▸▸▸ privacy policy
## 00 · the short version
This site collects almost nothing. Analytics to see what gets read, and your details if you write to us or book a call. We sell nothing to no one. If we work together, your data lives in your infrastructure — not ours. The rest of this page is the detail.
## 01 · who we are
With Cosmo ("we", "us") is operated by Marcos in the United States. We run withcosmo.ai. For anything privacy-related, one email does it:
▸ marcos@withcosmo.ai## 02 · what we collect
The site has no accounts and no newsletter. What reaches us:
When you email us — your name, your email address, and whatever your message says. That goes straight to an inbox; nothing on the site intercepts it.
When you book a call — the name, email address, and anything else you enter while scheduling. Booking runs through Calendly, our scheduling provider, under its own privacy policy.
Analytics — pages visited, time on page, referring site, browser and device type, and country/city-level location. Collected through Google Analytics and Vercel Analytics.
Hosting logs — our host, Vercel, keeps standard server logs (IP address, requests) to run and secure the site.
## 03 · cookies
Vercel Analytics is cookieless. Google Analytics sets cookies to tell returning browsers apart — you can block or clear those in your browser settings, or opt out of Google Analytics everywhere with Google's opt-out browser add-on. The booking flow is Calendly's, and it may set its own cookies while you schedule. The site itself sets no other cookies. (It does use your browser's local storage to remember that you've seen the boot intro — that never leaves your device and tracks nothing.)
## 04 · how we use it
To reply when you write to us. To see which pages get read and make the site better. To keep the site up and secure. That's the whole list. Your information is never sold, traded, or rented — no ads, no retargeting, no data brokers.
## 05 · who else touches it
The service providers that make the site run: Vercel (hosting and analytics), Google (analytics), and Calendly (scheduling), each under its own terms. Beyond that, we'd only disclose your data if the law required it, or as part of a business transfer — in which case this policy travels with the data.
## 06 · client data
This page covers the website. If we work together, the system runs inside your infrastructure: your data lives in your accounts and your database — Cosmo connects to it, it doesn't swallow it. Access runs through permissions you grant and can revoke. The system runs on third-party foundation models whose terms state your data isn't used for training. The controlling document for an engagement is your contract, not this page.
## 07 · how long we keep it
Email correspondence: for as long as the conversation — and any engagement that follows — needs, then deleted. Analytics: the standard retention windows of Google Analytics and Vercel Analytics. Hosting logs rotate automatically.
## 08 · your rights
Wherever you are, you can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. If you're in the EEA or UK, these are your GDPR rights — access, rectification, erasure, restriction, portability, objection, and withdrawing consent. If you're in California, the CCPA gives you similar rights — including knowing that we don't sell personal information (we don't). One email:
▸ marcos@withcosmo.ai## 09 · security
Sensible, standard measures: HTTPS everywhere, minimal collection, and access limited to exactly one person — there's only one of us. No method of transmission or storage is 100% secure, and anyone promising you otherwise is selling something.
## 10 · children
This site isn't directed at children under 16, and we don't knowingly collect their information. If you believe a child has sent us personal data, email us and we'll delete it.
## 11 · changes
If this policy changes, the date at the top changes with it. Anything material gets said plainly, not buried.