Cogilo logo

PRIVACY POLICY
Last updated

This Privacy Notice for P2P Industries Inc. ("we", "us", or "our") describes how and why we process your information when you use the Cogilo Google Docs Add-on (the "Service"), including when you:
  • Use the Cogilo add-on inside Google Docs.
  • Visit our website at cogilo.me or any site that links to this Privacy Policy.
  • Engage with us in related ways (e.g. support requests, events).
Questions or concerns? Reading this notice will help you understand your privacy rights and choices. If you do not agree with our policies, please do not use the Service. You can always reach us at privacy@p2p.industries.

SUMMARY OF KEY POINTS

This summary highlights important parts of our Privacy Policy. For details, use the table of contents below.
  • We do not collect your name, email, or save the text of your Google Docs. Document content is processed in memory and not stored by us.
  • We send document text to Anthropic's API only to generate AI results. Anthropic automatically deletes request data after a short retention window (<30 days).
  • We use PostHog to record anonymous click events and session replays of our sidebar UI. These analytics help improve the product.
  • We do not retain user data obtained through Google Workspace APIs to develop, improve, or train generalized AI and/or machine-learning models.
  • You can exercise GDPR/CCPA rights (access, deletion, etc.) by emailing us.
  • Data transfers occur to the United States where our vendors operate. Safeguards such as Standard Contractual Clauses apply.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHAT LEGAL BASES DO WE RELY ON?
  4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?
  5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  6. INTERNATIONAL DATA TRANSFERS
  7. HOW LONG DO WE KEEP YOUR INFORMATION?
  8. HOW DO WE KEEP YOUR INFORMATION SAFE?
  9. DO WE COLLECT INFO FROM MINORS?
  10. WHAT ARE YOUR PRIVACY RIGHTS?
  11. UPDATES TO THIS NOTICE
  12. CONTACT US

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us. You are not required to create an account, and we do not intentionally collect your name, email address, or similar identifiers. The only user-provided data Cogilo processes is the text you select in your Google Doc when invoking AI features. This text is transmitted securely to Anthropic's API and is not stored by P2P Industries.

Information automatically collected. We automatically log limited technical data via PostHog: event names, timestamps, device/browser type, and anonymised IP-derived region. PostHog sets a first-party cookie to generate a random device ID for usage statistics. No document content or personal identifiers are included in these analytics logs.

2. HOW DO WE PROCESS YOUR INFORMATION?

  • Provide the Service. We read the active document text you select to generate AI responses and then discard it.
  • Improve the Service. Aggregated PostHog analytics help us diagnose issues and refine features.
  • Security & Fraud Prevention. We log error data and may review aggregated analytics to detect abuse of the AI (e.g. rate-limit attacks).
  • Legal Compliance. We may process data if required by law or for legitimate legal interests (e.g. responding to lawful requests).
  • No AI/ML model training. We do not retain user data obtained through Google Workspace APIs to develop, improve, or train generalized AI and/or machine-learning models.
For users located in the European Economic Area or United Kingdom, we process your data under these legal bases:
  • Consent – you grant Google OAuth consent when installing the add-on.
  • Legitimate Interests – to troubleshoot, secure, and improve Cogilo.
  • Legal Obligation – when we must comply with applicable laws.

4. WHEN AND WITH WHOM DO WE SHARE INFORMATION?

We only share data with:
  • Anthropic – to generate AI results (document text sent transiently via HTTPS).
  • PostHog – for anonymised click analytics and session replays. Session replays capture only the Cogilo sidebar; document content is never sent to PostHog and never seen by PostHog.
No other third parties receive your data. We do not sell personal information.

5. COOKIES AND OTHER TRACKING TECHNOLOGIES

Cogilo itself sets no cookies. PostHog sets a single first-party cookie (`ph_*_posthog`) to distinguish unique devices. You can block this cookie without losing core functionality (though analytics will be less accurate). We respect Do-Not-Track signals where feasible.

6. INTERNATIONAL TRANSFERS

Data is processed in the United States where Anthropic and PostHog servers reside. Standard Contractual Clauses safeguard EU/UK data.

7. DATA RETENTION

Document text is not retained. PostHog analytics are retained as long as necessary for product insights, then aggregated or deleted. Anthropic deletes request data in <30 days.

8. SECURITY

We employ TLS encryption, access controls, and follow Google's Limited Use policy. No human at P2P reads your document without your explicit consent.

9. CHILDREN'S PRIVACY

Cogilo is not directed to children under 13 and we do not knowingly collect data from them.

10. YOUR PRIVACY RIGHTS

Depending on your location you may request access, deletion, or correction of personal data, or object to processing. Contact privacy@p2p.industries to exercise these rights. We will respond within applicable legal timeframes.

11. UPDATES TO THIS NOTICE

We may update this Privacy Policy periodically. The "Last updated" date reflects the latest revision. Material changes will be announced on our website.

12. CONTACT US

If you have questions, email our Data Protection Officer at privacy@p2p.industries or write to:

P2P Industries Inc.
1111B S Governors Ave STE 25585
Dover, DE 19904
United States