Privacy Policy

Thank you for your interest in 2Fifteen Tech. We value your trust and are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you interact with our website and services. By accessing or using our website, the Cortex platform, or supplying your personal information through any of our data collection forms, you agree to the terms of this Privacy Policy.

1. Scope of this policy

This Privacy Policy applies to:

• 215.tech - Our marketing website, including the blog, service pages, and contact forms.
• Cortex (cortex.2fifteen.io) - Our AI-powered business platform that provides AI agents, document management, and related services to our customers and their authorized users.
• IT managed services - Services we provide to our customers including device management, support, and consulting.

Where data practices differ between these services, we note the distinction below.

2. Information we collect

2.1 Marketing website (215.tech)

We only collect personally identifiable information that you voluntarily provide through our contact forms or when you reach out to us directly. This may include:

• Name, email address, phone number, and company name
• Any other information you choose to include in a message to us

2.2 Cortex platform

When you use the Cortex platform, we collect and process the following categories of information:

Account and identity data

• Email address, name, and profile image (provided via your identity provider)
• Organization name and email domain
• Account role (administrator or standard user)
• Authentication data from your identity provider (Google Workspace, Microsoft, or passkey credentials)

User-generated content

• Chat conversations with AI agents (your messages and AI-generated responses)
• Documents you upload (PDFs, Word documents, images, audio files)
• AI-generated content such as transcripts, summaries, and images created at your request
• URLs you submit for content ingestion

Usage and billing data

• AI model usage (which models you use and token consumption)
• Feature usage (which agents and tools you interact with)
• Timestamps and session metadata

Directory Sync data

If your organization uses Directory Sync (such as Google Workspace, Okta, or Microsoft Entra ID), we receive user directory information from your identity provider to automatically provision and manage user accounts. This may include names, email addresses, and group memberships as configured by your organization's administrator.

Text message notification data (optional)

If you choose to enroll in optional Cortex text notifications, we also collect:

• Your mobile phone number and its association with your Cortex account and organization
• Your text notification preferences
• Consent records, including the disclosure you accepted, the linked policies, timestamps, and the IP address and browser information associated with your enrollment request
• Messaging delivery information, such as message identifiers, delivery or failure status, timestamps, and opt-out requests

See Section 11 for details.

2.3 IT managed services

When you are a managed services customer, we may also collect device inventory information, support ticket details, and other technical data necessary to deliver IT management and support services as outlined in your service agreement.

3. How we use your information

We use the information we collect to:

• Respond to your inquiries and service requests
• Provide, operate, and maintain the Cortex platform and its AI-powered features
• Process your documents and conversations through AI models to deliver the services you request
• Generate usage reports and calculate billing for your organization
• Provision and manage user accounts through directory synchronization
• Send service-related communications, including email delivery of AI-generated content when you request it
• Deliver optional Cortex text notifications you choose to receive, verify ownership of the phone number you enroll, honor your communication preferences and opt-out requests, prevent unwanted messages, and maintain records of consent
• Monitor and improve the reliability, security, and performance of our services
• Deliver IT management and support services under your service agreement

4. AI processing and third-party models

This section applies only to Cortex, our optional AI-powered platform. Cortex is a separate product that customers must explicitly sign up for -- it is not included with our managed IT services and no customer is automatically enrolled. If you are not a Cortex user, the AI providers and processing described in this section do not apply to you.

Cortex uses third-party AI models to provide its services. We access all AI model providers through commercial business agreements and paid API plans -- not consumer-tier products. When you interact with AI agents, your messages and any documents or images you reference may be sent to one or more of the following providers for processing:

• Anthropic (Claude models)
• OpenAI (GPT models, text embeddings)
• Google (Gemini models via Vertex AI, including speech-to-text transcription and image processing)
• OpenRouter (API routing layer used to normalize access to the providers listed above -- no additional AI models are used beyond those explicitly listed in this policy)

Additionally, documents you upload may be processed by:

• FireCrawl - For document parsing (extracting text from PDFs and other file formats) and website content retrieval
• OpenAI Embeddings - To create searchable vector representations of your documents, enabling AI agents to find and reference relevant information from your uploaded content

We do not use your content to train our own AI models, and our providers do not use your content to train theirs. Your conversations and documents belong to your organization.

You are responsible for ensuring that you have the right to upload any documents or content you submit to the platform, including any documents that may contain personal information of third parties. By uploading content, you confirm that you have obtained any necessary consent or authorization to share that information with our service and its sub-processors.

5. Sub-processors and service providers

We use the following third-party service providers to operate our services. Each provider only receives data necessary to perform their specific function:

6. Data storage and security

6.1 Where your data is stored

Cortex platform data is stored using United States-based infrastructure providers, including Cloudflare (application hosting and file storage) and Neon (database, encrypted at rest). Your data may be processed at edge locations globally as part of normal service delivery through Cloudflare's network.

6.2 Security measures

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of API keys and service credentials at rest
• HTTPS encryption for all data in transit
• Multi-tenant data isolation (each customer's data is logically separated)
• Role-based access controls within the platform
• JWT-based authentication with secure, HttpOnly refresh tokens
• Rate limiting on authentication endpoints

No data transmission over the internet is 100% secure. While we implement strong security practices, we cannot guarantee absolute security.

7. Cookies and analytics

7.1 Marketing website (215.tech)

We use Fathom Analytics for basic, anonymous website analytics. Fathom does not track you, does not use cookies for tracking, and does not collect any personally identifiable information. It simply tells us which pages are popular and helps us understand how visitors use our site.

Our website works perfectly fine with cookies blocked. We never use cookies to track or identify individual users, and we never sell or share any analytics data.

7.2 Cortex platform

The Cortex platform uses the following cookies and local storage:

• Authentication cookie - A secure, HttpOnly cookie containing your refresh token, used to keep you signed in. This cookie is essential for the service to function and expires after 7 days of inactivity.

We use Sentry for error monitoring on the Cortex platform. Sentry collects technical error data and limited browser environment information to help us identify and fix bugs. We actively strip all personally identifiable information from error data before it is transmitted to Sentry, ensuring that no user names, email addresses, or other personal data appear in our error logs. Sentry may record anonymized session replays when errors occur to help us diagnose issues.

7.3 Infrastructure telemetry

Our website and the Cortex platform are deployed using Cloudflare Workers. The deployment tooling (Cloudflare Wrangler) collects anonymized telemetry about how the Cloudflare Worker infrastructure is used. This telemetry is collected by Cloudflare to identify bugs and improve their developer platform. It does not collect any personal data from you or any visitor to our services.

The telemetry is strictly operational and includes only:

• Which deployment commands are run and their duration
• Worker configuration details (framework, file format)
• Tooling version and runtime environment (OS, Node.js version)
• Anonymized error classifications (error type only, no file paths or stack traces)

This telemetry explicitly excludes usernames, file contents, environment variables, secret names or values, stack traces, and any user-identifying information. No personal data from visitors, customers, or platform users is ever collected through this process. For more details, see Cloudflare's Wrangler telemetry documentation.

8. Data retention

We retain your data as follows:

• Marketing website contact submissions - Retained only as long as necessary to respond to your inquiry, then deleted.
• Cortex account data - Retained for the duration of your organization's active account. When an account is closed, we will delete your data within 90 days unless required by law to retain it, except for text message consent, opt-out, and related compliance records, which are retained as described below.
• Text message records - Routine message delivery records are cleaned up periodically. Records of consent, confirmation, withdrawal of consent, and opt-out requests are retained as long as needed to demonstrate consent, honor opt-outs, prevent unwanted messages, and meet applicable obligations, including after text messages are disabled or an account is closed. See Section 11.
• Chat conversations and documents - Retained for the duration of your organization's active account. You or your organization's administrator may delete individual conversations and documents at any time.
• Usage logs - Retained for billing and service improvement purposes for up to 24 months.
• Error logs (Sentry) - Automatically expire per Sentry's data retention policies (typically 90 days).

9. Disclosure of information

We do not sell or trade your personal information. We do not collect, trade, or sell information from website visitors who are not customers.

We share information with the sub-processors listed in Section 5 solely to operate and deliver our services. Each provider only receives the minimum data necessary to perform their function.

If you enroll in optional Cortex text notifications, your phone number, message content, and delivery information are processed by our messaging provider (Sent.dm) and the telecommunications carriers involved in delivering messages, solely to send messages, receive replies, and honor your preferences. No mobile information will be sold or shared with third parties for promotional or marketing purposes, and we do not sell or share text-message opt-in data or consent with third parties for their own marketing.

We may also disclose information when required to comply with legal requirements, enforce our policies, or protect our rights, property, or safety.

10. Your rights and choices

You have the right to:

• Access your personal data stored by us
• Correct inaccurate personal data
• Delete your personal data (subject to legal and contractual obligations)
• Export your data in a portable format upon request
• Withdraw consent for optional data processing activities

For Cortex platform users, you can delete your own chat sessions and uploaded documents at any time through the platform interface. For account-level changes or data export requests, contact your organization's administrator or reach out to us directly.

You can withdraw consent to Cortex text notifications at any time, without closing your account, by replying STOP to a Cortex text message or by disabling text messages in Profile → Communication preferences in Cortex. See Section 11 for details.

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.

11. Text messages and SMS communications

11.1 Support-desk communications

If you provide your phone number for our support desk, we use it for technical support and service-related communications. We do not use support-desk phone numbers or text-message consent for marketing.

11.2 Optional Cortex text notifications

Where available, Cortex users may choose to receive optional service-related text messages from 2Fifteen Tech Cortex. Current features include enrollment confirmations and notifications about Cortex service outages and recovery. Enrolling in text messages is optional and is not required to use Cortex.

Notifications are currently delivered by SMS. RCS delivery on supported devices and carriers is planned but not yet available; if it is enabled and covered by the disclosure you accept, notifications may be delivered by SMS or RCS according to availability. The processing described in this section applies to whichever channel is used. Program terms are published in the Optional Cortex SMS and RCS Messaging Terms.

To enroll, you provide a supported U.S. mobile number, accept the SMS disclosure in Cortex, and confirm ownership by replying YES to the enrollment message within 24 hours. After confirmation, you choose the available notification categories you want to receive. Uptime notifications require a separate selection.

11.3 Message frequency and charges

You may receive up to 20 notification messages per month. Enrollment confirmation texts are additional. You may also receive automated responses associated with confirmation, help, or opt-out requests. Message and data rates may apply under your wireless plan. Delivery and timing depend on our messaging providers and your carrier; messages may be delayed or unavailable.

11.4 Information we process

We process your phone number, its association with your Cortex account and organization, your notification preferences, and records of enrollment, confirmation, and withdrawal of consent. Consent records may include the disclosure you accepted, the linked policies, timestamps, and the IP address and browser information associated with your enrollment request.

We also process message content and operational information needed to send messages and handle replies, including message identifiers, delivery or failure status, timestamps, and opt-out requests.

11.5 Messaging service providers

We use Sent.dm and the telecommunications providers involved in message delivery to transmit text messages, receive replies, process delivery information, and manage messaging preferences and opt-outs. These providers process the phone numbers, message content, and delivery information needed to provide those services.

11.6 Stopping messages and getting help

Reply STOP to a Cortex text message to opt out, or disable text messages in Profile → Communication preferences in Cortex. Opting out stops future Cortex notification texts to that number. Messages already being transmitted may still arrive, and the messaging provider may send an opt-out confirmation.

Reply HELP for assistance, email support@215.tech, or call 385-237-0481 (our support desk, not the messaging sender). For privacy requests, use the contact details in this policy.

If you previously opted out by texting STOP and want to enroll again, first text START to the same sender, then complete a new enrollment in Cortex and reply YES. Sending START alone does not restore your Cortex notification subscriptions.

11.7 Retention and protection

We protect stored phone numbers and enrollment-request evidence using encryption and restrict access through account and organization controls. We also maintain a protected identifier derived from your phone number to recognize opt-out requests and prevent unwanted messages.

Disabling messages does not automatically delete consent or opt-out records. We retain records needed to demonstrate consent, honor opt-outs, prevent duplicate or unwanted messages, investigate delivery problems, and meet applicable obligations. Requests to delete personal information remain subject to these retention needs. Messaging and telecommunications providers may maintain separate records under their applicable policies and obligations.

12. Meeting and call recordings

At 2Fifteen Tech, we may record meetings and calls with clients and partners for internal purposes. This section outlines our practices regarding these recordings:

12.1 Recording practice

• All meetings or calls may be recorded by default unless specifically requested otherwise prior to the meeting.
• These recordings are used internally for note-taking, training, and service improvement purposes.

12.2 Data usage and sharing

• Meeting or call recordings are strictly for internal use within 2Fifteen Tech.
• We do not share, sell, or distribute these recordings to external parties.
• The content of these recordings is treated with the same level of confidentiality as all other client information.

12.3 Retention and deletion

• Meeting or call recordings are stored securely in our internal systems.
• Upon written request specifically identifying the meeting in question, we will delete the recording of that meeting or call.
• To request deletion, please contact us using the information provided at the end of this policy.

12.4 Opting out of recording

• If any participant requests that a meeting or call not be recorded, we will not record that session. You may make this request at any time before or during the meeting.
• No reason is required to opt out, and opting out will have no impact on the quality of service you receive.

12.5 Notification

• This privacy policy serves as notification of our recording practices.
• If you wish to opt out of recording for a specific meeting, please notify us before or at the start of the meeting.

13. Children's privacy

Our website and services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will promptly delete such information.

14. Third-party links

Our website and platform may contain links to third-party websites and services. This Privacy Policy only applies to our own services. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of those sites before providing any personal information.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be posted on our website with the effective date. For material changes that significantly affect how we handle your data, we will make reasonable efforts to notify affected users. We encourage you to review the Privacy Policy periodically for any changes.

16. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or the information we hold about you, please contact us at:

Email: privacy@215.tech

Thank you for trusting 2Fifteen Tech with your technology needs. We take your privacy seriously.