This Privacy Policy explains how Octogen Systems Inc ("Octogen", "we", "us", or "our") collects, uses, shares, and retains personal information when you use Cosimo's website, applications, product-discovery services, and connected integrations, including Cosimo in ChatGPT. It also applies to the activities described here when offered through octogen.ai. Any additional notice for another Octogen service describes that service's specific practices.

Cosimo helps you discover and compare products. Purchases take place on retailer websites. The Cosimo ChatGPT integration does not place orders or process payments.

Depending on the features you use, we process:

• •Account and connection information, such as your name, email address, account identifier, sign-in provider, preferences, and records of applications you authorize to access Cosimo.
• •Information you provide through the service, such as shopping requests, product links, conversations, saved searches, collections, cart selections, preferences, and uploaded images. These categories depend on the features you use; a product-tool request does not by itself use every website feature.
• •Service and technical information, such as request times, tool or feature used, result and error categories, usage counts, latency, and security or access records. Hosting, network, and service providers may also process IP addresses, browser information, requested URLs, and referral information.
• •Support and privacy-request information, including correspondence and the information needed to verify your identity, establish which records belong to you, process a request, and document its outcome.
• •Your email address and subscription preferences if you choose to receive newsletters or other optional communications.

Information in a free-text request, product URL, conversation, or upload may itself contain personal information. Please provide only information relevant to your shopping request. Use Cosimo's sign-in interface to authenticate; do not include passwords, payment-card information, government identifiers, or sensitive health information in shopping requests.

When ChatGPT invokes a Cosimo tool, Cosimo receives the information passed to that tool, such as a shopping query, product URL, pagination information, or product shortlist, together with information used to authenticate and authorize the connection. Cosimo uses these inputs to understand the request, search or look up products, and return product information, images, and links to ChatGPT.

Query understanding, search, and related processing may use AI and search service providers. Functional processing of a request is separate from operational logging: reducing diagnostic content does not mean that no service provider processes the request.

Using Cosimo through ChatGPT also involves OpenAI's services and privacy practices. Following a link to Cosimo or a retailer is a separate interaction with that website. Cosimo currently earns no affiliate or referral commissions and has no paid product placements.

We use information to:

• •Provide product discovery, lookup, comparison, images, and other features you request.
• •Create and manage accounts, authenticate connections, enforce permissions and usage limits, and maintain your chosen preferences or saved content.
• •Operate, secure, troubleshoot, and improve the service, including investigating errors, preventing abuse, and measuring reliability and usage.
• •Respond to support and privacy requests, verify identity and record ownership, process deletion, and track outstanding work or retained copies.
• •Send account or service notices and optional communications you choose to receive.
• •Meet applicable legal obligations and protect the rights and security of users, Octogen, and others.

We use service providers for cloud hosting and storage, account authentication, databases and search, AI processing, security and error monitoring, service diagnostics, customer support, and optional email communications. These providers receive information relevant to the services they perform. The providers and information involved depend on the feature you use.

Product-tool results are returned to the connected host, such as ChatGPT. Retailers and other websites you choose to visit process information under their own policies. Connecting Cosimo does not authorize it to change a retailer account, place an order, or manage a retailer's records.

We do not sell, rent, or lease our customer lists. We may disclose information when required by law or when reasonably necessary to protect users, investigate misuse, enforce our rights, or respond to a security incident.

Cosimo uses cookies and browser storage for sign-in, session continuity, preferences, saved or cached state, and the operation of requested features. Service diagnostics help us understand reliability, performance, errors, and usage. Optional communications may include delivery, open, or link-click information where the communication provider supports it.

Our application logging and tracing controls are designed to minimize raw account identifiers and request content in new diagnostics. Historical records and information held by hosting, network, or other providers may have different coverage and retention. We do not treat every diagnostic record as anonymous.

You can manage browser cookies and storage using your browser's settings, and manage authorized applications through your Cosimo profile. Restricting browser storage may affect sign-in or other features. Clearing a browser does not remove information already held by Cosimo or its service providers.

Retention depends on the type of record and the system holding it:

• •Account and account-linked application data are generally retained while your account is in use and until a verified deletion request or another applicable deletion process is carried out. Not all account, content, or authorization records have an automatic age-based expiry. Token expiry or disconnection does not itself erase the stored authorization history.
• •Standard application logs in our default Google Cloud Logging project bucket have a configured retention period of 30 days.
• •Certain required Google Cloud audit logs have a configured retention period of 400 days. These are separate from ordinary product-tool diagnostics.
• •Selected Platform API audit-log exports in our audit dataset have a configured daily-partition expiration period of 90 days. This period applies to those exports where relevant, not to every Cosimo record.
• •Cached data, deleted-file recovery storage, database recovery copies, exports, support records, and provider-held records have separate lifecycles. A record can stop being available through the active service before every retained copy is removed.

The 30-day, 90-day, and 400-day periods describe the specified stores, not a service-wide deletion deadline. Some historical, exported, inaccessible, or provider-held copies have not yet been fully inventoried or assigned a verified expiry date. We cannot currently state a single maximum retention period for every such copy. We track known retained or unresolved copies separately and explain the status and applicable limits of a privacy request using the evidence available for that request.

Restricted identity-verification, deletion-control, security, and request-outcome records may also remain to process a request, prevent continued access, account for pending work, or meet applicable obligations. Their retention is separate from deletion of active shopping data. An unknown copy or expiry is not treated as proof that the copy has been deleted or is legally exempt from deletion.

To request deletion of your Cosimo account information, contact us at support@storerouter.ai. Identify the Cosimo account involved and, where possible, write from its associated email address. We may need additional information to verify your identity and establish which records belong to that account. Do not send your password or authentication codes.

We support a staff-assisted process to revoke access and remove verified, user-owned data from active Cosimo account, authorization, conversation/search, saved-content, preference, document, and uploaded-file stores, as applicable to the account and reviewed request. Each request requires its own identity, ownership, scope, and readiness checks. Shared retailer/catalog information, another person's records, other accounts, and unverified aliases are not automatically included.

Deletion is a process with separate removal and verification steps. We report what has been verified removed from active systems and what remains pending, retained, unresolved, or subject to an applicable exception. We may need to seek information or action from a service provider before we can confirm its disposition. A request being accepted or an account becoming inaccessible does not establish that every copy has been erased.

Active account-data deletion does not currently establish complete erasure of every historical or external copy. Known limitations can include:

• •Soft-deleted uploaded files awaiting their configured recovery period and independent expiry verification.
• •Historical logs, traces, AI-provider records, support or billing records, exports, snapshots, and database recovery or backup copies.
• •Historical cache contents, retained replica data, and copies in offline browsers, devices, downloads, or other client-held storage.
• •Historical information held by a service provider, in an inaccessible system, or in a location whose coverage or retention has not yet been confirmed.

We do not promise immediate physical removal from every system or a fixed completion date for every retained copy. The current workflow also does not verify that every later restoration or re-import of historical information is prevented from reintroducing a copy. We distinguish these limitations from data verified removed from active systems and from records retained under an applicable legal obligation or exception.

Where completion is not verified, the request remains pending or requires follow-up for those records. We use the actual request's verified scope and remaining work when communicating its status. Contact us for the status of your request and the information available about outstanding copies.

You can review and disconnect authorized applications in your Cosimo profile. You can also manage the connection through ChatGPT or another connected host's settings. Connection management and account deletion are separate actions; disconnecting an application does not by itself remove historical account, authorization, or diagnostic records.

You can update available account preferences and saved content through the service, manage browser storage through your browser, and unsubscribe from optional marketing emails using the unsubscribe mechanism in those messages. You can contact support@storerouter.ai with questions or requests about your information. We handle requests according to their verified scope and applicable law; some requests require additional verification or information. The technical limitations described in this policy do not limit your rights under applicable law.

We use access controls, encrypted connections, and operational safeguards intended to protect personal information. Access to deletion operations and their supporting evidence is restricted to authorized personnel and services. No internet service or storage system can guarantee absolute security.

Cosimo is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Cosimo, contact support@storerouter.ai so we can investigate and handle the information appropriately.

We may revise this policy when our services or data practices change. We will update the date shown on this page and provide additional notice of material changes when appropriate or required. The current version describes the practices and limitations applicable to the services covered here.

For privacy questions, account-deletion requests, or information about an outstanding request, contact:

Last updated: October 16, 2026.