Privacy notice

Last updated: 8 November 2026

The developer of Cortex, based in Jordan, is responsible for the data this notice describes ("we", "us").

your work stays on your computer. Our server keeps your account, your plan and the list of computers you use Cortex on. We don't sell data, show ads, track what you do in Cortex, or train AI on your work.

On your computer

• Your settings, chats, projects, the files you add, the work the AI crew makes and the videos it renders.
• Keys and sign-ins for the services you connect.
• Leads the Money brain finds, and messages your customers send to your front desk.
• Your password and recovery code for this PC, kept in a form nobody can read back. They only unlock the key to your data.

Keys, chats, customers and settings are encrypted with AES-256. On Windows, the key is also protected for your Windows account. Files the crew makes stay as normal files, so you can open them.

On our server, if you make an account

• Your email address, your name, and your password as a one-way hash that nobody can turn back into the password.
• Your plan: which one, whether it's active and when it ends.
• The computers you use Cortex on: a random ID made on each one, the label "Windows PC", the Cortex version and when it last checked in. Nothing else about the computer.
• When you agreed to the terms, which version you agreed to, and that you confirmed you're 18 or older. The same for the tester agreement, and for features that act for you (Autopilot, the front desk) when you switch them on.
• Keys and invite codes you used, and when. Whether you're a tester, and a label the owner may give your account.
• Feedback you send: what you wrote, the files you added, your account and, if you ticked it, the problem report (your computer's Windows version, memory, Cortex's version and its recent log, with keys and passwords taken out).
• For one day after you sign up, a scrambled form of your network address, so one network can't make thousands of accounts.

The server runs on Supabase, in Frankfurt, Germany, in the European Union. Supabase keeps short technical logs, like network addresses, for up to a week to keep the service running and safe. The database lets each account read only its own rows. Everything else goes through our server functions, which check who is asking. The owner's admin page can see accounts, plans and feedback, to help people who are locked out, to give plans to testers and to fix what you report.

Why we use it

To run your account, give you the plan you paid for, deliver updates, stop abuse and answer you when you write. We rely on our agreement with you, and on our interest in keeping the service safe.

Payments

A payment company runs the checkout for paid plans. It receives your payment details and billing address under its own privacy policy. We receive your email, the plan, the amounts and whether each payment went through. We never see your card number. If you activate a licence key, Cortex checks it with that company now and then, sending only the key and a random ID for the computer. Payment records stay as long as tax law requires.

What leaves your computer, and only when you set it up

• AI providers you connect receive the instructions and content the brains and crew work on, under the provider's own terms.
• YouTube, Instagram and TikTok receive the videos and captions you approve, or that you put on autopilot. Cortex reads your account name and basic statistics.
• Telegram carries messages between you, your customers and Cortex, if you connect a bot. Twilio places the calls you ask for, if you connect it.
• Netlify receives the websites you choose to put online.
• Picture, music and voice services you add keys for, like Pexels, Pixabay, ElevenLabs, fal.ai or Google, receive the searches and text needed for your videos.
• Wikimedia Commons, Openverse and OpenStreetMap receive searches for free pictures, music and local businesses. Web searches and the pages the crew reads go to the sites involved.
• "Hey Cortex" listens on your computer, and the sound never leaves it. Your voice goes to Groq only if you choose Arabic voice commands or a speech service.

Cookies and tracking

The Cortex app uses no cookies, analytics or trackers. Neither does the Cortex website.

How long we keep it

Account data stays while you have the account and goes when you delete it, apart from payment records the law makes us keep. Feedback is kept for up to two years so we can follow up on problems, and you can ask us to delete it sooner. Records of what you agreed to are kept for as long as a claim about it could be made. What's on your computer stays until you delete it.

Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, to delete it, or to stop using it. You can delete your account yourself in Settings, Account. For anything else, write to invyedits1@gmail.com. You can also complain to the data protection authority where you live.

Security

Cortex talks to its server only over an encrypted connection, and our own keys never ship inside the app. No security is perfect, so use a strong password that you don't use anywhere else.

Children

Cortex isn't for children. You must be 18 or older to make an account.

Changes

A new version of this notice comes with a Cortex update and shows its date at the top. When a change matters, Cortex asks you to agree again.