Privacy Policy

1. Introduction

Kora Inc. (“we”, “us”, or “our”) operates the Kora platform. This Privacy Policy explains how we collect, use, store, and share your information when you use our Service.

2. Information We Collect

We collect the following types of information:

• Account information: Name, email address, and password when you create an account
• Uploaded content: Documents, files, and data you upload to build your knowledge base
• Usage data: Queries, interactions, and how you use the Service
• Integration data: Data from connected third-party services (Google Drive, Notion, Slack, etc.)
• Device information: Browser type, IP address, and device identifiers

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your documents and generate AI-powered answers with citations
• Build and maintain your knowledge base and memory
• Send transactional emails (account confirmations, password resets, billing)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Data Storage and Security

Your data is stored on secure cloud infrastructure (AWS). We use encryption in transit (TLS) and at rest. Access to production systems is restricted to authorized personnel. We conduct regular security reviews and follow industry best practices for data protection. Your data is never used to train our AI models.

5. Data Sharing

We do not sell your data. We may share information with:

• Service providers: Cloud hosting, email delivery, and payment processing partners who process data on our behalf
• AI providers: We send data to AI model providers to generate responses. This data is processed under strict data processing agreements and is not used to train their models
• Legal requirements: When required by law, subpoena, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies for advertising purposes. Analytics cookies may be used to understand Service usage and improve performance.

7. Data Retention

We retain your data for as long as your account is active. After account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict processing of your data
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@kora.chat.

9. Children’s Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The “Last updated” date at the top indicates the most recent revision.

11. Contact

For privacy-related questions, contact us at privacy@kora.chat.