1. Overview
Kora Says is committed to protecting your privacy. This policy describes what personal data we collect, how we use it, and your rights.
2. What We Collect
We collect the minimum data required to provide personalized insights:
- Slack user ID and workspace metadata
- Messages sent to Kora or slash commands
- Onboarding information submitted through Typeform
- Cycle-related data voluntarily shared by the user
3. How We Use Your Data
We use your information only to:
- Generate personalized wellbeing insights
- Respond to mentions, messages, and commands
- Improve the accuracy and helpfulness of the Service
4. Data Retention
Personal data is stored securely and deleted within 90 days of last interaction. Backups delete within 30 days. Users may request immediate deletion at any time.
5. Data Deletion Procedure
Users may email [email protected] to request deletion. After verifying identity, all data is removed within 7 days and backups within 30 days.
6. Data Storage
Data is encrypted in transit and at rest, hosted on DigitalOcean and MongoDB Atlas (North America). Access is restricted to authorized personnel following least-privilege principles.
7. Sub-Processors
Our current sub-processors are listed at /sub-processors.
8. Your Rights
- Request access to your data
- Request correction of your data
- Request deletion of your data
- Withdraw consent at any time
9. Contact
For privacy questions: [email protected]