Privacy Policy

Cerino is operated by Logos Strategy Co. LLC (“we”, “us”), based in Colorado Springs, Colorado, United States. This policy explains what we collect when you use Cerino, including the Cerino web app at cerino.ai and the Cerino connector for AI assistants such as Claude and ChatGPT, what we do with it, and the choices you have.

The short version

• Your company’s content belongs to your company. We process it to run Cerino for you, and for nothing else.
• We do not sell personal information, share it for advertising, or use your content to train AI models.
• Nothing enters your company’s Brain until a named person in your organization approves it.
• The Cerino connector receives only what your AI assistant sends in a tool call. It does not read your chat history.

Our role

When a business subscribes to Cerino, that business decides what content goes in and who can see it. For that content we act as a service provider (a “processor” under the GDPR) on the business’s instructions, under our Terms and any data processing agreement we sign with it. If you use Cerino through your employer, your employer’s own privacy notice also applies, and requests about that content are best made to them; we will help them answer.

For account information, the website, and our own business records, we decide how the information is used, and this policy describes it.

What we collect

Account information

When you sign in with Google or Microsoft, we receive your name, email address and an account identifier from that provider. We record your organization, your role in it, and when you signed in.

Content you and your organization add

Documents, notes, messages to the Cerino Advisor, the memories, goals, issues and records of people and organizations your team creates, the proposals Cerino drafts from them, and every approval or rejection with the name of the person who made it. That audit trail is the product: it is how your company can show who approved what, and when.

Information from tools you connect

If your organization connects another tool to Cerino, we receive the records that tool sends and keep the authorization needed to fetch them. You choose which tools to connect and can disconnect them at any time.

Information from AI assistants (the Cerino connector)

When you add Cerino to Claude, ChatGPT or another assistant, the assistant calls Cerino’s tools on your behalf. Cerino receives the inputs of each call (for example the question being looked up, or the text of a memory being proposed) and the name the assistant registered with, so a proposal can show which assistant it came through. Cerino does not receive your conversation, your assistant’s memory or your files, except what the assistant puts into a tool call. See how the connector works.

Technical information

Request logs (time, address, the operation called, and its outcome) and error reports, used to keep the service running and secure. The app keeps a sign-in session cookie and stores a few interface preferences in your browser. We use no advertising or cross-site tracking cookies.

Website analytics

On the public pages of cerino.ai (the home page, these policies and the connector documentation), we use Google Analytics to understand how visitors find and use the site. It records the pages viewed, the referring site, and your device, browser and approximate location, and sets the cookies _ga and _ga_<id>, which last up to two years. Google’s advertising features are turned off, and analytics never runs inside the signed-in app, so nothing your organization keeps in Cerino is sent to it.

• If you are in the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, Google Analytics is not loaded at all unless you choose Accept on the cookie banner.
• Elsewhere it runs by default, and you can switch it off at any time.
• If your browser sends a Global Privacy Control signal, we treat it as a refusal.
• Change your choice whenever you like with Cookie settings at the bottom of any public page. Switching it off deletes the analytics cookies. Your choice is stored in your own browser.

To decide whether to ask, cerino.ai checks the country our hosting provider resolves for your request. The country is used for that answer only and is not stored.

Waitlist

If you join the waitlist, we keep your email address to contact you about access.

How we use it

• To provide Cerino: storing, searching and summarizing your organization’s content, drafting proposals for your team to review, and answering questions from it.
• To keep it secure and working: authentication, abuse prevention, debugging and monitoring.
• To communicate with you about your account, the service and changes to it.
• To meet legal obligations and enforce our Terms.

We do not use your organization’s content to train AI models, ours or anyone else’s, and we do not use one customer’s content to serve another. We do not use Cerino to make decisions that produce legal or similarly significant effects about individuals; it supports decisions that people make.

Where the GDPR or UK GDPR applies, our legal bases are performance of our contract with you or your organization, our legitimate interest in operating and securing the service, compliance with law, and your consent where we ask for it.

AI processing

Cerino uses large language models to read sources, draft proposals and answer questions. Requests go to the model providers listed below through their commercial APIs, which under the providers’ published terms do not use API content to train their models. Only the content a request needs is sent. AI output can be wrong, which is why nothing enters your Brain without a person approving it.

Who processes it for us

We share personal information only with the service providers below, which process it on our behalf under contract, and as described in “When else we disclose it”.

We update this list before a new provider begins processing customer content, and customers with a data processing agreement are notified as it provides.

When else we disclose it

• Within your organization, according to the roles and visibility your organization sets.
• When law, a court order or a valid legal process requires it, and when necessary to protect people’s safety or the security of the service.
• In a merger, acquisition or sale of assets, subject to this policy’s protections.

We do not sell personal information or share it for cross-context behavioral advertising.

How long we keep it

• Approved memories and other content stay until your organization deletes them or closes its account.
• Original source material is kept for up to 365 days after it is added, then deleted. What your team approved from it remains.
• Operational logs are kept for up to 90 days.
• Audit records of approvals and rejections are kept for the life of the account, because they are the record your organization relies on.
• When an account closes, we delete or de-identify its content within a reasonable period, except where law or a legal hold requires us to keep it. Backups expire on their own schedule.

Model providers keep request data only for the limited periods their API terms allow.

Security

Data is encrypted in transit and at rest. Each organization’s data is isolated from every other’s at the database level, access within an organization follows the roles it assigns, and the connector signs you in with OAuth so your password is never shared with an AI assistant. No system is perfectly secure; to report a vulnerability, write to security@consciens.ai.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict some processing, and to withdraw consent. To make a request, email hello@consciens.ai. We will verify your identity and respond within one month. If your request concerns content your employer controls, we will pass it to them and help them respond. You will not be treated differently for exercising these rights, and you may complain to your local data-protection authority.

You can disconnect the Cerino connector from your AI assistant at any time in that assistant’s settings, which ends its access.

International transfers

Cerino is operated from the United States and our providers process data in the United States. Where data protection law requires it, transfers are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Children

Cerino is a business product and is not directed to anyone under 16. We do not knowingly collect their information.

Changes

We will post changes here and update the effective date. If a change is material, we will tell account owners before it takes effect.

Contact

Logos Strategy Co. LLC, Colorado Springs, Colorado, United States. hello@consciens.ai