Privacy policy

Who is responsible

Coco Agent Foundation operates Coco. Our business contact address is 6 Rue du Béarn, 67100 Strasbourg, France. Email ahmed@cocoagent.co for privacy questions or requests.

We are responsible for the personal information we use to run accounts and the service. Your business decides why its customer and employee data is used; we process that workspace data on its instructions.

What we collect

• Your account: name, email, sign-in details, company information, team members and settings.
• Your work: messages, uploads, tasks, company context, agent replies, drafts, approvals and support requests.
• Connected accounts: the information you allow Coco to read. This may include email, calendars, files, ad reports, analytics, contacts, tickets or project records. These records can include other people’s information.
• Service activity: IP addresses, browser and device details, security events, connection status and usage. If billing is enabled, we also keep payment records. Payment processors handle card details; we do not store full card numbers.

Cookies and browser storage keep you signed in and support session recovery and security.

What we use it for

We use this information to run your workspace, save your work, answer requests, prepare changes, carry out approved actions, run checks you enable, provide support, measure usage and prevent abuse.

Our legal basis for account and service processing is our contract with you. For security and service administration, we rely on our legitimate interest in running and protecting Coco. We use consent where required for optional features and keep records required by law. Your business must have its own lawful basis for the personal data it gives Coco.

Google accounts

Signing in with Google shares your identity, name, email and profile information. Gmail, Calendar, Drive and other Google services require separate connections and permissions.

We use connected Google data for the features you authorize, such as reading email, checking availability and working with documents. Relevant content may be sent to our AI providers to answer your request or carry out authorized work. We do not sell Google data, use it for advertising or use Google Workspace content to train general-purpose AI models.

Coco’s use and transfer of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Human access is limited to what that policy permits: your agreement to view specific data, security investigations, legal requirements or permitted use of aggregated data.

Who processes your information

People in your workspace can see information according to their access. Connected services receive the requests needed to carry out the work you authorize. Coco also uses these providers:

• Google Cloud: application hosting, databases, backups and credential storage.
• Clerk: sign-in and account authentication.
• Cloudflare: website delivery and security.
• OpenRouter and the selected model provider: AI responses.
• E2B: isolated execution for supported tools.

AI requests may include messages, company context, document extracts and results from authorized tools. We require model routes that deny provider data collection. This is separate from the conversation history saved in Coco.

We do not sell personal information. We may disclose it to comply with law or investigate fraud, abuse or security incidents. Any transfer of Google data in a business sale remains subject to Google’s consent and Limited Use rules.

How long we keep it

We keep account and workspace information to provide the service and its history until you delete it or we complete a deletion request. Legal or security obligations may require us to keep some records longer. Chat uploads stay with the chat until deleted.

Disconnecting a service stops Coco’s access through that connection. It does not erase work already saved in Coco or delete anything in the original account. We keep the information needed for authorized work, rather than an unrestricted copy of your connected account.

When Coco-hosted agent email is enabled, emails are kept for 90 days by default. The workspace owner can change this. It does not change retention in Gmail or Microsoft.

Database recovery history lasts seven days. Backup files expire after seven days and may remain recoverable for seven more days through the storage provider. Deleting active data does not immediately remove these recovery copies.

Where data is processed

Our application and database are hosted in Iowa, United States. Other providers may process data in other countries. Contact us before supplying data that needs a particular hosting region, processing agreement or international-transfer arrangement.

We use HTTPS, workspace access controls and restricted service accounts. Connection credentials are kept in managed secret storage, separate from ordinary application records.

Coco Engineer runs on the server you connect. Relevant prompts, tool details and results may pass through Coco to our model providers. The server and information you give Engineer access to are your choice.

Your choices and rights

You can manage connections and monitoring in Coco, or revoke access with the original provider. For access, correction, deletion or a copy of your personal information, email ahmed@cocoagent.co. We may need to verify your identity. If a customer business controls the information, we may refer your request to that business.

Depending on the law that applies, you can also object to processing, restrict it, withdraw consent or request portability. You can complain to your local data-protection authority, including the CNIL in France.

Services you visit or connect have their own privacy policies.

Changes

We will update this page when our practices change and notify you of material changes in Coco or by email. Before using Google data for a new purpose, we will provide the disclosures and obtain the consent Google requires.