Privacy & Security

Privacy Policy

Your privacy is our priority. Learn how we collect, use, and protect your personal information.

Last updated: December 25, 2024

Introduction

Welcome to CognifyWork, operated by Orhan Bülbül, trading as CognifyWork ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our MBTI personality assessment services.

We understand that privacy is fundamental to building trust with our users. This policy provides transparent information about our data practices to help you make informed decisions about using our services. By using our website and services, you consent to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide to Us

We collect information that you voluntarily provide to us when using our services:

  • Account Registration: Name and email address when you create an account or sign up for our services
  • Test Initiation: Name and basic demographic information when you start taking the MBTI assessment
  • Contact Forms: Contact information, messages, and any other details you provide when you reach out to us
  • Payment Information: Billing details processed securely through our payment providers (we do not store full payment card details)
  • Communication Preferences: Your choices regarding marketing communications and notifications

Information We Collect Automatically

When you visit our website, we automatically collect certain information about your device and browsing behavior:

  • Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
  • Browser Information: Browser settings, language preferences, and installed plugins
  • IP Address: Your Internet Protocol address and approximate geographic location
  • Usage Data: Pages visited, time spent on pages, click paths, referring websites, and interaction patterns
  • Technical Data: Session information, error logs, and performance metrics

Assessment and Test Data

We collect and process data specifically related to your personality assessment experience:

  • Test Responses: Your answers to all MBTI personality assessment questions
  • Assessment Results: Calculated personality type, scores, and dimensional preferences
  • Generated Reports: Personalized personality reports, insights, and recommendations based on your results
  • Test Progress: Completion status, time taken, and any incomplete sessions
  • Historical Data: Previous test results if you retake assessments

How We Use Your Information

Provide and deliver our MBTI personality assessment services
Generate personalized personality reports and insights
Communicate with you about your account and our services
Improve our services and develop new features
Ensure security and prevent fraudulent activities
Comply with legal obligations and protect our rights

How We Share Your Information

We respect your privacy and do not sell, trade, or rent your personal information to third parties for marketing purposes. We may share your information only in the specific circumstances outlined below:

Service Providers

We share information with trusted third-party service providers who assist us in operating our website and providing our services. These include:

  • Paddle: Our payment processor for handling secure transactions and billing
  • Google Services: For authentication (Google Sign-In) and security (reCAPTCHA)
  • Email Service Providers: For sending transactional emails and notifications
  • Hosting Providers: For website infrastructure and data storage

All service providers are bound by confidentiality agreements and are only authorized to use your information for the specific services they provide to us.

Legal Compliance

We may disclose your information when required by law, legal process, or government request, or when we believe disclosure is necessary to:

  • Comply with applicable laws and regulations
  • Respond to lawful requests from public authorities
  • Protect our rights, property, or safety
  • Protect the rights, property, or safety of our users or others
  • Prevent or investigate potential fraud or security issues

Business Transfers

In the event of a merger, acquisition, bankruptcy, dissolution, reorganization, or similar business transaction or proceeding, your information may be transferred as part of the business assets. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

Data Security

We implement comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data security is our top priority.

Our Security Measures Include:

  • SSL Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS protocols
  • Password Hashing: User passwords are hashed using industry-standard algorithms and never stored in plain text
  • Database Security: Database access is restricted and monitored with comprehensive logging
  • Regular Security Audits: We conduct regular security reviews and vulnerability assessments
  • Secure Infrastructure: Our hosting infrastructure meets industry security standards

Encryption

All data is encrypted in transit and at rest using industry-standard protocols.

Access Control

Strict access controls ensure only authorized personnel can access your data.

Regular Monitoring

We continuously monitor our systems for potential security threats.

Data Backup

Regular secure backups ensure your data is protected against loss.

Your Data Protection Rights

You have certain rights regarding your personal information under applicable data protection laws, including GDPR and CCPA. These rights may vary depending on your location and the nature of our relationship with you.

Access

Request a copy of the personal information we hold about you.

Correction

Request correction of inaccurate or incomplete information.

Deletion

Request deletion of your personal information under certain circumstances.

Portability

Request transfer of your data to another service provider.

To exercise these rights: Contact us at privacy@cognifywork.com with your request. We will respond within 30 days.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, ensure security, and analyze how our services are used. Below is a detailed breakdown of the types of cookies we use:

Strictly Necessary Cookies

These cookies are essential for the website to function properly and cannot be disabled. They do not require your consent as they are necessary for the basic operation of our services.

  • Laravel Session: Maintains your session state while browsing our website
  • CSRF Token: Protects against cross-site request forgery attacks
  • Cookie Consent (laravel_cookie_consent): Remembers your cookie preferences
  • Authentication: Keeps you logged in to your account

Functional Cookies

These cookies enhance your user experience by remembering your preferences and settings.

  • Language Preference: Remembers your preferred language selection
  • Theme Settings: Stores your interface preferences (if applicable)
  • Test Preferences: Remembers your assessment display preferences

Analytics and Performance Cookies

These cookies help us understand how visitors interact with our website by collecting anonymous statistical information.

  • Google Analytics: Tracks website usage patterns, popular pages, and user flows (when implemented)
  • Performance Monitoring: Helps us identify and fix technical issues
  • User Experience Analytics: Provides insights to improve our services

Third-Party Cookies

Third-party services we use may place their own cookies on your device. These cookies are controlled by the respective third-party services and subject to their own privacy policies.

  • Google reCAPTCHA: Used for spam and bot detection to protect our forms and ensure security. Cookies are used for fraud prevention and abuse detection.
  • Google Sign-In: Enables single sign-on functionality when you choose to log in with your Google account. Google may place cookies for authentication and account management.
  • Paddle Payment System: Our payment processor may place cookies for payment processing, fraud detection, and transaction security when you make purchases.

Important Security Notice: Google reCAPTCHA

Google reCAPTCHA operates independently of your cookie consent choice. This security measure is essential for protecting our website and all users.

Why reCAPTCHA is Mandatory:

  • Spam Protection: Prevents automated spam submissions on our contact forms and test registration
  • Bot Attack Defense: Protects against malicious bot attacks that could compromise our services
  • Data Integrity: Ensures the authenticity of user interactions and test submissions
  • Service Availability: Maintains website performance and availability for all legitimate users

Google's Privacy Policies:

By using forms protected by reCAPTCHA on our website, you are also subject to Google's data processing practices:

Transparency Note: reCAPTCHA is activated automatically on forms that require protection (contact forms, test registration, payment forms). This security measure operates regardless of your cookie preferences to ensure the basic functionality and security of our website.

Managing Your Cookie Preferences

You have control over cookies through several methods:

  • Cookie Banner: Use our cookie consent banner to manage your preferences
  • Browser Settings: Configure your browser to block or delete cookies
  • Third-Party Opt-Outs: Visit third-party websites to manage their cookies directly

Note: Disabling certain cookies may affect the functionality of our website and your user experience.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information from our systems.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

How We Notify You

  • • Email notification for significant changes
  • • Website banner for policy updates
  • • Updated timestamp on this page

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please don't hesitate to contact us.

Response Time

Within 24-48 hours