cortarn
Legal

Privacy Policy

Last updated: August 23, 2026

This Privacy Policy explains what information Cortarn (“Cortarn,” “we,” “us,” “our”) collects through cortarn.com (the “Site”), how we use it, and the choices you have. Cortarn is in the process of formal incorporation as a Delaware limited liability company; until that’s complete, “Cortarn” refers to the founders operating under that name.

1. Information we collect

Information you provide. When you submit the form at cortarn.com/start, we collect your name, email address, and (if you provide them) your company name and a free-text message, along with which track you’re requesting (process pilot or workflow audit) and the page you submitted from.

Information collected automatically. We use PostHog, a product analytics tool, to understand how visitors use the Site. This includes session replay (a recording of on-screen activity, such as scrolling and clicking, on the pages you visit) and, once you submit the form at cortarn.com/start, we link that session to the name, email, and company you provided so we can see the path that led to your request. It’s loaded through a first-party proxy at cortarn.com/ingest rather than posthog.com directly, and sets first-party cookies/local storage to distinguish visitors across a session. Typed text on the Site is masked in session replay before it ever leaves your browser. We don’t use this data to build advertising profiles or sell it to ad networks.

The Site doesn’t process payments and has no account/login system, so there’s no password or account data to collect.

2. How we use this information

  • To respond to your request and, if we move forward, to deliver the pilot or engagement you requested.
  • To send the internal notifications tied to your own submission (an alert to our team that you submitted the form, which triggers our follow-up).
  • To understand how people use the Site, so we can improve it.
  • To meet legal or accounting obligations.

We don’t use information you submit for unrelated marketing without a further opt-in, and we don’t sell it.

3. Who we share it with

We share the minimum necessary with the service providers (“subprocessors”) that run the Site and its lead-intake flow, each acting on our instructions:

Supabase

Stores submitted lead-form data (Postgres database)

Persistence, so we can follow up

Railway

Hosts the Site and its server-side code

Application hosting

PostHog

Product analytics, including session replay of how you use the Site

Understand Site usage

Resend

Sends an internal email alert when you submit the form

Internal notification, not sent to you

Slack

Posts an internal message when you submit the form

Internal notification, not sent to you

We don’t share your information with any other third party, and we don’t sell it. We may disclose it if required by law or to protect Cortarn’s or others’ rights and safety.

4. Cookies and tracking

PostHog sets first-party cookies (served from cortarn.com via the /ingest proxy, not posthog.com) to track sessions, pages viewed, and on-screen activity (session replay, see Section 1). These are analytics cookies, not advertising cookies. You can block cookies in your browser settings; doing so may affect analytics but won’t prevent you from using the Site or submitting the form.

5. Data retention

We keep submitted lead information for as long as reasonably necessary to respond to your request, deliver any engagement you enter into with us, and meet legal/accounting recordkeeping obligations. You can ask us to delete it sooner, see Section 6.

6. Your choices and rights

You can ask us, at any time, to:

  • tell you what information we hold about you,
  • correct it, or
  • delete it (subject to what we’re required to retain for legal/accounting reasons, or what’s needed to complete an engagement already underway).

Email [email protected] to make any of these requests. If you’re a California resident, these rights are consistent with what the CCPA provides; if you’re in the EU/UK, they’re consistent with the GDPR. We aim to respond within 30 days.

7. Security

We take reasonable technical and organizational measures to protect the information you provide (encryption in transit, access-controlled infrastructure through the providers listed above), but no method of transmission or storage is 100% secure, and we can’t guarantee absolute security.

8. Children's privacy

The Site is intended for business use by adults evaluating Cortarn’s services. We don’t knowingly collect information from anyone under 16.

9. Changes to this policy

We may update this Privacy Policy as the Site and services evolve. The “Last updated” date above reflects the most recent revision.

10. Contact

Questions about this policy, or to make a data request: [email protected].