Privacy Policy
Effective Date: February 15, 2025
At CognitFlash, we take your privacy seriously. This policy explains how we handle your personal information when you use our financial analysis platform. We're based in South Korea and follow Korean data protection laws, but we also align with international standards because we respect your rights regardless of where you're accessing our services from.
Look, privacy policies are usually boring. We get it. But this one matters because we're dealing with financial data, and that's something you need to feel secure about. We've tried to write this in plain language so you actually know what's happening with your information.
What Information We Collect
Account and Profile Data
When you sign up for CognitFlash, we collect basic information to set up your account. This includes your name, email address, company affiliation, and professional role. If you're subscribing to a paid plan, we'll also collect billing information — though payment details are processed through secure third-party payment processors, not stored directly on our servers.
Usage and Analytics Information
We track how you interact with our platform. This includes which financial analysis tools you use, how often you log in, which reports you generate, and what features you find most useful. This data helps us understand what's working and what needs improvement. We also collect technical information like your IP address, browser type, and device information — standard stuff that helps us keep the platform running smoothly.
Financial Research Data
Here's where it gets specific to what we do. When you use our analysis tools, we collect data about your research activities — the companies you're analyzing, the metrics you're tracking, and the reports you're creating. This data stays associated with your account so you can access your work history and saved analyses.
We don't sell your personal information to third parties. Period. Our business model is based on subscription fees, not data monetization.
How We Use Your Information
We use the data we collect for several purposes, and honestly, most of them are probably what you'd expect:
- Providing and maintaining the platform — making sure everything works when you need it
- Processing your transactions and managing your subscription
- Sending you important updates about service changes or account issues
- Improving our analysis tools based on how people actually use them
- Detecting and preventing fraud or unauthorized access
- Complying with legal obligations under Korean financial regulations
Communication Preferences
We'll send you essential account-related emails — things like password resets, billing confirmations, and critical service updates. You can't opt out of these because they're necessary for the service to function. But for marketing emails or feature announcements? Those are optional, and you can unsubscribe anytime through the link in each email.
Data Storage and Security
Your data is stored on secure servers located in South Korea. We use industry-standard encryption — both when data is transmitted between your device and our servers, and when it's sitting in our database. Our infrastructure includes firewalls, access controls, and regular security audits.
That said, no system is 100% secure. We can't guarantee absolute security, but we do everything reasonably possible to protect your information. We also train our team on data protection practices and limit access to personal data to only those employees who need it to do their jobs.
Data Type | Retention Period | Reason |
---|---|---|
Account Information | Duration of active account plus 3 years | Legal compliance and service continuity |
Financial Analysis Data | Duration of active account plus 5 years | Korean financial record-keeping requirements |
Usage Analytics | 2 years from collection | Service improvement and optimization |
Billing Records | 7 years from transaction | Tax and accounting regulations |
Sharing Your Information
We don't share your personal information widely, but there are specific situations where we need to:
Service Providers
We work with third-party companies that help us run the platform — payment processors, cloud hosting providers, email delivery services, and analytics tools. These companies only get access to the data they need to perform their specific functions, and they're contractually required to keep your information secure and not use it for their own purposes.
Legal Requirements
If we receive a valid legal request from Korean authorities or international regulators, we may need to disclose your information. We'll always review such requests carefully and only provide what's legally required. Where possible, we'll notify you before disclosing your data, unless prohibited by law.
Business Transfers
If CognitFlash is acquired by another company or merges with one, your data would likely be transferred as part of that transaction. We'd notify you beforehand and ensure the new entity honors this privacy policy.
Your Rights and Choices
You have several rights regarding your personal data. Here's what you can do and how to do it:
Access Your Data
You can request a copy of all personal data we hold about you. Log into your account and navigate to Settings → Privacy → Download My Data. We'll compile everything into a readable format and send it to your registered email within 15 business days.
Correct Inaccurate Information
If any of your account information is wrong or outdated, you can update it directly in your account settings. For data you can't change yourself, contact our support team at support@cognitflash.com.
Delete Your Account
You can request full account deletion at any time. This is permanent and cannot be undone. Your financial analyses, saved reports, and account history will be deleted within 30 days of your request. Note that we may retain certain data for longer periods if required by Korean financial regulations — specifically billing records and transaction logs.
Object to Processing
You can object to certain types of data processing, like marketing analytics. Contact us to discuss your specific concerns, and we'll work with you to find a solution that meets both your needs and our legal obligations.
To exercise any of these rights, email us at support@cognitflash.com with "Privacy Request" in the subject line. We'll respond within 10 business days and complete most requests within 30 days.
International Data Transfers
Our servers are in South Korea, but we have users accessing our platform from various countries. When you use CognitFlash from outside South Korea, your data travels across international borders. We ensure these transfers comply with applicable data protection laws through standard contractual clauses and appropriate safeguards.
If you're accessing our service from the European Union, United States, or other regions with specific data protection requirements, you maintain all rights granted under those jurisdictions, even though our primary operations are based in South Korea.
Cookies and Tracking Technologies
We use cookies — small text files stored on your device — to keep you logged in, remember your preferences, and understand how you use the platform. Most are essential for the service to function properly. Others help us analyze usage patterns and improve features.
You can control cookie preferences through your browser settings, but disabling certain cookies may affect platform functionality. We don't use third-party advertising cookies because we don't run ads on our platform.
Children's Privacy
CognitFlash is designed for investment professionals and financial analysts. We don't knowingly collect information from anyone under 18 years old. If you're under 18, please don't create an account or provide any personal information. If we discover we've accidentally collected data from a minor, we'll delete it immediately.
Changes to This Policy
We update this policy periodically as our services evolve or regulations change. When we make significant changes, we'll notify you via email and display a prominent notice on the platform for at least 30 days. The "Effective Date" at the top shows when the current version took effect.
Continued use of CognitFlash after policy updates means you accept the revised terms. If you disagree with changes, you can close your account before they take effect.
Specific Rights Under Korean Law
As a South Korean company, we comply with the Personal Information Protection Act (PIPA). Korean residents have specific rights under this law, including the right to request suspension of data processing and the right to compensation for damages resulting from privacy violations.
We've appointed a Chief Privacy Officer responsible for handling privacy-related matters and ensuring PIPA compliance. You can reach our CPO directly at privacy@cognitflash.com for any concerns specific to Korean data protection law.
Questions or Concerns?
Jeonju-si, Jeollabuk-do, South Korea