1. Who we are
StationCortex is operated by Xenon Radio Ltd. For privacy questions, contact privacy@stationcortex.com.
Before launch: add the company's registered office, company number and, if applicable, ICO registration details here.
2. When we are controller and when we are processor
We act as controller
We generally act as controller for account registration, billing, service administration, fraud prevention, security, product analytics, support, legal compliance and communications about our relationship with you.
We act as processor
A radio station may use Cortex to store and work with its own customers, prospects, contacts, campaign history, communications and related information. Where we process that personal data only on the station's documented instructions, our Data Processing Terms apply.
3. Information we may collect
- Account information: name, email, login/account identifiers and station membership.
- Organisation information: station name, branding, website, contact details, products, pricing and commercial settings.
- Billing information: subscription, plan, invoices, credit purchases and payment status. Payment card details may be handled directly by our payment provider rather than stored by us.
- Usage and security information: logins, feature usage, audit logs, device/browser information, IP address, error and security logs.
- Support information: messages, support-session records and information you provide when asking for help.
- Customer-content information: information entered into Cortex by a station, which may include customers, prospects, contacts, notes, communications, contracts and campaigns.
- AI context and outputs: prompts, instructions, contextual information supplied to TEX and generated outputs where needed to provide and secure the feature.
4. Why we use personal information
Depending on the context, we may use personal information to:
- create and administer accounts and subscriptions;
- provide StationCortex and its requested functions;
- authenticate users and maintain platform security;
- process payments, credits, invoices and subscription changes;
- provide support and investigate faults, misuse or fraud;
- improve reliability, performance, usability and feature design;
- send essential service, legal and account communications;
- comply with law, enforce agreements and establish or defend legal claims.
Our lawful basis may include performance of a contract, compliance with a legal obligation and our legitimate interests in operating, securing, improving and protecting the Service. Where consent is legally required, we will ask for it separately.
5. TEX, AI and intelligent features
TEX can use information available within a station's Cortex workspace to provide contextual assistance such as drafting, summarising, research, recommendations and suggested actions.
We design these features to assist users rather than replace appropriate human judgement. If we introduce processing that constitutes solely automated decision-making with legal or similarly significant effects, we will assess and communicate the applicable safeguards and rights before using it.
7. International transfers
Some suppliers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism and supplementary protections where necessary.
8. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described in this notice, including account operation, legal, accounting, security and dispute-resolution needs.
Account and billing records may need to be retained after an account closes where law or legitimate business needs require it. Customer data processed on behalf of a station is handled on termination in accordance with the Data Processing Terms and any documented retention arrangements.
9. Security
We use technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure or loss. No online service can guarantee absolute security, so customers must also protect credentials, permissions and devices used to access Cortex.
10. Your data-protection rights
Depending on the circumstances and lawful basis, individuals may have rights to access, rectify, erase or restrict personal data, object to certain processing, receive portable data and complain about how information is used.
Where consent is the lawful basis, it may be withdrawn at any time without affecting processing already carried out lawfully.
If your request concerns information a radio station controls inside its Cortex account, we may direct you to that station or assist it as processor.
11. Marketing
We keep optional marketing separate from accepting our Terms. Where required, we obtain the appropriate consent or otherwise rely on a lawful basis before sending direct marketing. You can opt out of marketing communications using the unsubscribe method provided or by contacting us.
13. Changes to this notice
We may update this notice as StationCortex, our suppliers or legal requirements change. The latest version and effective date will be published on this page. We will provide additional notice where a material change warrants it.
14. Questions and complaints
Contact us first at privacy@stationcortex.comif you have a privacy question or concern.
You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how your personal information has been handled.
