# Privacy Notice — Cognithor Agent OS

**Version:** 1.0
**Date:** 2026-03-28

## What data is stored?
- Your messages and conversations (for context and response quality)
- Created memories, notes, and knowledge graph entries
- Processing logs (which tools were used)

## Legal basis
- **Consent (Art. 6(1)(a) GDPR)** for message processing and storage
- **Legitimate interest (Art. 6(1)(f) GDPR)** for security logging

## Third parties
In hybrid/online mode, queries may be forwarded to cloud AI services (e.g. Anthropic, OpenAI). Separate consent is obtained for this.

## Retention periods
- Conversations: 180 days
- Memories: 90 days
- Security logs: 365 days
- OSINT reports: 30 days

## Your rights
- **Access** (Art. 15 GDPR): Request a copy of your data at any time
- **Erasure** (Art. 17 GDPR): Request deletion of all your data
- **Withdrawal** (Art. 7(3) GDPR): Withdraw your consent at any time
- **Portability** (Art. 20 GDPR): Export your data in JSON format

## Contact
Data controller: [Configured in config.yaml]
