Privacy policy clauses for Cohere
Cohere is an enterprise AI platform that generates text, creates embeddings, and classifies content using machine learning models. Websites integrate Cohere via API to automate content creation, semantic search, and data categorization without building custom models.
Free scan · No signup · Results in 60 seconds
What data Cohere collects
Your privacy policy must disclose each of the following data types when you use Cohere.
When does Cohere trigger privacy obligations?
Installation triggers immediate obligations
The moment you integrate Cohere's API into your product, user text inputs (queries, prompts, content to be classified or embedded) flow to Cohere's servers in Canada. This triggers three regulatory obligations simultaneously:
GDPR (if any users are EU residents): Cohere processes personal data on your behalf. GDPR Article 28 requires a Data Processing Agreement (DPA) before data transfer begins. Cohere's Canada location does not automatically guarantee adequacy; you must document the legal mechanism (Standard Contractual Clauses or equivalent) governing transatlantic/transpacific flows. This is not optional.
PIPEDA (if you or your users are in Canada):
