Privacy: current data flows

Contact

Jasenthu Kankanamge Shehan Akalanka Samarasena
Schweppermannstr. 27
90408 Nuremberg, Germany
info@cognivoxlabs.de

Contact the operator with questions about your data or requests for access, correction or deletion.

Accounts and saved letters

Better Auth manages email/password login, sessions and Google login. Account data, session data (including IP address and browser identification), profile name, saved letters and billing references are stored in PostgreSQL. Letters are persisted when you choose a save action. Local input is sent to the server when you use an AI feature.

Google Gemini

When you start an AI feature, our server sends the submitted text or uploaded document and related instructions to Google Gemini. This includes drafting, analysis, enhancement and translation. Documents may contain names, addresses and other personal information. PDF, DOCX and print are generated locally without calling Gemini.

Google login

Google processes the Google sign-in interaction. Better Auth stores the linked identity, email, name and, where supplied, profile image and provider tokens. Your browser may fetch a profile image from its image provider.

Stripe

We use Stripe Checkout and the Stripe customer portal for payments and subscriptions. Our server sends email, an internal user reference and the selected plan. Stripe processes payment details entered in its payment form. We store customer, subscription and payment references, statuses and entitlements.

Address lookup

As you type an address, your browser may send the search text directly to Nominatim (OpenStreetMap). The service also receives your IP address and browser request information. Searches start after a short typing pause, from three characters.

Email and recovery

When email delivery is enabled, the recipient address and verification or password-reset link are sent through Resend. Delivery is unavailable until a provider is configured.

Browser storage, PWA and sharing

Authentication cookies maintain sessions. The PWA caches public assets; API responses and page navigations are not cached for offline use. Browser storage also holds local preferences, export/feedback counters and temporarily selected templates. Share passes the selected file to your browser or operating-system sharing feature. Webmail and WhatsApp actions download the file and open the selected service.

Operations and privacy review

Servers and service providers may process technical logs. The operator needs to review and complete retention periods, hosting locations, legal bases, processor agreements and possible international data transfers. This technical description does not make guarantees about those matters. Account deletion is not currently available inside the app.