Privacy

Who we are

Cogvera Labs Pty Ltd (ABN 55 699 137 856) is an R&D lab in Perth, Western Australia. For anything in this policy, contact info@cogveralabs.ai.

What we collect

We collect only what the work needs:

• Enquiries: the name, work email, company, and description of the work you submit through the contact form.
• Document requests: the name, work email, company, and note you send with the request form on our trust page.
• Email updates: your email address, if you subscribe.
• Voice notes: if you use the optional voice intake, the audio clip is transcribed and the text is placed in your message for you to review. The audio itself is not retained.
• Client accounts: sign-in identifiers, session data, and the engagement records needed to run our client platform. Access is invite-only.
• Operational logs: error reports and security events needed to keep the service reliable and safe.

Why we collect it

To respond to your enquiry, scope and deliver engagements, operate and secure the platform, and meet our legal obligations. We do not use your information for advertising.

Where your information is processed

Client platform data is stored in the AWS Sydney region (ap-southeast-2) on Supabase infrastructure, protected by row-level isolation.

Our AI features send the text they work on to the model providers listed below, under zero-retention terms. That includes your enquiry if we read it with our AI assistant.

Some of the services that run this platform process information outside Australia, or where no region is published. We list every one of them, here and in the subprocessor register on our trust page:

• Vercel (Hosting, CDN and AI Gateway): Sydney functions, global edge.
• Anthropic (Claude models, zero data retention): US, and a region Vercel does not publish for Haiku.
• Amazon Bedrock (Claude models, zero data retention): US, EU (Frankfurt).
• Claude Platform on AWS (Claude models, zero data retention): a region Vercel does not publish.
• Google Vertex AI (Claude models, zero data retention): US, EU.
• Microsoft Azure (Search embeddings with OpenAI’s text-embedding-3-small, zero data retention): a region Vercel does not publish.
• Stripe (Billing): US, global.
• Xero (Accounting and invoices): Australia, New Zealand, US, among others.
• Resend (Outbound email): US, sends from Tokyo.
• Google Workspace (Email for info@cogveralabs.ai): US, EU, global.
• Sentry (Error monitoring): US.
• Deepgram (Voice transcription): US.

What we do not do

• No advertising trackers and no cross-site tracking cookies.
• Site analytics are cookieless and aggregate only (page views and visitor counts via Vercel Analytics). They do not identify you.
• We never sell personal information, and submitting the contact form does not add you to a mailing list.

Retention

Enquiries are kept while they are relevant to a conversation or engagement. Subscriber addresses stay on the list until you unsubscribe or ask us to remove them. Our append-only audit log keeps a copy of each subscription, address included, after you leave the list. It also keeps a copy of each enquiry and document request, with everything you put in the form, after we delete it. Voice audio is not stored after transcription. Client account and engagement data is retained for the life of the engagement and any period the engagement contract requires.

Access, correction, and deletion

Ask us what we hold about you, correct it, or have it deleted; the audit log’s copy stays, as Retention says. We respond within a reasonable period and never charge for a request.

Email info@cogveralabs.ai

Complaints

If you believe we have mishandled your information, contact us first and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

When our practices change, this page changes, and the date at the top moves with it. Significant changes to how client data is handled are communicated to affected clients directly.