Privacy Policy

Effective Date: February 4, 2026

1. Introduction

Productized Inc. ("we," "us," or "our") operates Cossistant, an open-source, AI-native support infrastructure for modern SaaS. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

2. Information We Collect

We collect the following types of information:

  • Account Information: Name and email address for account creation and personalization.
  • Authentication Data: Session cookies for secure authentication only.
  • Usage Logs: Basic usage information including login timestamps and user actions to improve our service.
  • Support Content: Messages, files, and other content you share through the support widget.

3. Information We Do Not Collect

We do not collect sensitive categories of data such as health information, biometric data, or government identifiers. We do not store your payment information directly—all payment processing is handled securely by our payment processor, Polar.sh.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Contract Performance: Processing your name and email is necessary to provide you with our services.
  • Legitimate Interests: We collect log data to ensure the security and performance of our platform.
  • Consent: We will obtain your explicit consent before sending any marketing communications.

5. Data Storage and Security

Your data is primarily stored in the United States. We implement industry-standard security measures including:

  • Encryption in transit using HTTPS/SSL
  • Encryption at rest for stored data
  • Role-based access controls
  • Regular security audits

6. Third-Party Services

We use carefully vetted third-party services to operate our platform. All partners operate under GDPR-compliant agreements. For a complete list of services we use, see our Third-Party Services documentation.

7. Data Retention

We retain your account data while your account is active. Upon account closure, your data will be deleted within one year or immediately upon your request. Anonymized and aggregated data may be retained indefinitely for analytics purposes.

8. Your Rights (EEA Residents)

If you are located in the European Economic Area, you have the following rights under GDPR:

  • Access: Request a copy of your personal data.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your personal data.
  • Restriction: Request limitation of processing.
  • Portability: Request transfer of your data to another service.
  • Objection: Object to certain types of processing.

You may also lodge a complaint with your local Data Protection Authority.

9. Cookies

We use only essential session cookies required for authentication. We do not use tracking cookies or third-party advertising cookies. Our analytics are privacy-friendly and do not track individual users.

10. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Data Protection Officer: Anthony Riera (CEO)
  • Email: anthony@cossistant.com
  • Address: 1007 N Orange St., 4th Floor, Wilmington, DE 19801, USA

If you have any questions about this document, please contact us at anthony@cossistant.com.