1. Who we are
Cortexa ("Cortexa", "we", "us") operates a webinar and lead-management platform that lets clinics and other organizations host automated webinars, register attendees, collect leads, and schedule appointments. This policy explains what personal data we process, why, and what rights you have. For any privacy question or request, contact privacy@cortexa.vip.
Cortexa is used by two kinds of people: hosts (staff of the organization running webinars) and viewers (people who register for and attend webinars). Where a clinic uses Cortexa to manage its own attendees and leads, that clinic determines why the data is collected and is the controller of that data; Cortexa processes it on the clinic's behalf.
2. Data we collect
- Account data — name, email address, and a password (stored as a secure hash), or your Google / Microsoft profile identifiers if you sign in with those providers.
- Webinar registration and attendance — the name, email, and optional phone number you register with, plus attendance records such as join time, watch time, chat messages, and questions you ask during a webinar.
- Appointments — booking details you submit when scheduling a consultation (name, contact details, chosen time, notes).
- Leads — contact information collected through webinar sign-up forms, files imported by the organization, or Facebook Lead Ads forms (see section 3), such as name, email, phone number, and answers to the form's questions.
- Payment data — subscription status and billing events. Card details are collected and stored by our payment processor, Stripe; Cortexa never stores card numbers.
- Content — webinar videos and materials uploaded by hosts, and transcripts generated from them.
- Technical data — logs, device and browser information, and cookies required to keep you signed in.
3. Facebook / Meta data
When an organization connects its Facebook Page to Cortexa, we store an access token for that Page and use Meta's Graph API to retrieve leads submitted through the organization's own Facebook Lead Ads forms. This data is used for exactly one purpose: delivering the organization's leads into its own Cortexa CRM so it can follow up with people who expressed interest.
- Lead data retrieved from Meta is visible only to the organization that owns the Facebook Page. It is never shared across organizations, sold, or used for advertising by Cortexa.
- Disconnecting the Facebook Page in the Integrations settings removes the stored access token immediately.
- See our Data Deletion Instructions for how to have this data removed.
4. How we use data
- Providing the platform: webinars, streaming, chat, and Q&A.
- Sending webinar confirmations, reminders, and follow-up messages by email and — where an organization has enabled it — WhatsApp.
- Scheduling and managing appointments booked with a host.
- Generating suggested answers to webinar questions using AI, based on the webinar's own transcript and FAQ content.
- Billing, account management, and service communications.
- Security, debugging, and preventing abuse of the platform.
We do not sell personal data.
5. Service providers
Cortexa relies on a small set of processors to run the service. Data is shared with them only to the extent needed for their function:
- Amazon Web Services — video storage and transcription
- Mux — live video streaming and playback
- Stripe — payments and subscriptions
- SendGrid — transactional email delivery
- Twilio — WhatsApp message delivery
- OpenAI — generation of webinar Q&A suggestions
- Meta Platforms — Facebook Lead Ads integration
- Hosting and infrastructure providers for the platform itself
6. Retention and deletion
We keep personal data for as long as the related account or organization relationship is active, and for a reasonable period afterwards where required for billing or legal reasons. Webinar registration and lead data is kept for as long as the organization that collected it keeps it in its CRM.
You can request deletion of your data at any time — see the Data Deletion Instructions.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email privacy@cortexa.vip from the address associated with your data. If your data was collected by a specific clinic or organization, we may refer your request to them as the controller of that data, or handle it together with them.
8. Changes to this policy
We may update this policy as the platform evolves. Material changes will be announced in the application or by email. The date at the top of this page reflects the latest revision.