Privacy Policy

Privacy should not require a decoder ring.

This Privacy Policy explains what information Cog Mission collects when you use Wocket or visit our public websites (www.cog-mission.com and www.usewocket.com), how we use it, when we share it, how we protect it, and what choices you have.

We build software for people running real businesses. That means we understand that the information inside Wocket is not abstract data.

It can be your customers.

Your employees.

Your schedules.

Your invoices.

Your business.

We treat it accordingly.

1. Information We Collect

The information we collect depends on how you interact with Wocket.

Information you provide directly

You may provide information such as:

• Name
• Email address
• Phone number
• Account credentials
• Profile information
• Business or organization information
• Customer and client information
• Lead information
• Job and scheduling information
• Invoice and payment information
• Team and employee information
• Communications with us
• Support requests
• Research or feedback you voluntarily provide
• Other information you choose to enter into Wocket

Business information you store in Wocket

Wocket is a business operations platform.

Depending on the features you use, your account may contain information about your business, including customer records, leads, jobs, schedules, invoices, payments, employees, payroll summaries, media, notes, and other business records.

See our Terms of Service for more about ownership and the limited rights Cog Mission needs to process that information in order to provide Wocket.

Information collected automatically

When you use Wocket or visit our websites, we may automatically collect information such as:

• IP address
• Browser and device information
• Operating system
• Pages or screens visited
• Approximate location derived from IP address
• Usage and interaction information
• Security and authentication events
• Referring website
• Date and time of activity
• Diagnostic and performance information

We use this information to operate, secure, troubleshoot, and improve Wocket.

2. How We Use Information

We use information to:

• Provide, maintain, and operate Wocket
• Create and manage accounts
• Provide customer support
• Process transactions and related billing
• Provide scheduling, job, customer, and business-management features
• Authenticate users and protect accounts
• Send technical notices and service communications
• Respond to questions, comments, and support requests
• Improve Wocket and develop new features
• Understand how people use our public websites and products
• Detect, prevent, and investigate fraud, abuse, security incidents, and technical problems
• Meet legal, regulatory, accounting, and contractual obligations
• Enforce our Terms of Service and other agreements
• Protect the rights, safety, and security of Cog Mission, our customers, and others

We do not use your business data simply because we can.

Our use of customer information is tied to operating Wocket, supporting our customers, keeping the platform secure, meeting our obligations, and improving what we build.

3. Information Sharing

We may share information in the following circumstances.

Service providers

We use trusted service providers to help operate Wocket and our business.

These providers may process information on our behalf for services such as:

• Cloud hosting and infrastructure
• Authentication
• Payment processing
• Email and communications
• Analytics
• Security and monitoring
• Customer support
• Data storage and backup
• Other services necessary to operate Wocket

Service providers are permitted to process information only as necessary to provide the services we engage them to provide and subject to applicable contractual and legal requirements.

With your direction or consent

We may share information when you direct us to do so or otherwise provide appropriate consent.

Legal and safety requirements

We may disclose information when reasonably necessary to:

• Comply with applicable law, regulation, legal process, or government request
• Protect the rights or property of Cog Mission
• Enforce our agreements
• Detect or prevent fraud, abuse, or security threats
• Protect the safety of our customers, users, or others

Business transfers

If Cog Mission is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable legal requirements.

4. Your Business Data Is Yours

We believe this deserves its own section.

Your customers, jobs, schedules, invoices, team records, and other business content that you enter into Wocket remain your business information.

Cog Mission does not claim ownership of that information.

We process it because you have asked us to provide a service that stores, organizes, calculates, displays, transmits, and protects it.

Our Terms of Service describe the limited rights we need to operate Wocket.

5. Security

We take reasonable and appropriate measures to protect information against unauthorized access, alteration, disclosure, and destruction.

Our security practices include measures such as:

• Encryption in transit
• Encryption at rest for sensitive information
• Access controls
• Authentication and authorization
• Role-based permissions
• Company and account boundaries
• Security monitoring
• Audit logging
• Vulnerability management
• Backup and recovery procedures
• Incident-response processes
• Security assessments

No system connected to the internet is completely secure.

For more information, see our Information Security & Data Protection Policy.

6. Healthcare Information, PHI & HIPAA

Some Wocket customers may operate in healthcare or senior-care environments.

If your organization uses Wocket to handle Protected Health Information (PHI), additional requirements may apply.

PHI should only be stored in designated Healthcare Documentation workflows and only when the applicable Business Associate Agreement (BAA) is active.

Do not place PHI into ordinary job notes, general CRM notes, chat, marketing analytics, screenshots, invoice descriptions, or other areas not designed for PHI.

A BAA does not make every use of Wocket HIPAA-compliant. Your organization remains responsible for its own HIPAA policies, procedures, risk assessments, workforce training, and legal obligations.

For more information, see:

HIPAA, Protected Health Information (PHI), and Business Associate Agreements (BAA)

7. Cookies, Browser Storage & Analytics

We use cookies, first-party browser storage, and analytics technologies for purposes such as operating our websites, remembering preferences, understanding usage, improving our products, and measuring the effectiveness of our public pages.

First-party marketing analytics

On public Cog Mission and Wocket marketing pages (www.cog-mission.com and www.usewocket.com), we may record information such as:

• A pseudonymous visitor identifier
• A tab-session identifier
• Page path and page title
• Campaign parameters
• Referrer information, with query details removed
• Active time while the page is visible
• The maximum percentage of the page reached

We do not store page query strings or URL fragments in page-view records.

Our first-party marketing analytics does not run when your browser sends Global Privacy Control (GPC) or Do Not Track (DNT) signals.

Google Analytics

Our public marketing pages also use Google Analytics to understand website traffic and usage.

You can configure your browser or device settings to limit cookies, browser storage, or certain forms of tracking.

Because browsers and devices differ, the controls available to you may vary.

8. Approximate Location Information

We may use an IP address to estimate a visitor's general geographic area, such as:

• Country
• Region or state
• City

This information is approximate.

For example, an IP address may indicate that someone is likely in Pennsylvania without identifying their street address.

We use approximate location information for purposes such as website analytics, security, fraud prevention, localization, and understanding general usage patterns.

We do not treat IP-based location as precise device location.

9. Third-Party Services

We use third-party services to help operate Wocket and our websites.

These may include providers for:

• Analytics
• Hosting and infrastructure
• Authentication
• Payments
• Email
• Security
• Approximate IP-based location
• Customer support
• Other operational functions

For example, our public website analytics may use Google Analytics, and IP-based geographic estimation may use ipapi.co.

Third-party providers have their own privacy practices and terms.

Wocket may also contain links to third-party websites or integrations that Cog Mission does not control.

When you follow a third-party link or activate a third-party integration, that provider's terms and privacy policy may apply.

10. Your Privacy Rights & Choices

Depending on where you live and the laws that apply to you, you may have rights to:

• Access personal information we hold about you
• Request correction of inaccurate information
• Request deletion
• Request restriction of certain processing
• Request portability of certain information
• Withdraw consent where processing is based on consent
• Object to certain processing
• Appeal a privacy decision where applicable
• Exercise other rights provided by applicable law

We may need to verify your identity before completing certain requests.

Some rights are subject to legal exceptions.

For example, we may retain information that we are legally required to keep or that is reasonably necessary for security, fraud prevention, accounting, legal claims, or other permitted purposes.

We will not discriminate against you for exercising privacy rights available to you under applicable law.

11. Account Deletion

You may request deletion of your Wocket account and associated personal information.

Before requesting deletion, we strongly recommend exporting the business records you need to keep.

Depending on your account and enabled features, exports may include:

• Customers
• Leads
• Jobs
• Schedules
• Invoices
• Payments
• Team records
• Payroll summaries
• Media
• Analytics
• Other supported business records
• An all-company data bundle

Once production data has been deleted, it may not be recoverable.

Some information may be retained where required by law, regulation, accounting requirements, security obligations, dispute resolution, fraud prevention, or other legitimate purposes.

For complete instructions, see Account Deletion & Data Removal.

12. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including:

• Providing Wocket
• Maintaining customer accounts
• Meeting legal and contractual obligations
• Accounting and financial reporting
• Security and fraud prevention
• Resolving disputes
• Enforcing agreements
• Maintaining appropriate business and audit records

Retention periods vary depending on the type of information and why we have it.

Financial, tax, payment, and accounting records may be retained for periods required by applicable law, which may be as long as seven years or longer in certain circumstances.

When information is no longer required, we may delete it, de-identify it, or otherwise dispose of it in accordance with our retention practices.

Backup systems may retain information for a limited period after deletion from active production systems while those backups expire through normal retention cycles.

13. Children's Privacy

Wocket is designed for businesses and organizations and is not directed to children under 13.

We do not knowingly collect personal information from children under 13 through the Service.

If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.

14. International Data Transfers

Cog Mission and its service providers may process information in the United States and other jurisdictions where our providers operate.

Those jurisdictions may have data-protection laws that differ from the laws where you live.

Where required, we use appropriate safeguards for international transfers.

15. Communications

We may send you communications necessary to operate your Wocket account, including:

• Account notices
• Security alerts
• Password and authentication messages
• Billing and payment notices
• Service announcements
• Support communications
• Important changes to policies or agreements

You may receive certain operational communications even if you have opted out of optional marketing communications.

We do not consider a security alert or billing notice a marketing email simply because it arrived in your inbox.

16. Research, Feedback & Product Improvement

Cog Mission builds products by listening to the people who use them.

If you voluntarily participate in research, interviews, roundtables, surveys, product testing, or provide feedback, we may use that information to understand customer needs and improve our products.

We may use aggregated or appropriately de-identified information to identify trends and improve Wocket.

We will not publicly identify you or publish confidential business information as part of a customer story, case study, or research publication without appropriate permission.

We believe the best products come from understanding the actual problem — not guessing from a spreadsheet.

17. Changes to This Privacy Policy

Privacy practices evolve as products, technology, laws, and business operations change.

We may update this Privacy Policy from time to time.

When we do, we will:

• Post the updated policy here
• Update the "Last Updated" date
• Provide additional notice when required for material changes

Your continued use of Wocket after an updated policy becomes effective means the updated policy applies to your continued use of the Service.

18. Contact

Questions about privacy, personal information, or this policy:

[email protected]

For account support:

Support

For account deletion:

Account Deletion & Data Removal

If you're not sure what something in this policy means, ask us.

Privacy policies should explain what happens to your information. They shouldn't make you need a law degree to figure it out.