Privacy Policy
Last updated: 2026-03-25
Kosmico ("we", "us", or "our") operates kosmico.ai. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and services.
Data Controller
The data controller responsible for processing your personal data is:
Kosmico SAS
15 impasse des Violettes, 01280 Prévessin-Moëns, France
SIREN 106 009 376
privacy@kosmico.ai
Information We Collect
Account Data
When you sign in via Google, GitHub, or email, we receive your name, email address, and profile picture from the authentication provider. This data is stored securely and used to manage your account.
Analytics Data
With your consent, we use PostHog (hosted in the EU) to collect anonymous usage data such as pages visited, device type, browser, and interactions. This data helps us improve the product. No analytics data is collected without your explicit consent.
Waitlist & Contact Data
If you request access to our private beta, we collect your email address and any optional details you provide (name, what you do, LinkedIn). This data is stored on our own infrastructure and used to manage beta invitations; invitation emails are delivered via Resend.
How We Use Your Data
- Provide and maintain our services (authentication, community features)
- Improve our website and product based on usage patterns (with consent)
- Communicate product updates and respond to inquiries
- Ensure security and prevent abuse
Legal Basis for Processing (GDPR)
| Purpose | Legal Basis | Details |
|---|---|---|
| Authentication & Account | Contract performance (Art. 6(1)(b)) | Necessary to provide the service you signed up for |
| Analytics | Consent (Art. 6(1)(a)) | Only with your explicit opt-in via the cookie banner |
| Waitlist | Consent (Art. 6(1)(a)) | You voluntarily submit your email to join |
| Security | Legitimate interest (Art. 6(1)(f)) | Protecting our services and users from abuse |
Third-Party Services
| Service | Purpose | Data Location |
|---|---|---|
| PostHog | Product analytics | EU (Frankfurt) |
| Resend | Transactional email (verification, beta invitations) | US |
| GitHub | Hosts public desktop app release downloads | US |
International Data Transfers
Some of our processors (Resend, Google, GitHub) are located in the United States. When personal data is transferred outside the European Economic Area, we rely on appropriate safeguards, namely the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework.
Cookies
We use a limited number of cookies. Authentication cookies are strictly necessary and do not require consent. Analytics cookies are only set with your explicit permission.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
__Secure-next-auth.session-token | Authentication session | Necessary | Session |
cc_cookie | Stores your cookie consent preferences | Necessary | 182 days |
kosmico_locale | Stores your language preference | Necessary | 1 year |
ph_* | PostHog analytics (session ID, distinct ID) | Analytics | 1 year |
You can change your cookie preferences at any time via .
Your Rights
Under the GDPR and other applicable privacy laws, you have the following rights regarding your personal data:
- Access: request a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your personal data
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Withdraw consent: revoke analytics consent at any time via Cookie Settings
- Lodge a complaint: file a complaint with the CNIL (the French data protection authority) or your local supervisory authority
Data Retention
Account data is retained while your account is active. Analytics data is retained according to PostHog's default retention policy (currently 1 year). Waitlist data is retained until the product launches publicly or you request deletion. You can request deletion of your data at any time by contacting us.
Contact
For privacy-related questions or to exercise your rights, contact us at privacy@kosmico.ai
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.