Privacy Policy
Last updated: 2026-03-25
Kosmico ("we", "us", or "our") operates kosmico.ai. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and services.
Data Controller
The data controller responsible for processing your personal data is:
Kosmico SAS
15 impasse des Violettes, 01280 Prévessin-Moëns, France
SIREN 106 009 376
privacy@kosmico.ai
Information We Collect
Account Data
When you sign in via Google, GitHub, or email, we receive your name, email address, and profile picture from the authentication provider. This data is stored securely and used to manage your account.
Analytics Data
We measure usage ourselves, on our own infrastructure in the EU — no third-party analytics service is involved. We record which pages are visited, device and browser type, and which features are used. This is done without cookies and without storing any identifier in your browser: visitors are counted using a hash of IP address and browser that our server rotates daily, so the same visitor cannot be recognised from one day to the next. We never collect the contents of your documents or messages.
Waitlist & Contact Data
If you request access to our private beta, we collect your email address and any optional details you provide (name, what you do, LinkedIn). This data is stored on our own infrastructure and used to manage beta invitations; invitation emails are delivered via Resend.
How We Use Your Data
- Provide and maintain our services (authentication, community features)
- Improve our website and product based on aggregate usage patterns
- Communicate product updates and respond to inquiries
- Ensure security and prevent abuse
Legal Basis for Processing (GDPR)
| Purpose | Legal Basis | Details |
|---|---|---|
| Authentication & Account | Contract performance (Art. 6(1)(b)) | Necessary to provide the service you signed up for |
| Analytics | Legitimate interest (Art. 6(1)(f)) | Cookieless, first-party usage measurement; no cross-site tracking and no third-party service |
| Waitlist | Consent (Art. 6(1)(a)) | You voluntarily submit your email to join |
| Security | Legitimate interest (Art. 6(1)(f)) | Protecting our services and users from abuse |
Third-Party Services
| Service | Purpose | Data Location |
|---|---|---|
| Resend | Transactional email (verification, beta invitations) | US |
| GitHub | Hosts public desktop app release downloads | US |
International Data Transfers
Some of our processors (Resend, Google, GitHub) are located in the United States. When personal data is transferred outside the European Economic Area, we rely on appropriate safeguards, namely the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework.
Cookies
We use a limited number of cookies, and all of them are strictly necessary — so there is no cookie banner to click through. We set no analytics or advertising cookies at all.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
__Secure-next-auth.session-token | Authentication session | Necessary | Session |
kosmico_locale | Stores your language preference | Necessary | 1 year |
Your Rights
Under the GDPR and other applicable privacy laws, you have the following rights regarding your personal data:
- Access: request a copy of your personal data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your personal data
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Object to analytics: turn off usage analytics at any time in the Kosmico app under Settings → General → Privacy
- Lodge a complaint: file a complaint with the CNIL (the French data protection authority) or your local supervisory authority
Data Retention
Account data is retained while your account is active. Usage analytics are kept on our own infrastructure as aggregate and event-level records; if you delete your account, the analytics records tied to it are deleted with it. Waitlist data is retained until the product launches publicly or you request deletion. You can request deletion of your data at any time by contacting us.
Contact
For privacy-related questions or to exercise your rights, contact us at privacy@kosmico.ai
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.