Effective version 2026-08-24
Privacy Notice
This document is version controlled. Material changes require a new recorded acceptance.
Information processed
Stem Cogent processes account identifiers, authentication and security records, workspace configuration, Decision Lens and Focus Area preferences, audit events, service usage, support communications, and authorised customer-provided business context.
Purposes and lawful bases
Processing provides and secures the service, isolates tenant workspaces, personalises authorised decision intelligence, maintains evidence and audit records, administers subscriptions, responds to support or rights requests, and meets legal obligations. Lawful bases include contract, legal obligation, legitimate interests, and consent where appropriate.
Processors and inference
Authorised processors may support hosting, communications, payments, monitoring, and model inference under safeguards. Tenant-private content is disclosed to an inference provider only when product configuration, contract, privacy controls, and retrieval authorisation permit it.
Retention and security
Records are retained according to contractual, security, audit, and legal requirements and are then deleted or irreversibly de-identified. Controls include encryption, tenant-scoped authorisation, row-level controls, audit logging, restricted secrets, and incident response.
Your rights
Subject to the Nigeria Data Protection Act 2023 and applicable law, individuals may request information, access, correction, deletion, restriction, portability, or objection; withdraw consent for future consent-based processing; and complain to the Nigeria Data Protection Commission.