Privacy Policy

What we collect

We collect three kinds of information.

• When you sign up on kortexagent.co: your name, your company and your email address. That is all the form asks for.
• When you sign in: your name, email address and profile picture from the Google account you sign in with. Signing in gives us nothing else from Google: not your email, your files or any other Google service. Google Ads is separate, and only if you connect it (below).
• When you use Kortex: the conversations you have with the agent, including its answers and the changes it proposed; a record of every change that was approved, who approved it, and what happened afterwards; and counts of how much the product was used, which we use to run the service.

Our servers also keep standard request logs, such as IP address, browser type and the page requested, to keep the service running and secure.

Data from your ad accounts

When you connect Meta, we read the advertising data your login can already see: ad accounts, campaigns, ad sets and ads, their settings and budgets, their creative artwork, and their daily delivery figures such as spend, impressions, clicks, purchases and revenue. We read custom audience names and sizes. We do not read the people in them.

We do not read your personal profile, your friends, your messages, or anything outside the advertising accounts you connect.

If you connect Google Ads, we read the Google Ads accounts your Google login can reach, including through manager accounts, and their campaigns, ad groups and ads, their budgets and status, and their daily figures such as cost, impressions, clicks and conversions. Kortex changes Google Ads only in the ways listed below, and only after you approve each change.

Kortex’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you connect Shopify, we read your products, stock and prices, and your orders’ totals, discounts, refunds and line items. We do not store your customers’ names, email addresses, phone numbers or shipping addresses.

We keep a copy of this data so the product can answer questions without asking the platform again each time. We use it only to provide Kortex to you. We do not use it to advertise to you or anyone else, we do not sell it, and we do not use it to train AI models.

Instagram creator data

If you connect Instagram creator discovery, Kortex searches for Instagram creators through Meta on behalf of your business’s Instagram professional account, using the Instagram and Facebook Page permissions you grant when you connect.

From Meta we receive public creator profile information and the insights Meta makes available through that API: username, profile picture, biography, country, gender and age range, badges, the email address and portfolio link a creator has made available, follower count, reach, engaged accounts and reel engagement rates, the audience’s countries, age and gender, recent posts, branded content and partnership ads with their views and engagement, and past brand partners. We also read your Facebook Pages and their linked Instagram accounts, only so you can choose which account searches, and, if you choose to filter by them, the names of your own custom audiences. We do not read creators’ messages or anything that is not returned by that API.

We use this data only to recommend creators to your business and to keep your shortlists, briefs and campaigns. A creator’s email is used only by you, to contact that creator about working with your business. It is visible only to your organisation, never to another business using Kortex. We keep fetched creator insights for up to 24 hours before asking Meta again, and creators you save stay until you remove them or close your account. We do not sell it, use it for advertising, build profiles of creators across businesses, or use it to train AI models.

How we use it

• To show you your advertising performance and answer your questions about it.
• To propose changes to your ad accounts, and to carry out the ones you approve.
• To recommend Instagram creators for your products, and to keep your shortlists, briefs and creator campaigns.
• To measure what an approved change did afterwards, so later recommendations improve.
• To contact you about access to Kortex if you signed up, and to send the one email thanking you for signing up.
• To keep the service secure, fix problems, and understand how much it is used.

We do not send marketing newsletters, and we do not use your data for advertising.

What Kortex can change

On Meta, Kortex can pause and resume ads, change budgets, change placements, add or exclude custom audiences, copy ads and ad sets, and create a new ad set with a budget you set. On Google Ads, it can pause and resume campaigns, ad groups and ads, change a campaign’s daily budget or its target ROAS or target CPA, and add negative keywords to a Search campaign. Nothing in either list happens on its own. Every one of them is proposed to you and waits until you press Approve.

It can also create a new ad from an image Kortex made for you: on approval it uploads the image to your ad account and creates the ad paused, so it spends nothing until you turn it on. Apart from that, it cannot create new creative, upload images or video, or spend outside the budgets you approve. Shopify, and any account you have not connected and chosen, are read-only.

AI processing

Kortex answers your questions with the help of third-party AI model providers. We send them the text of your question and the advertising figures needed to answer it, and they return the reply. We do not send them your Meta or Shopify access tokens, and we do not use your data to train AI models of our own.

Who else processes it

Your data is visible to the people in your own organisation and to nobody else. It is separated at the database level rather than by our queries remembering to filter, so a mistake in our code returns nothing rather than somebody else’s account.

We use a small number of service providers, each only for its part of the service:

• Cloud hosting and database, where the product and your data live.
• AI model providers, which generate the agent's replies, as described above.
• An email delivery provider, which sends the thank-you email when you sign up.

We may also disclose information when the law requires it, or to protect the security of the service and the people who use it. We do not sell your data, and we do not share it with advertisers or data brokers.

How long we keep it

• Account and advertising data: for as long as your organisation uses Kortex, and deleted within thirty days of a deletion request.
• Sign-up details: until we no longer need them to follow up, or until you ask us to delete them.
• Server request logs: around thirty days.

Your rights and choices

Wherever you live, you can ask us for a copy of the personal information we hold about you, to correct it, to delete it, or to stop using it. Email human@kortexagent.co and we will respond within thirty days.

Disconnect Meta in Settings, or remove Kortex from your Meta Business Settings, and we stop reading immediately. For Google Ads, remove Kortex from your Google Account’s third-party access page and we lose access at once. Email human@kortexagent.co to have your stored data deleted; we remove it within thirty days and confirm when it is done.

Deleting your data

To have Kortex delete the data it holds about you and your ad accounts:

• Email a deletion request to the address below from the address you sign in with, and name the organisation if you belong to more than one.
• Optionally, stop our access first: disconnect Meta, Instagram creator discovery and Google Ads in Kortex Settings, or remove Kortex under Facebook Settings, Business Integrations, and under your Google Account's third-party access.
• We delete your account, your organisation's synced advertising data, creator data and shortlists, conversations and stored access tokens within thirty days, and email you when it is done.

Deletion requests: human@kortexagent.co

Security

Everything travels over encrypted connections and is encrypted at rest. Your Meta access token is held in Google Secret Manager, never in our database and never shown on any screen, including to us. Access to production systems is limited to the people who run the service. No system is perfectly secure, and if a breach affected your data we would tell you.

Cookies

The product uses only the cookies it needs: to keep you signed in, to protect sign-in from forgery, and to remember whether you chose the light or dark theme. The landing page stores only your theme choice, in your browser. We use no advertising or analytics cookies, and no third-party tracking scripts.

Where your data is stored

Kortex and its database run on cloud servers in Mumbai, India. Some service providers, such as the AI model providers and the email delivery provider, may process data in other countries, only to provide their part of the service.

Children

Kortex is a business tool and is not meant for anyone under 18. We do not knowingly collect information from children, and will delete it if we learn we have.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell you by email before it takes effect.

Contact

Questions, requests or concerns about your data: human@kortexagent.co