Privacy Policy

• Account information — your name and email address when you create an account.
• Purchase information — the bundles you buy, order amounts, and dates. Payment card details are handled by our payment processor and are never stored on our servers.
• Usage information — basic technical data such as pages viewed, downloads, and device/browser information, used to operate and improve the service.
• Communications — messages you send us for support.

• To provide the product — create your account, deliver purchased bundles, and enable downloads and updates;
• To process payments and provide receipts;
• To notify you about updates to skills you own and important service messages;
• To provide customer support;
• To secure the service and prevent fraud or abuse;
• To comply with legal obligations.

Where required by law, our legal bases for processing are the performance of our contract with you, our legitimate interests in operating and improving the product, your consent (for optional marketing), and compliance with legal obligations.

Payments are collected by Panaque Ltd (United Kingdom), acting as merchant of record on behalf of Khay Digital Ltd, using Stripe to process the transaction. Your card details are entered directly with the payment provider and are not stored by us. Each provider processes your data under its own privacy policy. A charge may appear as “Panaque Ltd” on your statement.

We share personal information only with providers that help us run the product, including:

• Hosting and infrastructure (e.g. Vercel) to serve the website;
• Database and storage (e.g. Supabase) to hold your account, purchases, and skill files;
• Payment processing (Panaque Ltd as merchant of record, via Stripe) to take payment;
• Email delivery to send receipts and update notifications;
• Privacy-respecting analytics to understand aggregate usage.

These providers act as our processors and are bound to protect your information.

We use only the cookies and local storage necessary to operate the site (for example, to keep you signed in and to remember your session). We do not use advertising cookies. Where we use analytics, we configure it to minimise personal data.

We keep your account and purchase records for as long as your account is active and as needed to provide lifetime access, meet legal and accounting obligations, and resolve disputes. You can request deletion of your account at any time (see your rights below).

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information (subject to legal retention requirements);
• Object to or restrict certain processing;
• Receive a portable copy of your information;
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email support@cortex.bykhay.com. If you are in the UK or EEA, you also have the right to complain to your local data-protection authority.

Your information may be processed in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses.

We use appropriate technical and organisational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

Cortex is not intended for children under 18, and we do not knowingly collect personal information from children.

We may update this policy from time to time. We will update the “last updated” date above and, for material changes, take reasonable steps to notify you.

For any privacy question or request, contact support@cortex.bykhay.com.