Privacy Policy
Last updated October 17, 2026
Cortryx ("Cortryx," "we," "us") lets you build a second brain that reflects how you think, connect the tools you already use, and have specialist AI agents carry out tasks on your behalf, checking with you when they aren't sure. This policy explains what information we collect, how we use it, and the choices you have. Questions can go to jacob@cortryx.com.
Information we collect
- Account information: your name and email address, and a password (handled by our authentication provider; we never see it in readable form).
- Workspace information: workspace names, who belongs to each workspace and their role, and the permissions an administrator has granted.
- Content you give us: knowledge-base entries and the beliefs and preferences you record, task instructions, agent settings, and your answers to questions an agent escalates to you.
- Connection information: which tools you have connected, the name or email address of the connected account, and the access credentials (tokens) the tool issues to us so Cortryx can act on your behalf.
- Activity records: a log of actions taken in your workspace, such as connecting a tool, creating or running a task, or resolving an escalation.
- Launch list: if you join our launch list, your name and email address.
Google user data
If you connect a Google account, you choose to give Cortryx the specific permissions listed below. Cortryx requests only these:
- Send email (gmail.send): to send an email from your Gmail address when you direct a task to do so. Cortryx does not read your inbox or any existing email.
- Calendar events (calendar.events): to list upcoming events on your calendar and to create events when you direct a task to.
- Drive files created by Cortryx (drive.file): to create files in your Drive and to list files that Cortryx itself created. This permission does not let Cortryx see the rest of your Drive.
- Your email address (userinfo.email): to show which Google account is connected.
We use this access only to carry out the actions you or your workspace direct, and to provide and improve those user-facing features. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalized artificial intelligence or machine learning models. Our own staff do not read your Google data unless you ask us to, it is necessary for security or abuse investigation, or the law requires it.
Today, data we receive from Google is not sent to any AI model provider. If that ever changes, we will update this policy before it does and, where required, ask for your consent first.
Cortryx's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
- To provide Cortryx: running your agents and tasks, and keeping your knowledge base.
- To act through the tools you connect, only as you or your workspace direct.
- To secure the service, prevent abuse, and fix problems.
- To contact you about your account, and, if you joined it, about our launch.
When you ask Cortryx to process text you provide (for example, a task instruction or a document you add to your knowledge base), that text may be sent to an AI model provider to generate a response.
Connections, administrators, and sharing
Each connection is to an individual person's own account in a tool. By default a connection can be used only by the person who made it. A workspace administrator can choose to share a connection with the rest of the workspace, can remove any connection, and decides who may add connections.
Workspace administrators can also reveal the access credential for a connection in their workspace. To do so they must re-enter their password, and every reveal is recorded in the workspace activity log. Credentials are never shown to agents, and are never shown to anyone who is not an administrator of that workspace.
How we protect it
Access credentials are encrypted at rest and stored apart from the rest of your data. Our database enforces access rules so that members of one workspace cannot read another workspace's data. Data is sent over encrypted connections. No system is perfectly secure, but we design to limit what any one person or process can reach.
Who we share information with
We do not sell your information. We use service providers to run Cortryx, and they process data only on our behalf:
- Supabase, for our database and sign-in.
- Vercel, for hosting.
- Anthropic, for AI processing of text you ask Cortryx to work on.
- The tools you connect (such as Google, Slack, GitHub), when an action you directed calls their service.
We may also disclose information if the law requires it or to protect the rights, safety, or security of our users or the service.
Retention and deletion
When you disconnect a tool, the stored credential is deleted. You can also revoke Cortryx's access at any time from the tool itself; for Google, that is myaccount.google.com/permissions. To delete your account and the data we hold about you, email jacob@cortryx.com; we will delete it promptly and in any event within 30 days, except where the law requires us to keep something.
Your choices
You can access and correct your account information in the app, edit or remove entries in your knowledge base, disconnect any tool you connected, and ask us to delete your data as described above.
Children
Cortryx is not directed to children under 16, and we do not knowingly collect their information.
Changes to this policy
We may update this policy. When we make a material change we will update the date above and, where appropriate, notify you.