Privacy Notice
1. Who we are
Controller: Cognitive Creations (Roberto Daniel Velasquez Portilla), Mexico.
Privacy contact: support@cognitivecreations.com.mx
2. Purpose
We provide invited users access to an AI Agent Lab to learn about agents, RAG, MCP tools, and related workflows. Accounts, chat history, uploaded lab files, and configuration data exist solely to support that learning experience.
3. Data we may process
- Account data: email, name, password (hashed), tenant/sandbox assignment.
- Lab activity: chat messages, agent prompts, tool calls, uploaded documents, CSV lab files, support tickets (if used).
- Workplace DSAR demo: fictional employee records (phone, address, salary, health notes) for training only — do not enter real personal or health information.
- Donations (optional): if you choose to donate, name and email are collected on the separate CourseToken/Stripe checkout page.
- Technical logs: server and error logs may include IP address, user agent, and timestamps.
4. Legal bases (summary)
- Lab access: performance of invitation/contract and legitimate interest in operating the educational service.
- Security: legitimate interest (session management, CSRF protection).
- Donations: your consent when you proceed to voluntary checkout.
5. Processors and third parties
- OpenAI — chat completions and agent tool orchestration (prompts and responses may be sent to OpenAI API).
- Hosting provider — application and database hosting.
- Stripe (via CourseToken) — optional card donations only when you leave the lab for checkout.
- Email provider (if configured) — outbound lab emails from demo modules.
Some processors are located in the United States. Data may be transferred internationally subject to their terms and applicable law.
6. Retention
Lab data may be reset, deleted, or overwritten without notice as part of maintenance or tenant cleanup. We do not guarantee fixed retention periods for demo tenants. Do not rely on this lab for long-term storage of any information.
7. Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. The in-app Privacy & DSAR feature is a demonstration only — it does not fulfil legal DSAR obligations.
To exercise rights in relation to your real account data, email support@cognitivecreations.com.mx. We will verify your identity before responding manually.
8. Children
The lab is not directed at children under 16. Access is by invitation only.
9. Changes
We may update this notice. The “Last updated” date at the top will change when we do. Continued use after changes constitutes acknowledgment of the updated notice for the educational lab context.