Privacy Policy

Cortex Route is run by Cortex Systems in the United States. This policy covers the Cortex Route website, web app and mobile app. Questions or requests: support@cortex-route.com.

• Account details: your business name, address, phone and email, plus the name, email and role of each user. Passwords are stored only as a secure hash, never as the password itself.
• The business records you enter: your customers and their contact details, items, prices, orders, invoices, payments, suppliers, purchasing and inventory. This includes files you upload, such as logos and photos of receipts or order sheets.
• Your buyers, if you use the customer portal: the names and emails of the people you invite, and the orders they place.
• Billing: Stripe processes subscription payments. We keep the Stripe customer and subscription references and the subscription's status, not card numbers.
• Technical: a cookie that keeps you signed in, a little data saved in your browser so the app is fast (such as your name and your working day), and basic server logs (IP address, browser, time of request) for security and fixing problems.

We don't use advertising or third-party analytics trackers.

• to run Cortex Route: show your records, make your invoices and reports, and send the emails you ask it to send (invoices, statements, reminders);
• to send account emails, such as password resets and billing notices;
• to bill your subscription;
• to help you when you contact us, keep the service secure, and fix and improve it.

We don't sell personal information, and we don't use your data for advertising.

We use these providers only to run the service, and each gets only what its job needs:

• Render hosts the app and its database in the United States.
• Stripe handles subscription payments. If a business turns on online invoice payments, Stripe also handles its buyers' payments.
• Resend delivers emails.
• Anthropic runs the AI features, such as reading a receipt photo or a typed order. Only the content of that request is sent.
• Google suggests addresses while you type one.
• PrintNode sends documents to your printers, but only if you turn on remote printing.

We may also share information when the law requires it, or to protect the service and its users from fraud or abuse.

We keep your data while your account is open. If you cancel, your records stay available read-only, so you can still view, print and export them. Ask us to delete your account and we'll delete your data within 30 days. The exception is records the law requires us to keep, such as billing records. Backup copies are overwritten on their normal schedule.

Connections are encrypted (HTTPS), passwords are hashed, each business's data is kept separate from every other business's, and access to the systems is limited. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

You can see, correct and export most of your information yourself in the app. To have it deleted, or for anything else, email support@cortex-route.com.

If you're a buyer of a business that uses Cortex Route, that business controls your information. Contact them first, and we'll help them with your request.

Cortex Route is for businesses. It isn't meant for children, and we don't knowingly collect information from anyone under 13.

We may update this policy. The date at the top always shows the latest version. If a change is significant, we'll email account owners before it takes effect.