Last updated: October 6, 2026
Cognaisec (“we”, “us”, “our”) provides an AI Powered Cyber Security Platform, including AI agent bug bounty hunting, automated security tasks, testing of vibe-coded applications, AI agent training and cybersecurity training. This policy explains what information we collect, how we use it, and the choices you have when you visit cognaisec.com or use our services.
By using our website or services, you agree to the practices described here.
Information We Collect
Information you give us
- Name, email address, phone number, company name and job title when you fill in the Contact or Request Quote forms.
- Meeting preferences, such as the date and time you choose when booking a client meeting.
- The content of messages, project descriptions and scope details you send us.
- Account and payment details if you register for training or purchase a product (payments are handled by third-party processors; we do not store full card numbers).
Information collected automatically
- IP address, browser type, device type, operating system and language.
- Pages visited, time on page, referring URL and general location (country or city level).
- Cookies and similar technologies (see Section 6).
Information from client engagements
When you hire us for security services, we may access applications, source code, infrastructure details, credentials, test environments and vulnerability data. This is handled under your service agreement and Section 5 below, in addition to this policy.
How We Use Your Information
- To respond to enquiries and prepare quotes.
- To schedule and run meetings.
- To deliver, maintain and improve our products, services and training.
- To send service updates, security notices and, where permitted, marketing emails (you can opt out at any time).
- To protect our website against abuse, fraud and security threats.
- To meet legal and contractual obligations.
Legal Bases (where applicable)
If you are in the EEA, UK or a similar jurisdiction, we process personal data based on your consent, performance of a contract, our legitimate interests (such as securing our platform and improving services) and legal obligations.
How We Share Information
We do not sell your personal information. We share it only with:
- Service providers that help us run the business, such as hosting, email, analytics, scheduling and payment processors, under confidentiality obligations.
- AI infrastructure providers, where needed to operate our AI agents, subject to the safeguards in Section 5.
- Authorities or legal advisers, when required by law or to protect our rights.
- A successor entity, in the event of a merger, acquisition or sale of assets.
Our Training site (training.cognaisec.com) and Blog (bughuntinginsights.com) are separate properties and may have their own privacy notices.
Client Data, Security Testing and AI
- Client data and findings are used only to perform the agreed engagement.
- We do not use confidential client data, source code or vulnerability findings to train public AI models without your written consent.
- Vulnerability reports are shared only with you, or with the relevant bug bounty platform where you have authorised it.
- Access to client data is limited to authorised personnel and secured with appropriate technical controls.
- We delete or return client data at the end of an engagement, according to your agreement with us.
Cookies and Analytics
We use cookies to keep the site working, remember preferences and understand how visitors use it. You can block or delete cookies in your browser settings, though some features may not work properly. Where required by law, we ask for your consent before setting non-essential cookies.
Data Retention
We keep personal data only as long as needed for the purposes above, or as required by law. Enquiry data is generally kept for up to 24 months unless a business relationship follows. Client engagement data is retained as set out in your contract.
Data Security
We use reasonable measures, including encryption in transit, access controls and regular security reviews, to protect your information. As a cybersecurity company we take this seriously, but no system is completely secure, and we cannot guarantee absolute security.
Your Rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to your local data protection authority. To exercise these rights, email us at contact@cognaisec.com. We may need to verify your identity before responding.
International Transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards, such as standard contractual clauses.
Responsible Disclosure
If you find a security issue on our website, please report it to contact@cognaisec.com. We appreciate responsible disclosure and will respond promptly.
Changes to This Policy
We may update this policy from time to time. The “Last updated” date at the top shows the latest version, and we will give notice of material changes on this page.
Contact Us
Cognaisec
Email: contact@cognaisec.com
Website: https://cognaisec.com