Cosmosys, LLC (“we,” “us,” “our,” or “CosMoSys Digital”) is committed to maintaining robust privacy protections for our users. This Privacy Policy governs your use of cosmosys.digital, rei.cosmosys.digital, associated sub-domains, our client portals, and any related software integrations or services.

1. Information We Collect

We collect information necessary to provision, maintain, and secure your automated business infrastructure.

Account & Identity Data: Legal business name, business entity classification (LLC, Corporation, Sole Proprietorship), Employer Identification Number (EIN) or Social Security Number (SSN, if sole proprietor), registered agent/business address, authorized representative contact name, email address, and billing phone number.

Billing & Transaction Data: Payment card details, transaction histories, billing addresses, and payment tokens handled via our third-party merchant processor (Stripe). We do not store raw credit card numbers on internal servers.

Telephony & Campaign Data: Brand registration details, business websites, sample text messages, opt-in disclosures, and target operational area codes required for A2P 10DLC compliance and campaign vetting.

Operational & Systems Data: Data voluntarily uploaded to our systems by you, including contact lists, lead spreadsheets (CSV/XLSX), property addresses, custom values, and operational rules.

Technical & Analytics Data: Browser type, device operating system, access timestamps, and interactions with our web pages collected via standard analytics tools and session cookies.

2. How We Collect Information

Direct Form Submissions: When you complete an order form, onboarding intake questionnaire, survey, or appointment booking calendar across our web properties.

Automated System Provisioning: Information collected when your GoHighLevel sub-account is generated, snapshots are deployed, and phone lines are registered.

Communications: Direct messages, SMS check-ins, emails, or phone calls initiated between your team and our technical support desk.

3. How We Use Your Information

We use the collected information strictly for legitimate commercial and technical purposes:

Configuring, hosting, and deploying automated acquisitions and business workflows.

Submitting mandatory carrier brand and campaign registrations to The Campaign Registry (TCR) for telecom compliance.

Processing platform subscriptions, setup fees, and automated usage rebilling.

Delivering automated service notices, payment invoices, workflow alerts, and critical technical notices.

Improving proprietary system architecture, troubleshooting workflow errors, and optimizing conversational AI engines.

4. Strict Mobile Information & A2P 10DLC Messaging Policy

We strictly adhere to CTIA and carrier standards regarding text messaging privacy:

No Selling or Renting: We do not sell, rent, trade, or share mobile numbers or mobile information with third parties or affiliates for marketing or promotional purposes under any circumstances.

Originator Data Protection: All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with or transferred to any third parties.

Opt-Out Mechanism: You and your contacts can opt out of SMS communications at any time by replying STOP, QUIT, CANCEL, END, or UNSUBSCRIBE to any automated text message sent from our platform.

5. Third-Party Service Providers and Data Disclosures

We share data with trusted third-party service providers solely to the extent required to deliver our platform and fulfillment services:

Infrastructure & CRM Hosting: GoHighLevel (HighLevel Inc.) for sub-account, pipeline, and automation management.

Merchant Processing: Stripe, Inc. for secure tokenized payment collection and subscription billing.

Telecommunications & Carrier Routing: Twilio Inc., LeadConnector, and The Campaign Registry for phone number leasing, SMS/MMS routing, and A2P 10DLC brand registration.

Artificial Intelligence Engines: OpenAI, LLC and connected Voice AI infrastructure for conversational parsing, qualification routing, and prompt generation.

Legal Obligations: If mandated by law, court order, or governmental authority to comply with valid legal processes or defend against legal claims.

6. Data Storage, Retention, and Deletion

Active Retention: We retain your account data and sub-account configuration files as long as your platform subscription remains active and in good standing.

Post-Cancellation Retention: Upon account cancellation or suspension, we reserve the right to retain your sub-account data for up to thirty (30) days as a data hold period, after which inactive sub-accounts, contact records, and customized workflows may be permanently scrubbed from our active servers.

Data Deletion Requests: You may request the deletion of personal data by contacting [email protected], subject to our obligation to retain transaction records required for tax, compliance, or dispute defense purposes.

7. Security Standards

We employ industry-standard technical, organizational, and electronic safeguards designed to protect personal and business information from unauthorized access, alteration, or disclosure. However, no internet transmission or electronic data storage platform is entirely impervious to security breaches, and we cannot guarantee absolute data security.

8. Contact Information

For inquiries regarding this Privacy Policy or your data rights, contact:

Cosmosys, LLC

Email: [email protected]

Website: cosmosys.digital