Privacy Policy
Last updated:
Governing law: England and Wales. Disputes fall under the exclusive jurisdiction of the courts of London, United Kingdom.
1. Information We Collect
When you use Cognaxa, we collect information you provide directly, such as your name, email address, institutional affiliation, and any content you create within the platform (courses, quizzes, assessments). We also collect usage data including login timestamps, feature usage patterns, and device information to improve our service.
2. How We Use Your Information
We use your information to provide and improve Cognaxa, communicate with you about your account, and ensure the security of our platform. We do not sell your personal data to third parties. AI features process content within our secure infrastructure and do not use your data for model training.
3. Data Security
Cognaxa employs enterprise-grade security measures including encrypted data transmission (TLS), bcrypt password hashing, row-level database security for tenant isolation, and session-based authentication with configurable expiration. Proctoring data is stored securely and accessible only to authorized instructors.
4. Data Retention
We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data by contacting us at hello@genfinish.com.
5. Third-Party Services
We use select third-party services for infrastructure (cloud hosting, object storage, email delivery). These providers are bound by data processing agreements and do not have independent rights to use your data.
6. Cookies
We use essential cookies for authentication and session management. We use localStorage for theme preferences. We do not use tracking cookies or third-party advertising cookies.
7. GDPR Addendum (EU / UK)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right under the GDPR / UK GDPR to access, rectify, erase, restrict, port, and object to processing of your personal data. Cognaxa acts as a data processor for customer-controlled content and as a data controller for account, billing, and support data. Our standard Data Processing Agreement (DPA) incorporates Standard Contractual Clauses (SCCs) and is available from /trust/downloads. Data subject requests should be routed through your institution's administrator or sent to privacy@genfinish.com.
8. CCPA Addendum (California)
California residents have the right under the CCPA / CPRA to know what categories of personal information we collect, request deletion, correct inaccurate information, opt out of any "sale" or "sharing" of personal information, and exercise these rights without retaliation. Cognaxa does not sell personal information as defined by the CCPA and does not share personal information for cross-context behavioural advertising. California residents may exercise their rights by contacting privacy@genfinish.com; we will verify the request and respond within the statutory 45-day window.
9. Contact
For questions about this privacy policy, your data, or to exercise any of the rights above, contact us at privacy@genfinish.com.