Privacy policy

Purity Sites runs COT Intelligence and is responsible for the personal data described here. Contact: support@cotbias.com.

• Account: your email address, a password (stored only as a secure hash by our auth provider), when you signed up, your trial end date and whether Friday emails are on.
• Payments: the plan, amount, currency, payment method type (card or mobile money), Pesapal's reference and the payment status. Card numbers and mobile money PINs go straight to Pesapal. We never see or store them.
• Technical: a session cookie that keeps you signed in, a theme preference stored in your browser, and the standard request logs our host keeps (IP address, browser, time).

We don't use advertising or tracking cookies, and we don't sell or rent your data.

• To run your account and decide what your plan gives you access to.
• To take payments and keep records the law requires.
• To send the emails you'd expect: password resets, payment receipts, the Friday digest, and reminders before a trial or Pro period ends.
• To keep the service secure and fix problems.

Each of these handles data only to provide its part of the service:

• Supabase: accounts, sign-in and the database. Hosted in London (AWS eu-west-2).
• Vercel: hosts the website and keeps request logs.
• Pesapal: processes card and mobile money payments.
• Resend: delivers our emails.

Some of these providers process data outside your country. They are bound by their own data protection terms.

The Friday digest and the end-of-period reminders can be turned off at any time from your account page or with the link at the bottom of each email. Receipts and account emails (password reset) are always sent because the service needs them.

Account data is kept while your account exists. Payment records are kept for as long as tax and accounting rules require, even after an account is deleted. Host request logs are kept for a short period by Vercel.

You can ask for a copy of your data, a correction, or deletion of your account by writing to support@cotbias.com. We reply within 30 days. Depending on where you live, including under Uganda's Data Protection and Privacy Act, 2019 and the EU/UK GDPR, you may also object to processing or complain to your data protection authority.

If we change this policy we update the date at the top and, for a material change, email account holders first.