This Privacy Policy explains how Cohalen LLC (“Cohalen,” “we,” “us”) collects and uses personal data when you visit cohalen.com or use the Cohalen application. We collect as little as we can and are direct about what we do collect.

1. What we collect

Waitlist email. When you join the waitlist we collect the email address you enter. We do not require a name.
Account data. When accounts launch, the email and authentication identifiers needed to sign you in.
Minimal technical data. Standard server logs (IP address, timestamp, user agent), kept briefly for security and reliability.

Cohalen is local-first: your source code, prompts, and agent output stay on your machine. We do not collect your repository contents except data you explicitly choose to sync when sharing a workspace with your team.

2. Why we use it

to send you a single early-access invitation and occasional product updates you asked for;
to operate, secure, and improve the Service; and
to comply with legal obligations.

Our legal bases (where the GDPR applies) are your consent for waitlist and marketing email, and our legitimate interests in running a secure, reliable service.

3. Who processes it

We use a small number of processors that handle data on our behalf under contract:

Processor	Purpose	Data
Resend	Waitlist contact list & email delivery	Email address
Vercel	Serving the website	Server logs
Supabase	Authentication & team sync (when enabled)	Account & shared-workspace data

We do not sell your personal data.

4. Retention

We keep your waitlist email until you unsubscribe or ask us to delete it, or until the early-access program ends. Server logs are kept only briefly. Account data is kept for the life of your account.

5. Cookies

The website uses essential storage only by default. That includes a small record of your cookie choice, so we don't ask again. Essential storage needs no consent. Any optional analytics loads only after you accept in the cookie notice, and you can decline without losing any functionality. We do not use advertising or cross-site tracking cookies.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to withdraw consent, and to object to certain processing. You can unsubscribe from any email using its link, or contact us to exercise a right. We will respond within the time the law requires.

7. International transfers

Our processors may handle data in other countries. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We will post any changes here with an updated date, and give notice of material changes where required.

10. Contact

Privacy questions or requests: privacy@cohalen.com.