Last updated: June 26, 2026
Data controller
Mishagin Vyacheslav Vladimirovich, operating SRS Cortex under SRS Conglomerate, is the data controller for personal data processed through cortex.srs and the Cortex application. Contact: support form.
Information we collect
We collect information you provide directly and data generated through your use of Cortex:
- Account data — name, email address, password hash, billing contact, and organization details.
- Workspace data — team members, roles, comments, approval workflows, and client review settings.
- Channel data — OAuth tokens, connected social account identifiers, and publishing permissions for Instagram, LinkedIn, Telegram, X, and Threads.
- Campaign data — content drafts, schedules, labels, media assets, and publishing history.
- Analytics data — engagement metrics, reach, impressions, follower trends, and exported reports from connected channels.
- Support data — correspondence with support form, bug reports, and in-app support tickets.
How we use your information
We use personal and workspace data to:
- Provide, maintain, and improve SRS Cortex features including the content calendar, publishing queue, ads workflows, and analytics.
- Authenticate users, enforce access controls, and protect accounts from fraud and abuse.
- Process subscriptions, invoices, and payment-related communications.
- Send service announcements, security alerts, and product updates relevant to your account.
- Analyze aggregated usage to improve onboarding, reliability, and feature design.
Legal bases for processing
Depending on your relationship with us and applicable law, we rely on the following legal bases:
- Contract — processing necessary to deliver the Cortex service you subscribed to.
- Legitimate interest — securing our platform, preventing abuse, improving product quality, and communicating about your account.
- Consent — where required for optional cookies, marketing communications, or specific integrations you enable.
- Legal obligation — retaining records for tax, accounting, or responding to valid legal requests.
Sharing and disclosures
We do not sell personal data. We share data only with trusted subprocessors and when required by law:
All subprocessors are bound by data-processing agreements and may access data only to perform services on our behalf.
- Infrastructure and hosting providers in the EU for application hosting, databases, and backups.
- Payment processors to handle subscription charges — card details are processed by the provider and not stored on Cortex servers.
- Email, analytics, and monitoring vendors that help us deliver transactional messages and measure reliability.
- Law enforcement or regulators when required by applicable law, after reviewing the request for validity and scope.
Data retention
Active account data is retained for the duration of your subscription and deleted or anonymized within 30 days of verified account closure, except where longer retention is required.
Billing records, audit logs, and data subject to legal holds may be kept longer as required by law or for dispute resolution.
Your rights
Subject to applicable law, you may exercise the following rights:
- Access — request a copy of personal data we hold about you.
- Rectification — correct inaccurate or incomplete information.
- Erasure — request deletion of personal data when no longer necessary or when you withdraw consent where applicable.
- Portability — receive data you provided in a structured, commonly used format.
- Restrict processing — ask us to limit certain uses while a request is reviewed.
- Object — object to processing based on legitimate interests where your circumstances require it.
Security measures
We implement technical and organizational measures including encryption in transit and at rest, access controls, secure session cookies, and separation between the public site and the Cortex application.
No method of transmission over the Internet is completely secure. We continuously review controls and notify affected users of confirmed incidents as described on our Security page and Transparency Report.
International transfers
Data is primarily stored in the European Union. If data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
Children
SRS Cortex is not directed to children under 16. We do not knowingly collect personal data from minors. Contact support form if you believe a minor has provided data.
Changes to this policy
We may update this Privacy Policy to reflect product changes or legal requirements. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance where permitted by law.
Contact us
For privacy questions or data subject requests, email support form from your registered account email.