Privacy Policy
Last updated: 4/24/2026
This policy explains what Cohesive360 collects, why, and how we protect it. Plain English: your SmartAdvocate case data never transits our servers. Only account and subscription metadata lives on our infrastructure.
What we store
- Account: your email, hashed password, full name, organization name, timestamps.
- Subscription: Stripe customer and subscription IDs, plan, status, seat count, trial and renewal dates.
- License: license key, issue date, tenant binding (SmartAdvocate host), active-device fingerprints (SHA-256 hashes of a MAC + hostname + platform tuple — not reversible to the raw hardware identifiers).
- Operational: last-seen timestamps for each active device, for seat counting and anomaly detection.
What we do NOT store
- Your SmartAdvocate password. It is handed directly to your SmartAdvocate tenant by the Cohesive360 client on your machine.
- Case data, notes, tasks, contacts, documents, or anything retrieved from SmartAdvocate. That data flows directly between your machine and your SmartAdvocate tenant; it is not copied to our servers.
- Prompt contents or Claude responses. Those are handled by Anthropic under its own policies.
Third parties
- Stripe — payment processing, customer portal, billing emails.
- Resend — transactional email (welcome, trial reminders, receipts).
- Anthropic — you use Claude under Anthropic's terms; we do not broker that relationship.
Security
Data in transit is protected by TLS. Passwords are hashed with scrypt. License keys are stored in full; cached client-side state is HMAC-signed to detect tampering. Our infrastructure is hosted on Microsoft Azure (US region).
Your rights
You may request export or deletion of your account data by emailing privacy@cohesive360.com. We complete requests within 30 days. Deleting an account cancels your subscription, revokes all active seats, and removes license and account records. Stripe retains billing records per its own retention policy.
Children
The Service is not directed at children under 18 and we do not knowingly collect their data.
Changes
We may update this policy here. Material changes will be communicated by email at least 14 days before taking effect.