Privacy Policy

Who we are

CogentFlow provides AI workflow audits and implementation services for document-heavy business teams, based in Sri Lanka. You can reach us at info@cogentflow.io.

What we collect

We keep data collection to a minimum. Depending on how you interact with us, this may include:

• Contact details you share directly — for example your name, email, phone number, and the message you send when you email us or book a call.
• Scheduling information when you book a discovery call through our third-party scheduling provider.
• Sample documents or workflow details you choose to share for an audit. We ask for anonymized samples where possible, and only the data a task genuinely needs.
• Standard technical data your browser sends to our hosting and content-delivery provider, such as IP address and basic request logs, used to serve and secure the site.

How we use it

We use the information you provide to respond to your enquiry, schedule and run discovery calls, prepare and deliver a workflow audit, and operate and improve the website. We do not sell your data, and we do not use it for unrelated advertising.

Retention

We keep personal data only for as long as needed to handle your enquiry or engagement, and then for a reasonable period for our records. Sample documents shared for an audit can be anonymized, and are deleted on request once the audit is complete.

Third parties

We rely on a small number of reputable service providers to operate — for example website hosting and content delivery, email, and call scheduling. These providers process data on our behalf under their own terms and privacy policies, and we share your information with them only as needed to provide the service you have asked for.

Your choices

You can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it, by emailing info@cogentflow.io. You can also decline to share particular information, though this may limit what we can do for you.

A note on the PDPA

We aim to handle personal data in a way that is conscious of Sri Lanka’s Personal Data Protection Act and good data-protection practice. This page describes our current approach in plain language; it is not legal advice and is not a guarantee of compliance. For obligations specific to your own organisation, please consult your legal or compliance advisors.