Privacy Policy

This Privacy Policy explains how Cohestra collects, uses, and protects personal information when you use our platform.

Cohestra acts as a processor for registration data your organization collects from participants, and as a controller for account and billing data.

Account data: name, email, organization details, and authentication logs for operators.

Registration data: information submitted through public activity forms (for example name, phone, email) on behalf of your organization.

Usage data: device, browser, and diagnostic logs needed to secure and operate the service.

To provide and improve Cohestra, authenticate users, deliver email notifications you configure, and comply with law.

We do not sell personal information. We use subprocessors (such as hosting and email delivery providers) under contractual safeguards.

Operators may export client and registration data from the admin console where plan limits allow.

Participants may contact the organization that collected their data to exercise local privacy rights.

Privacy questions: privacy@cohestra.app

These policies are versioned. The version accepted at signup is stored with your tenant record.