Cookiy AI privacy & data

This Privacy Policy describes how Cookiy processes personal information that we collect through our digital or online properties or services

Contact data — such as your first and last name, salutation, email address, billing and mailing addresses, professional title and company name, and phone number.

Government-issued identification number data — such as national identification number (e.g., Social Security Number, tax identification number, passport number)

Payment data — needed to complete transactions, including payment card information or bank account number.

Precise geolocation data — when you authorize the Service to access your device's location.

Online activity data — such as pages or screens you viewed, how long you spent on a page or screen

Device data — such as your computer or mobile device's operating system type and version, manufacturer and model, browser type

Demographic data — such as your city, state, country of residence, postal code, and age.

Communications data — based on our exchanges with you, including when you contact us through the Service

Contact details; interview audio and video recordings; transcripts; survey responses; voluntarily provided demographic information; device and usage metadata.

voluntarily provided demographic information

device and usage metadata

interview audio and video recordings; transcripts; survey responses

Provide the Service and operate our business

analyze your usage of the Service, improve the Service

Direct marketing — We may send you direct marketing communications

Comply with applicable laws, lawful requests, and legal process

to train our AI models and for other machine learning purposes

Provision of the Cookiy AI user-research platform to Customer under the Agreement.

AI-moderated interviews, surveys, transcription, analysis, and report generation performed on Customer's behalf.

Cloud infrastructure, storage, interview recordings

delete or return all Personal Data processed on Customer's behalf within 30 days

We are headquartered in the United States and may use service providers that operate in other countries.

Cookiy processes Personal Data primarily in the United States.

United States

the Standard Contractual Clauses adopted by the European Commission in Decision (EU) 2021/914, Module Two (Controller to Processor), are incorporated into and form part of this DPA

the International Data Transfer Addendum to the EU Standard Contractual Clauses issued by the UK Information Commissioner is likewise incorporated and applies to such transfers.

Each is bound by a data processing agreement including Standard Contractual Clauses where applicable.

Customer provides general written authorization for Cookiy to engage the Sub-processors listed at cookiy.ai/subprocessors/ .

Data Processing Agreement Version 1.0 — Effective July 15, 2026

If you wish to request to close your account, please contact us.

you may review and update certain account information by logging into the account

You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us.

Cookiy will assist Customer through appropriate technical and organizational measures in responding to Data Subject requests under Articles 12–23 GDPR

Customer may conduct an audit upon at least 30 days' written notice, no more than once per year