1. Who runs this site
Cognuvi is operated by Justin Bowman, a sole proprietor based in the United States. When this policy says "I," "me," or "we," that's who it means. Reach me at hello@cognuvi.com.
2. What I collect, and why
Newsletter signups
When you subscribe at /newsletter, I collect your email address (and optionally your first name, if you give it). I use it only to send the Cognuvi newsletter and the confirmation email tied to your opt-in. You can unsubscribe with one click from any email.
Contact form
When you fill out the form on /contact, I collect the name, email, and project details you provide so I can email you back. The form is delivered through FormSubmit.co (see third parties below).
Discovery calls
When you book a 30-minute discovery call via the Cal.com link on this site, you go through Cal.com's booking flow. I receive your name, email, and any scheduling details necessary to hold the meeting.
Analytics
I use PostHog to understand which pages get read, where visitors come from, and what works. PostHog is configured to:
- Respect your browser's "Do Not Track" signal — if it's on, you are not tracked.
- Only create an identified profile after you take an action that hands me your email (signing up for the newsletter or filling out the contact form). General visitors are counted, not identified.
- Capture pageviews, clicks, and form interactions — never the text you type into form fields.
I do not use Google Analytics, Facebook Pixel, or other cross-site tracking pixels on this site.
Server logs
The site is hosted on Vercel. Like any web host, Vercel keeps short-term logs of requests (IP address, user agent, requested URL) for security and uptime purposes. I do not export, analyze, or retain these logs separately.
3. Cookies
This site uses a small number of cookies, all functional:
- A PostHog cookie (if analytics is active) to recognize return visits in aggregate. No cross-site advertising.
- Short-lived cookies your browser or the underlying platforms (Vercel, Cal.com, FormSubmit) set as part of normal request handling.
There are no advertising or remarketing cookies. There is no cookie banner because there are no non-essential trackers that require consent under EU law as currently configured. If that changes, you'll see one.
4. Third parties I share data with
I only share data with the platforms necessary to deliver what you asked for:
- Brevo — email service provider. Stores your subscription, sends the newsletter, handles bounces and unsubscribes. (Brevo's privacy policy)
- FormSubmit.co — forwards contact-form submissions to my inbox. (FormSubmit's privacy policy)
- Cal.com — discovery-call scheduling. (Cal.com's privacy policy)
- PostHog — product analytics. (PostHog's privacy policy)
- Vercel — site hosting. (Vercel's privacy policy)
I do not sell your personal information to anyone for any purpose. I do not rent, trade, or otherwise hand it to unaffiliated third parties for their marketing.
5. How long I keep your data
- Newsletter subscribers: until you unsubscribe. After unsubscribe, your email is retained in a suppression list so I don't accidentally email you again. You can request full deletion (see below).
- Contact-form messages: in my email inbox for as long as the conversation is useful, typically up to two years.
- Analytics events: aggregated indefinitely; individual identified profiles are deleted on request.
6. Your rights
Wherever you live, you can email me at hello@cognuvi.com to:
- See what data I hold about you.
- Correct anything that's wrong.
- Delete your data entirely.
- Unsubscribe from the newsletter (one-click in any email).
California residents (CCPA/CPRA): you have the right to know, the right to delete, the right to correct, and the right to opt out of "sale" or "sharing" of personal information. I do not sell or share your data for cross-context behavioral advertising, so there is nothing to opt out of — but if that ever changes, this page will tell you first.
EU / UK / Swiss residents (GDPR / UK GDPR): the lawful basis for the newsletter is your consent (you opted in). The lawful basis for the contact form is your request to be replied to. The lawful basis for analytics is legitimate interest, balanced against your DNT signal and the identified-only profile setting described above. You have the rights of access, rectification, erasure, restriction, portability, and objection. Email me to exercise any of them.
7. Children
Cognuvi is built for small-business operators. The site is not directed at children under 16 and I do not knowingly collect personal information from them. If you believe I have, email me and I will delete it.
8. Security
I use reasonable, industry-standard measures to protect the data I hold: HTTPS everywhere, encrypted credentials in transit and at rest, narrow access scopes, and reputable sub-processors. No internet service can promise perfect security; if a breach affecting you ever occurs, I will notify you and any required regulator within the timeframes the law requires.
9. International transfers
The site and its sub-processors operate primarily from the United States. If you visit from outside the US, your data is transferred to and processed in the US under standard contractual protections offered by each sub-processor.
10. Changes to this policy
If I change this policy, I'll update the effective date at the top and, for material changes, mention it in the newsletter so subscribers see it. Continued use of the site after changes are posted means you accept the updated policy.
11. Contact
Questions, concerns, or requests under this policy go to hello@cognuvi.com. I read every one.