Privacy Policy

Koraku is a hosted software service. You sign in with your account, connect third-party apps through OAuth where available, and use agents, workspace files, memory, and automations in the cloud.

This policy describes what we collect, why we use it, and the choices you have. It applies to the Koraku website, web application, and related services operated by Koraku.

• Account information from your sign-in provider (such as name, email, and profile identifier) when you authenticate with Google or GitHub.
• Product data you create in Koraku: chat messages, agent instructions, personalization, learned memory, automation definitions, automation run history, and files in your cloud workspace.
• Connected app data that you authorize through OAuth or similar flows — for example email metadata, documents, tasks, or calendar events needed to fulfill your instructions.
• Device and usage information such as browser type, approximate region, and interaction logs used to operate, secure, and improve the service.
• Messaging identifiers if you link iMessage or SMS, including verified phone numbers and message content needed to run conversations.

Prompts, messages, and tool context are processed by Koraku’s language models. Connected app actions and cloud workspace files use Koraku’s secure execution environment when enabled.

Koraku stores chat history, personalization, automation definitions, and automation run history in your account. Active chat sessions and in-progress runs may also be held temporarily on Koraku servers.

• Provide chat, workspace, memory, automations, and connected-app actions you request.
• Authenticate you, prevent abuse, and maintain the security of the service.
• Improve reliability, debug issues, and develop new product features.
• Communicate with you about service changes, security notices, or support requests.

We do not sell your personal information. We share data only as needed to run the service, including with infrastructure and integration providers that process data on our behalf under contractual obligations. Connected apps receive only the actions you approve or that your instructions require.

• Service providers that host databases, authentication, model inference, messaging, or integration tooling.
• Third-party applications you connect, when you direct Koraku to read or update data in those apps.
• Authorities when required by law or to protect rights, safety, and security.

We retain account and product data while your account is active and as needed to provide the service. You can export or delete Koraku-owned app data from Settings. Some long-term learned memory may be retained separately and is not cleared by a standard data deletion request, as described in product settings.

After deletion, we may retain limited backups or logs for a short period for security, fraud prevention, and legal compliance before they are purged.

• Review and update personalization and memory in the app.
• Disconnect third-party apps from Settings at any time.
• Export or delete Koraku app data from Settings.
• Sign out and revoke sessions through your account provider where applicable.
• Contact us for privacy questions or requests at the address on our Contact page.

Do not store passwords, payment card numbers, or other secrets in chat or memory. Koraku is designed to ask for confirmation before high-impact external actions such as sending messages, changing calendars, sharing files, or modifying records in connected apps.

Koraku is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. Contact us if you believe a child has provided data through the service.

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated through the app or by email where appropriate.

Privacy questions and requests: privacy@koraku.app. General support: support@koraku.app. See also our Contact page.