Legal

Privacy Policy

Last updated: September 15, 2026

Who we are

Cortox ("Cortox", "we", "us") is operated by Cortox LTD, 71-75 Shelton Street, Covent Garden, London, UK WC2H 9JQ. This policy explains what information we collect through the Cortox application, why we collect it, and how you can control it.

Information we collect

  • Account information — your name and email address, used to sign you in and identify your account.
  • Business data you provide — the customer, product, proposal, task and transaction records you create in Cortox in order to use the product.
  • Billing information — your subscription plan and payment status. Payments are processed by Stripe; Cortox does not receive or store your card number.
  • Communications — emails Cortox sends you (sign-in codes, notifications, proposal links) are delivered through our email provider, Resend.
  • Uploaded images — product/customer images you upload are stored with our media provider, Cloudinary.
  • AI assistant activity — questions you ask Cortox's AI assistant, and the business data needed to answer them, are sent to our AI provider (Anthropic) to generate a response.

How we use your information

We use the information above to:

  • Provide, maintain and secure the Cortox application;
  • Let you and your team manage your own customers, products and proposals;
  • Process subscription payments and send billing-related notices;
  • Respond to support requests you send us; and
  • Improve Cortox's features, including its AI assistant.

We do not sell your personal information.

Where your data is processed

Cortox is hosted on Railway, Vercel and Supabase. Your data may be processed by these infrastructure providers, and by the third-party services above (Stripe, Resend, Cloudinary, Anthropic, and Google if you use Google Sign-In), solely to provide the Cortox service to you.

Data retention

We keep your account and business data for as long as your account is active. If you delete your account, your data is removed in line with our account-deletion process, except where we are required to retain certain records (for example, billing records) for legal or accounting purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. You can manage most of this yourself from within Cortox (including a self-service account deletion option), or contact us using the details below and we will assist you.

Cookies

Cortox uses only the cookies/local storage strictly needed to keep you signed in and to remember your preferences (such as light/dark mode). We do not use third-party advertising or tracking cookies.

Children

Cortox is a business tool and is not directed at, or intended for use by, children.

Changes to this policy

We may update this policy from time to time as Cortox evolves. We will update the "Last updated" date above when we do. This policy is provided for transparency about our current practices and does not itself constitute legal advice.

Contact us

Questions about this policy or your data can be sent to support@cortox.ai or to Cortox LTD, 71-75 Shelton Street, Covent Garden, London, UK WC2H 9JQ.