, descriptions, tags, and variants for performance analysis and optimization recommendations.
    • Orders: Order history, revenue data, and fulfillment status for sales analytics, LTV calculations, and cohort analysis.
    • Customers: Customer profiles and segmentation data for audience intelligence and retention analysis.
    • Inventory: Stock levels and location data for inventory monitoring and stockout prediction.
    • Locations: Fulfillment location data to contextualize inventory across warehouses and stores.
    • Discounts: Discount codes and promotion data for impact analysis and automated promotion management.

    How We Use Shopify Data

    Shopify data is used exclusively to provide AI-powered analytics, automated reporting, and optimization recommendations within the Cogny platform. Our AI agents access your store data in real time via a server-to-server MCP proxy connection. Cogny does not persist bulk copies of your Shopify store data.

    How We Store Shopify Data

    OAuth access tokens are stored encrypted in Supabase Vault. We do not store bulk copies of your store data — our AI agents query the Shopify Admin API on demand when you request analysis. No customer personal data from your store is retained by Cogny.

    Disconnecting & Data Deletion

    You can disconnect your Shopify store at any time from Settings > API Connections in the Cogny app, or by uninstalling the Cogny app from your Shopify admin. When you uninstall, we automatically delete your OAuth credentials and disable the connection. Cogny implements all mandatory GDPR webhooks required by Shopify: customer data requests, customer data erasure, and shop data erasure are processed automatically.

    MCP Server & AI Assistant Integrations

    Cogny provides a Model Context Protocol (MCP) server that allows compatible AI assistants (such as Claude by Anthropic) to access your marketing data on your behalf. The MCP server acts as a bridge between the AI assistant and your connected data sources.

    How MCP Works

    When you connect an AI assistant to Cogny via MCP, the assistant can call Cogny tools to query data, read reports, and manage growth tickets within your workspace. All requests are authenticated using OAuth 2.1 and scoped to your user account and workspace — the assistant can only access data you are authorized to see.

    Data Accessed via MCP

    Depending on your subscription tier and connected integrations, the following data may be accessed through the MCP server:

    • BigQuery Warehouse: Read-only SQL queries against your connected BigQuery datasets (Cloud tier). Only SELECT queries are permitted; no data modification is possible.
    • Google Search Console: Search performance data including queries, clicks, impressions, and positions for SEO analysis.
    • Bing Webmaster Tools: Search analytics and site performance data from Microsoft Bing.
    • LinkedIn Ads: Campaign performance data including impressions, clicks, conversions, and spend for B2B advertising analysis.
    • HubSpot: CRM and marketing data including contacts, deals, and campaign performance for sales pipeline and marketing analysis.
    • Cogny Reports: AI-generated marketing reports and chart visualizations produced by Cogny's scheduled analysis.
    • Growth Tickets & Findings: Actionable opportunities identified by Cogny's analysis, including ticket metadata, comments, and status.
    • Organizational Context: Company strategy, competitor intel, and team knowledge stored in your workspace's context tree.

    Data Storage & Retention via MCP

    The MCP server does not store or cache query results. All data is fetched on demand from the underlying data sources (BigQuery, connected platforms, Cogny database) and returned directly to the AI assistant in the response. Cogny does not control how the AI assistant provider processes or retains conversation data — refer to your AI assistant provider's privacy policy for details on their data handling practices.

    Write Operations via MCP

    Certain MCP tools allow the AI assistant to create or modify data within your Cogny workspace, such as creating growth tickets, adding comments, updating finding statuses, or writing context nodes. All write operations are logged and attributable to your user account. Destructive operations (archiving nodes, deleting findings) require explicit confirmation from the AI assistant's safety annotations system.

    Revoking MCP Access

    You can disconnect the MCP integration at any time by removing Cogny from your AI assistant's connector settings. Cogny does not retain any session state after disconnection. Connected platform credentials (Google Search Console, LinkedIn Ads, etc.) remain active in your Cogny workspace until you disconnect them separately from Settings > Integrations.

    Transfer Of Data

    Your data, including Personal Data, may be transferred and stored outside your jurisdiction, including in Sweden. By using our service and providing your data, you consent to such transfers.

    We take steps to secure and protect your data in line with this Privacy Policy.

    Disclosure Of Data

    We may disclose your Personal Data in response to legal obligations, protect our rights and property, prevent wrongdoing, safeguard users' safety, or address legal liabilities.

    Security Of Data

    While we strive to protect your data, no internet transmission or storage method is completely secure. We take commercially reasonable measures to safeguard your Personal Data, but we cannot guarantee its absolute security.

    Service Providers

    We may engage third-party companies and individuals (“Service Providers”) to help us provide and analyze our service. Service Providers access Personal Data solely to assist us and are bound to confidentiality.

    Analytics

    We may use third-party analytics services, such as Google Analytics, to monitor and analyze service usage. These services may collect and share data to enhance their own advertising networks.

    To opt-out of Google Analytics tracking, install the Google Analytics opt-out browser add-on.

    Links To Other Sites

    Our Website may include links to third-party sites. These links are provided for your convenience, and we advise reviewing the privacy policies of those sites. We assume no responsibility for third-party content or practices.

    Children's Privacy

    We do not knowingly collect Personal Data from individuals under 18 years of age. If you are a parent and discover your child has provided us with Personal Data, please contact us to remove the information.

    Changes To This Privacy Policy

    We may update this Privacy Policy occasionally. We will notify you of changes through prominent notices on the Website or via email prior to the changes taking effect. Please revisit this page periodically to stay informed.

    For any questions or concerns about this Privacy Policy, contact us at privacy@cogny.com or at our registered address: Cogny AB, Peter Myndes Backe 16, 118 46 Stockholm.