Privacy Policy

1. Personal Data We Collect

The categories of personal data we collect depend on how you interact with us, the Services you use, and the information you choose to provide.

1.1 Contact and Business Information

• Name
• Job title and professional role
• Business email address
• Phone number
• Company or organization name
• Industry and business-related details
• Country, state, or region

1.2 Account and Access Information

If you use restricted areas of our Services, we may collect:

• Usernames
• Encrypted or hashed passwords
• Authentication credentials
• Multi-factor authentication-related information
• User role and access permissions

1.3 Device, Technical, and Usage Information

When you access our website or Services, we may automatically collect:

• IP address
• Browser type and version
• Device type and identifiers
• Operating system
• Referring URLs
• Pages viewed and features used
• Timestamps and session information
• Error logs and diagnostic information

1.4 Information You Submit to Us

• Contact forms and inquiry submissions
• Demo, consultation, or meeting requests
• Scheduling information submitted through Calendly or similar tools
• Email communications
• Uploaded documents, images, files, or support materials
• Feedback, survey responses, and other communications
• Configuration settings, workflow preferences, and deployment-related inputs

1.5 Industrial, Operational, and Customer Data

As an industrial traceability technology company, Cosmodot may process operational and manufacturing data on behalf of business customers, including:

• Part identifiers, product identifiers, and traceability records
• CDOT AI Code-related operational data
• Production line information and workflow-related records
• Quality, inspection, and process information
• Supply chain and product movement records
• Machine, equipment, and integration data including PLC, SCADA, OPC-UA, or similar industrial system data

Where Cosmodot processes such data solely on behalf of a business customer, Cosmodot acts as a service provider or data processor, and the customer remains responsible for determining the lawfulness of its data collection and processing.

1.6 Cookies and Similar Technologies

We may collect information through cookies and similar technologies that support website functionality, analytics, security, and user experience. See Section 8 for more detail.

1.7 Information from Third Parties

We may receive business contact or professional information from third-party sources such as marketing tools, analytics providers, scheduling platforms, CRM tools, or publicly available business sources.

1.8 Sensitive Personal Data

Cosmodot does not intentionally request or collect sensitive personal data through its website or standard business workflows. Please do not submit sensitive personal data unless it is necessary and appropriately authorized.

2. Legal Bases for Processing

Where applicable under laws such as the GDPR, UK GDPR, or similar data protection laws, we process personal data on one or more of the following legal bases:

• Contract — Processing necessary to fulfill our contractual obligations to you
• Legitimate Interests — Operating and improving our Services, securing our systems, and supporting customer relationships — where not overridden by your rights
• Legal Obligation — Processing necessary to comply with applicable laws or lawful government requests
• Consent — Where required by law (e.g., certain marketing communications or non-essential cookies). You may withdraw consent at any time

3. How We Use Personal Data

• Provide, operate, maintain, and improve our Services
• Respond to inquiries, demo requests, support requests, and communications
• Schedule meetings, consultations, and product demonstrations
• Authenticate users and manage accounts
• Monitor performance, security, and reliability
• Analyze usage and improve user experience
• Send service-related notices and business communications
• Send marketing communications where permitted by law and subject to opt-out rights
• Comply with legal, regulatory, contractual, and audit requirements
• Protect our rights, users, customers, systems, and business operations

4. How We Share Personal Data

4.1 Service Providers and Vendors

We may share personal data with third-party vendors that support our operations, including providers of cloud hosting and infrastructure (including AWS — Cosmodot is an AWS Partner), analytics, CRM, scheduling, email delivery, and security services. These parties are authorized to process personal data only as necessary and subject to appropriate safeguards. A list of key service providers is available upon request at privacy@thecosmodot.com.

4.2 Business Customers and Authorized Parties

Where the Services are used in a business deployment, personal data or related records may be accessible to the relevant customer or authorized personnel under the applicable commercial agreement.

4.3 Legal and Compliance Purposes

We may disclose personal data when required to do so by law, subpoena, court order, or governmental request, or where necessary to protect rights, safety, property, or legal compliance.

4.4 Business Transfers

If Cosmodot is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of that transaction, subject to applicable legal protections.

4.5 With Your Direction or Consent

We may share personal data in other circumstances where you request or authorize us to do so.

4.6 No Sale of Personal Data

Cosmodot does not sell personal data for money. Cosmodot also does not use personal data for cross-context behavioral advertising as part of its standard business website operations.

5. International Data Transfers

Cosmodot is based in Florida, United States, and may process personal data in the United States and other countries where our service providers or business operations are located.

For users in the European Economic Area (EEA), the United Kingdom, or Switzerland, such transfers may be safeguarded by Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms. For details, contact privacy@thecosmodot.com.

6. Data Retention

We retain personal data for as long as reasonably necessary to provide and support the Services, maintain business and legal records, resolve disputes, enforce agreements, and comply with legal, tax, accounting, and regulatory obligations. Personal data no longer required will be securely deleted or anonymized.

To request deletion of your personal data, contact us at privacy@thecosmodot.com.

7. Data Security

We use reasonable technical, administrative, and organizational safeguards designed to protect personal data, including:

• Access controls and role-based permissions
• Multi-factor authentication
• Secure transmission methods (HTTPS/TLS)
• Logging and real-time monitoring
• Regular security audits and vulnerability assessments
• Incident response procedures, including breach notification as required by applicable law

No method of transmission over the internet is completely secure. Users are encouraged to safeguard their credentials and report any suspicious activity to privacy@thecosmodot.com.

8. Cookies and Similar Technologies

8.1 Types of Cookies We May Use

• Required — Strictly necessary for security and core site functionality (e.g., session management, login). Cannot be disabled.
• Functional — Remember preferences such as language or region selection and support improved performance.
• Analytics — Collect aggregated data on how users interact with the website. Tools may include Google Analytics. Data is anonymized where possible.

Cosmodot does not use advertising cookies for personalized consumer ad targeting as part of its standard website operations.

8.2 Cookie Choices

Where required by law, we will present a cookie banner allowing users to manage non-essential cookie preferences. You can also manage cookies through your browser settings. To opt out of analytics tracking, use the opt-out tools provided by the relevant analytics provider (e.g., Google Analytics Opt-out Browser Add-on).

8.3 Analytics and Embedded Services

Our website may use analytics tools and embedded services, including scheduling tools such as Calendly. These services may place their own cookies subject to their own privacy practices.

9. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of Access — Request confirmation of whether we process your data and obtain a copy
• Right to Correction — Request correction of inaccurate or incomplete personal data
• Right to Deletion — Request deletion where data is no longer needed, consent is withdrawn, or processing is unlawful
• Right to Object — Object to processing for direct marketing or based on legitimate interests
• Right to Data Portability — Receive your data in a structured, machine-readable format
• Right to Withdraw Consent — Withdraw consent at any time for consent-based processing
• Right to Restrict Processing — Request limitation of processing in certain circumstances
• Right to Lodge a Complaint — File a complaint with a relevant supervisory authority in your jurisdiction

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you may have rights including the right to know what personal information we collect, the right to access, correct, or delete your personal information, and the right to opt out of the sale or sharing of personal information. Cosmodot does not sell personal information for monetary consideration and does not knowingly share personal information for cross-context behavioral advertising in its standard website operations.

Exercising Your Rights

To exercise any of the rights above, contact us at privacy@thecosmodot.com. We will respond within the timeframes required by applicable law (generally 30 days under GDPR; 45 days under CCPA).

10. Children's Privacy

Our Services are intended for business and professional use and are not directed to children. We do not knowingly collect personal data from children under the age of 16. If we become aware that personal data has been collected from a child without appropriate consent, we will take steps to delete it promptly. To report concerns, contact privacy@thecosmodot.com.

11. Third-Party Links and Integrations

Our website and Services may include links to or integrations with third-party tools and platforms such as LinkedIn, YouTube, Calendly, and partner portals. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal data to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, our Services, or our business practices. When we do, we will revise the "Last Updated" date at the top of this page. Material changes may also be communicated through the website or by other appropriate means where required.

13. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us:

Cosmodot Inc.
Privacy Officer: privacy@thecosmodot.com
General Inquiries: info@thecosmodot.com
Address: 2200 NW 1st. Ave Apt 415, Miami, FL 33127, USA
Website: www.thecosmodot.com

Copyright © 2026 Cosmodot Inc. All rights reserved.  |  U.S. Patent No. 12,242,922  |  AWS Partner