Privacy Notice

Cohort is a software studio in Dubai, United Arab Emirates. This notice covers cohort.ae and client.cohort.ae, the portal we give clients we are already working with.

The contact form is the only thing on this site that collects anything. If you fill it in, we receive your name, email address, phone number, your message, and your company name if you choose to give one.

We also work out how you reached us, and that value is stored with your enquiry and kept for as long as the enquiry is. It comes from the tags on our own links — utm_source, utm_medium, utm_campaign and ref — and, when there are none, from which site linked you here. We are naming that second one plainly rather than leaving it under “how you found us”.

We use all of it to reply to you and to keep track of the enquiry. We do not sell it, and we do not use it for advertising. There are no analytics or advertising scripts on this site, and if you have not used the contact form we hold nothing about you.

When the contact form is submitted, your IP address is used to limit how many messages can be sent from one place. It is kept for a short period for that purpose and then deleted automatically. It is not stored alongside your message.

The portal holds the records of our work together: your company and billing details, projects, invoices and payments, documents we share with you, and the approvals you give.

When you sign an agreement or accept a delivery, we record the name you typed, the time, and your IP address. That is deliberate — it is the evidence that the approval happened, so it stays with the record.

Actions on a project are written to a log that only ever gets added to: Cohort itself cannot change or remove an entry once it is written. We put it that way rather than claiming it is impossible for anyone — the database credentials that install the system could remove the protection, and a notice that said otherwise would be claiming more than we can keep.

We use a small number of service providers to run the site, send email and take card payments. They handle your data only to provide those services to us.

Card details are entered on our payment provider's own page. We never see or store a card number.

Some of these providers operate outside the United Arab Emirates.

Short-lived technical records — the ones behind rate limiting and sign-in codes — are deleted automatically by a job that runs once a day, so each is cleared within about a day of its window ending.

Two things it does not touch, and nothing deletes them: contact enquiries, and the record of emails we sent. They are kept until we delete them by hand, and you can ask us to.

Client records are kept for as long as we work together, and afterwards for as long as we are required to keep business and tax records.

The public site sets no cookies. The admin panel and the client portal set one cookie each, to keep you signed in. There are no advertising or analytics cookies anywhere.

Write to us and we will tell you what we hold about you, correct it, or delete it. Some records we cannot delete — payment records and the evidence attached to a signed agreement have to stay — and if that applies we will tell you which.

Email info@cohort.ae.