1. Scope
This Privacy Policy applies to information collected through:
- our website;
- our Chrome extension;
- our hosted application and related interfaces; and
- support, communications, and other interactions related to the Services.
This Privacy Policy does not apply to third-party websites, services, or applications that we do not control, even if they are linked from or integrated with our Services. Those third parties have their own terms and privacy policies.
2. Information We Collect
We may collect the following categories of information.
A. Account and Profile Information
- Name
- Email address
- Company name
- Account identifiers
- Authentication and account-related information managed through our authentication provider, Clerk
B. User-Provided Business Information
- Company, account, prospect, and sales-related information submitted by users
- Notes, prompts, inputs, and other content users choose to provide through the Services
- Research data generated by COSaiL based on user input and activity within the Services
C. Call and Coaching Data
When the Chrome extension is actively used for call coaching, we may process:
- Microphone audio captured during active use
- Transcripts generated from captured audio
- AI-generated coaching outputs and related outputs
- Related metadata necessary to operate the Services, such as timestamps, session identifiers, and technical status information
COSaiL does not store raw audio recordings in its own systems. Audio is transmitted for transcription during active use of the Services as described in this Privacy Policy.
D. Usage, Device, and Log Information
When you use our website or Services, we and our service providers may automatically collect certain technical and usage information, such as:
- IP address
- Browser type and version
- Device type and operating system
- Pages viewed, features used, and interactions with the Services
- Dates, times, referring URLs, crash data, and diagnostic information
- Extension, application, and service performance logs
E. Cookies and Similar Technologies
We and our service providers may use cookies, local storage, pixels, or similar technologies to:
- keep users signed in;
- remember settings and preferences;
- maintain security;
- understand service usage and performance; and
- improve the website and Services.
You may be able to control certain cookies through your browser settings. Blocking some cookies may affect website or Service functionality.
F. Information From Other Sources
We may receive information from:
- service providers that support authentication, hosting, analytics, or support;
- integrations or tools you connect or authorize, if any;
- publicly available sources, where relevant to the user-facing research functionality of the Services; and
- communications you send us.
3. How We Process Call Data
When the Chrome extension is active and you choose to use call coaching functionality:
- the extension captures audio from the user’s microphone;
- audio is transmitted over encrypted connections to Deepgram for speech-to-text transcription;
- transcript text and related prompt context are transmitted to Groq to generate AI-assisted coaching outputs;
- coaching outputs are returned to the extension or related Service interface; and
- transcripts, outputs, and related research/session data may be stored in our systems to provide the Services, including historical transcript access and product functionality.
We do not use customer data to train our own AI models.
We may use service providers to process data solely as necessary to provide, secure, support, debug, or improve the Services, subject to this Privacy Policy and applicable agreements.
4. How We Use Information
We may use information we collect to:
- provide, operate, maintain, and support the Services;
- authenticate users and manage accounts;
- generate transcripts, coaching suggestions, research outputs, and related functionality;
- store and display historical transcripts and related data within the Services;
- personalize user experience within the Services;
- respond to support requests, account inquiries, and deletion requests;
- monitor, troubleshoot, debug, secure, and improve the performance, reliability, and functionality of the Services;
- detect, prevent, and address fraud, abuse, misuse, security incidents, and technical issues;
- comply with applicable law, legal process, or enforceable governmental requests; and
- enforce our terms, policies, and legal rights.
5. How We Disclose Information
We may disclose information in the following circumstances.
A. Service Providers and Infrastructure Providers
We may disclose information to third-party vendors and service providers that help us operate the Services, including:
- Clerk for authentication and account management;
- Deepgram for speech-to-text transcription;
- Groq for AI inference and related processing;
- Render for hosting, infrastructure, and database-related services; and
- other vendors that support analytics, security, communications, monitoring, or customer support, where applicable.
These parties process information on our behalf or as necessary to provide requested functionality.
B. Legal, Safety, and Protective Disclosures
We may disclose information if we believe doing so is reasonably necessary to:
- comply with applicable law, regulation, legal process, or governmental request;
- protect the rights, property, or safety of COSaiL, our users, or others;
- investigate, prevent, or respond to fraud, abuse, security incidents, or technical issues; or
- enforce our agreements, terms, and policies.
C. Business Transfers
We may disclose information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.
D. With Your Direction or Consent
We may disclose information where you direct us to do so or where you consent.
6. No Sale of Personal Information; No Advertising Use
We do not sell personal information.
We do not use or transfer personal information, transcript data, audio-derived data, or other personal or sensitive user data for:
- personalized advertising;
- retargeted advertising;
- interest-based advertising;
- data brokerage; or
- determining creditworthiness or lending purposes.
7. Chrome Extension Limited Use Disclosure
To the extent the Chrome extension receives, accesses, collects, or processes personal or sensitive user data, COSaiL uses that data only as necessary to provide or improve the extension’s disclosed, user-facing functionality, including real-time transcription, call coaching, related research, security, fraud prevention, debugging, support, and legal compliance.
COSaiL transfers such data to third parties only when necessary to provide or improve the Services, to comply with applicable law, to protect against fraud, abuse, or security threats, or in connection with a business transfer as permitted by applicable law.
Except in the limited circumstances described in this Privacy Policy, COSaiL does not allow humans to review personal or sensitive user data unless:
- we have the user’s consent for specific support or troubleshooting;
- it is necessary for security or abuse investigation;
- it is necessary to comply with law; or
- the data has been aggregated and de-identified for internal operations, where permitted.
The use of information received from Google APIs, if any, will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
8. Data Retention
We retain information for as long as reasonably necessary to provide the Services and for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
More specifically:
- Raw audio: COSaiL does not store raw audio recordings in its own systems.
- Transcripts and research data: retained until deleted following a valid account deletion request, unless a longer retention period is reasonably necessary for legal, security, fraud-prevention, dispute-resolution, backup, or enforcement purposes.
- Operational and application logs: retained for as long as reasonably necessary for security, debugging, fraud prevention, reliability, audit, and operational purposes.
- Groq request/debugging logs: Groq may retain certain request data for debugging or operational purposes for a limited period based on its service operations.
- Deepgram retention: based on our current configuration, Deepgram does not retain submitted audio for model training.
- Deletion requests: when a user requests deletion of an account, we will delete or de-identify associated data from active systems within approximately 5 business days, subject to technical constraints, legal obligations, fraud-prevention needs, dispute-resolution needs, and limited residual retention in backups, logs, or service-provider systems for a reasonable period.
At this time, users may not delete individual call transcripts independently of account deletion.
9. Data Security
We use administrative, technical, and organizational measures designed to help protect information, including:
- HTTPS / TLS encryption in transit;
- encryption at rest through our hosting provider’s default encryption mechanisms and related safeguards where applicable;
- role-based access restrictions;
- separation of production and development environments where feasible; and
- monitoring, logging, and other measures designed to detect and respond to security issues.
No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
10. Data Location and International Transfers
Our Services are intended to be operated from and processed in the United States. Information may be stored or processed in the United States or other jurisdictions where we or our service providers operate.
If you access the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in jurisdictions that may not provide the same level of data protection as your home jurisdiction.
Where required by applicable law, we will take reasonable steps to implement appropriate safeguards for cross-border transfers.
11. Logging and Operational Monitoring
To operate, secure, troubleshoot, and improve the Services, COSaiL and its service providers may maintain application, infrastructure, and operational logs. These logs may, in some circumstances, contain metadata or limited service content, including personal information or transcript-related information, as reasonably necessary for debugging, reliability, fraud prevention, abuse prevention, and security purposes.
12. Your Rights and Choices
Depending on where you live, you may have rights under applicable privacy laws, which may include the right to request access to, correction of, deletion of, or information about the personal information we maintain about you.
To submit a privacy request or account deletion request, contact us at: baptiste@cosail.io
We may need to verify your identity before processing a request. We may deny or limit requests where permitted by law, including where we cannot verify your identity, where fulfilling the request would infringe another person’s rights, or where retention is required or permitted by law.
Authorized agents may make requests on behalf of individuals where permitted by applicable law, subject to verification and proof of authorization.
At this time, users may not delete individual call transcripts independently of account deletion.
13. California and Other U.S. State Privacy Disclosures
This section applies to the extent required by applicable U.S. state privacy laws.
In the last 12 months, we may have collected the following categories of personal information:
- identifiers and contact information;
- commercial or professional information;
- internet or electronic network activity information;
- audio information;
- inferences and outputs derived from user-provided data or service use; and
- other information described in this Privacy Policy.
We collect this information from:
- you directly;
- your use of the Services;
- our service providers;
- connected tools or integrations you authorize, if any; and
- public sources relevant to Service functionality.
We collect and use this information for the business and commercial purposes described in this Privacy Policy.
We disclose these categories of information to the categories of recipients described in this Privacy Policy, including service providers, infrastructure providers, professional advisors, legal authorities where required, and parties involved in business transfers.
We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms may be defined by applicable law.
14. Lawful Use and User Responsibilities
You are responsible for using the Services in compliance with applicable law, including any laws requiring notice, consent, or authorization for recording, monitoring, transcription, or analysis of communications.
By using the Services, you represent that you have all rights, consents, and permissions necessary for COSaiL and its service providers to process information you submit or make available through the Services.
15. Children’s Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may provide notice by email, through the Services, by updating the “Last Updated” date above, or by other appropriate means, as required by applicable law.
Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acceptance of the revised Privacy Policy to the extent permitted by law.
17. Contact Us
If you have questions about this Privacy Policy or wish to submit a privacy or deletion request, please contact us at: