Last updated: April 2026
When you create an account, we collect your email address and the information you provide during onboarding. When you use Cosius AI, we store the sessions, messages, and workflow runs created in your workspace. When you connect third-party integrations, we store OAuth tokens required to access those services on your behalf — we do not store the underlying data from those services beyond what is needed for a given session.
We use your data to provide the Cosius AI service: running agent sessions, executing workflows, and sending notifications you have requested. We do not sell your data to third parties. We do not use your session content to train AI models. Your workspace data is isolated from other workspaces via row-level security in our database.
Session transcripts and workflow run logs are retained according to your plan: 7 days on Free, 90 days on Pro, 365 days on Team and Enterprise. You can delete individual sessions or your entire workspace at any time from the Danger Zone settings page. Deletion is permanent and cannot be undone.
Cosius AI uses the following sub-processors: Supabase (database and authentication), Anthropic (AI inference), Composio (integration connectivity), Pinecone (vector memory storage), Stripe (payment processing), Upstash (rate limiting), and Vercel (hosting). Each operates under its own privacy policy. We pass only the data necessary for each service to function.
All data is encrypted in transit (TLS 1.3) and at rest. Authentication is handled by Supabase Auth with support for email/password and OAuth providers. Access to production systems is restricted to authorized personnel. We conduct regular dependency audits and apply security patches promptly.
You may request a copy of your data, correction of inaccurate information, or deletion of your account at any time by emailing contact@thinkworkflows.ai. If you are located in the EU, you have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with your supervisory authority.
We may update this policy from time to time. When we make material changes, we will notify workspace owners by email at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.
Questions about this policy? Email contact@thinkworkflows.ai. We aim to respond within 48 hours.