Privacy Policy

1. Introduction

Cosner Pte. Ltd. ("Cosner," "we," "us," or "our") is a company incorporated in Singapore that operates the Cosner document extraction service and this website. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our site, create an account, or use our services.

By using Cosner, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information we collect

• Account information: When you register, we may collect your name, work email address, organization name, password or authentication credentials, and billing contact details if you subscribe to a paid plan.
• Usage information: We collect information about how you interact with our services, including pages visited, features used, extraction jobs run, error logs, device type, browser, IP address, and approximate location derived from IP.
• Support and communications: If you contact us, we retain the content of your messages, attachments, and related metadata to respond and improve our support.
• Cookies and similar technologies: We use cookies and similar tools on our website for essential functionality, analytics, and preferences. You can accept or reject non-essential cookies via the cookie banner shown when you first visit our website.

3. Documents you upload

When you upload invoices, drawings, contracts, statements, or other files to Cosner, we process that content to extract structured data and provide citations back to the source. Document content may include personal data, financial information, trade secrets, or other sensitive material depending on what you submit.

You are responsible for ensuring you have the right to upload and process documents through our service, including any obligations to your customers, employees, or regulators.

We process uploaded documents only to deliver and improve the service features you use, unless you separately agree otherwise in writing. We do not use your uploaded documents to train generalized machine learning models shared across customers without your explicit consent.

Extracted outputs (such as tables, fields, and exports) are stored in association with your account according to your plan settings and retention configuration.

4. How we use information

We use information to:

• Provide, operate, and maintain the service, including running extractions, generating exports, and authenticating users.
• Process transactions, send invoices, and manage subscriptions.
• Monitor performance, diagnose technical issues, prevent fraud and abuse, and enforce our Terms of Service.
• Communicate with you about product updates, security notices, and support requests.
• Comply with legal obligations and respond to lawful requests from authorities.
• With your consent or as otherwise permitted by law, send marketing communications you can opt out of at any time.

5. How we share information

• Service providers: We use trusted subprocessors for hosting, storage, email delivery, payment processing, analytics, and customer support. They may access information only to perform services on our behalf under contractual confidentiality and security obligations.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, subject to notice where required by law.
• Legal and safety: We may disclose information when we believe it is necessary to comply with law, protect rights and safety, investigate fraud, or respond to valid legal process.

We do not sell your personal information for money. We do not share uploaded document content with third parties for their independent advertising purposes.

6. Security

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. Measures may include encryption in transit, access controls, logging, and employee training.

No method of transmission or storage is completely secure. You should use strong credentials, limit access within your organization, and avoid uploading documents you are not authorized to share.

7. Retention

We retain account and usage information for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

Uploaded documents and extraction results are retained according to your workspace settings, plan limits, and deletion requests. You may delete certain content through the product where available; residual backups may persist for a limited period before being overwritten.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal information, and to object to certain processing. You may also withdraw consent where processing is consent-based.

To exercise these rights, contact us at help.cosner@gmail.com. We may need to verify your identity before fulfilling a request. You may also update account details in product settings where available.

If you are in Singapore, the Personal Data Protection Act 2012 (PDPA) gives you the right to access and correct your personal data, and to withdraw consent to its collection, use, or disclosure, subject to legal and contractual restrictions. You may also lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.

If you are in the European Economic Area or United Kingdom, you may lodge a complaint with your local supervisory authority. If you are in certain U.S. states, you may have additional rights regarding sale, sharing, and targeted advertising; we describe our practices above.

9. International transfers

We are based in Singapore and primarily process and store information there. We may also transfer information to other countries where we or our subprocessors operate. Under the PDPA, when we transfer personal data outside Singapore we take steps to ensure the recipient provides a standard of protection comparable to the PDPA, such as through contractual commitments with subprocessors.

Where transfers involve the European Economic Area, United Kingdom, or United States, we use additional safeguards such as standard contractual clauses where required.

10. Children

Cosner is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the effective date. Material changes may be communicated by email or in-product notice where required.

12. Contact us

Questions about this Privacy Policy or our data practices may be sent to help.cosner@gmail.com. This address also reaches our Data Protection Officer.

Cosner Pte. Ltd.