Privacy

What Cohort keeps, why, and what you control.

Cohort is a workspace where you hand work to AI agents. To do that work, agents need some of your information. This policy explains what we collect, how we use it, who we share it with, and the choices you have. It covers the Cohort website, web app and phone apps.

Last updated October 26, 2026

What we collect

We collect only what Cohort needs to run your agents:

  • Account details: your email address, name and profile picture, and the workspaces you belong to.
  • What you give Cohort: messages, voice dictation, attachments, files, pages, tables, memories and agent instructions.
  • Connected accounts: when you connect an app such as Gmail, Google Calendar, Google Drive or Slack, the access tokens that let your agents use it on your behalf, and the data your agents read from it while doing work you asked for.
  • Sign-ins and payment cards: if you connect 1Password, we keep the names and sites of your saved logins and the last four digits of your saved cards, so you can pick them. Passwords and full card numbers are read from 1Password only at the moment an agent signs in or pays for you, and are never stored by Cohort.
  • Activity: what your agents did, when and with which account, so you can review every step.
  • Technical data: device type, app version, push notification tokens and service logs used to keep Cohort running and secure.

How we use it

We use your information to provide Cohort: to run your agents, show you their work, remember what matters to you, send the notifications you turned on, keep your account secure and fix problems.

We do not sell your personal information, show you ads, or use your content to train AI models.

Google user data

When you connect a Google account, Cohort may read, create and change your Gmail messages and labels, Google Calendar events and Google Drive files. It does so only to carry out tasks you or your agents’ automations ask for, and shows you what it did.

Cohort’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used for advertising, never sold, never used to train generalized AI models, and is not read by people except with your permission, for security, or where the law requires.

You can disconnect a Google account in Cohort at any time, and revoke access from your Google Account’s security settings.

Who we share it with

We share information only with services that help us run Cohort, and only what they need:

  • AI model providers, which process the conversation and context an agent needs to answer you. We send it through their business APIs.
  • Cloud hosting, storage and email delivery, which run on Amazon Web Services in the United States.
  • The apps you connect, when your agents act in them for you.
  • Speech-to-text, when you dictate a message.

We may also disclose information if the law requires it, to protect people’s safety, or as part of a merger or acquisition, in which case this policy continues to apply.

Who in your workspace sees what

Your private agents and threads are visible only to you. Shared agents, rooms and the team library are visible to the members of that workspace. Room memories stay with the room.

Security

Data is encrypted in transit and at rest. Tokens for connected accounts are sealed, never shown to AI models and never written to logs. Agents ask before sending messages in your name, doing anything that cannot be undone, or making a payment, unless you have told them otherwise.

How long we keep it

We keep your information while your account is active. When you delete something, a workspace or your account, we delete it from Cohort, and it leaves our backups as they expire.

Your choices

  • Review, edit or delete your threads, files, pages and memories in the app.
  • Disconnect any connected account, or change what agents may do with it.
  • Turn notifications, location and dictation on or off.
  • Ask for a copy of your data, or for your account to be deleted, by writing to [email protected].

Depending on where you live, you may have further rights over your personal information. Write to us and we will help.

Children

Cohort is not meant for children under 13, or under 16 where local law sets a higher age, and we do not knowingly collect their information.

Changes

If we change this policy, we will update the date above, and tell you in the app or by email before a significant change takes effect.

Contact

Questions about this page? Write to [email protected].