Privacy notice

The operator

Cortana is the service name. This website does not publish a legal name or postal address for the operator. Both are available on request. Write to [email protected].

What we collect

• Account. Your name, email address, and a hash of your password, plus whether the email is verified. The account system keeps a session. A session can include the IP address and the browser user agent. We also store which workspaces you belong to.
• Payment records. The amount, currency, and status, a description you supply, and a reference to the payment account you connected. If you add them, we store the name and email of your customer, and your own reference for the payment. Card and bank details are entered at the payment account you connect. Cortana does not store the card number.
• Secrets. Secret keys and webhook secrets for a payment account you connect are encrypted at rest. The product shows a short mask. The full secret is write-only in the dashboard.
• Security records. Audit logs may store an IP address and a user agent, together with the action, so misuse can be investigated.
• Email and bot checks. We keep the address a message was sent to and whether sending succeeded. The message body is not kept in that record. Forms that check for bots send a check token to the bot-check service.
• Manual payment proof. If a customer uploads proof of a manual payment, we store that file and any note, for the merchant to review.
• Cookies. The service uses cookies to keep you signed in, to remember the active workspace, and to remember test or live mode.

Why we collect it

We use this data to open and run your account and workspace, to create and show payment records, to charge the plan you choose, to send account email, to block automated sign-ups, and to protect the service. If you charge a customer, you decide what to tell them about your business. This notice covers Cortana. It does not replace the notice you give your own customers.

How long we keep it

We keep payment records while the workspace is open, and for as long as we need them for a dispute or a duty that applies to the operator. We keep account data while the account exists. If you ask us to delete it, we delete what we can and keep the payment records a dispute still needs. Audit and session details that hold an IP address or a user agent are kept for security and then removed. This notice does not state a fixed number of days.

Who else handles data

Other services handle data only for the job named here. These are the categories:

• Email delivery. Account email is sent through Resend.
• Bot check. Forms that ask whether a visitor is a person use Cloudflare Turnstile.
• Database host. Account, payment, and audit records are stored in the Postgres database the operator runs. This page does not name the company that hosts that database.
• The payment accounts you connect. The provider for an account you connect processes that payment, including card data the customer enters there. That account is yours. Connections in one workspace are not shared with another merchant.

No sale of personal data

We do not sell personal data. We share it with the categories above to run the service, and with the people in your workspace.

Access and deletion

Email [email protected] and say whether you want a copy of your account data, a correction, or deletion. We may ask you to show that you control the account before we change anything. We can limit a request while a dispute is open, while a payment record has to be kept, or while a legal duty requires us to keep it.

How to read these pages

These are general terms. They are not a substitute for legal advice. A signed order beats this website summary. Where a signed order disagrees with this page, the signed order controls.