CortexOS is a private, internal tool used by the team at Cortex to run its own projects, tasks, calendar, finances and documents. It is not a public product and accounts are created only by the founders. There is no sign-up.

About each team member: name, email address, phone number, job title, profile photo, and a hashed password. Passwords are never stored in readable form.

Work data entered into the system: projects, tasks, calendar events, financial records, debts, client records, uploaded documents, subscriptions and assets.

An activity log recording which account made which change, so the team can see what happened and when.

Sign-in sessions, stored as a hash of the session token rather than the token itself.

Connecting a Google account is optional. If you connect one, CortexOS requests a single permission: read-only access to your calendar(calendar.readonly). It cannot create, change or delete anything in your Google Calendar, by design.

We read the events in the month you are viewing and display them alongside your tasks and deadlines. Event data is not copied into our database, not shared with anyone, not sold, not used for advertising, and not used to train any AI model.

Google's access and refresh tokens are stored on our server so the connection survives between visits. They are never sent to the browser and never appear in logs.

You can disconnect at any time from the Calendar page, which deletes those tokens. You can also revoke access directly at myaccount.google.com/permissions.

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data is stored in a Supabase-hosted PostgreSQL database and Supabase Storage, in the European Union. Transactional email is sent through an email delivery provider.

We do not use advertising trackers or third-party analytics.

The suggestion box lets anyone send a note anonymously. When that option is chosen, no author is recorded on the message — the field is left empty rather than hidden, and no activity-log entry is written for it. Nobody, including whoever administers the system, can tell who sent an anonymous note.

Access is limited by role. Finances, debts and sensitive documents are visible only to the roles granted those permissions. Every screen checks permissions on the server, not only in the interface.

Information is kept while the account is active and the company needs it for its records. Ask a founder to correct or delete your personal information and it will be removed, except where a record has to be kept for accounting or legal reasons.

For anything about this policy or your data, contact the founders of Cortex at privacy@cortex.org.il.