Kora ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully.
We use the information we collect to:
Kora offers optional integrations with Google. If you choose to connect your Google account, Kora requests only the specific permissions (scopes) needed to perform the actions you ask for. You are never required to connect Google to use Kora, and you can disconnect at any time from your account settings or at myaccount.google.com/permissions.
userinfo.email): to identify your account and sign you in.gmail.send): to send emails from your Gmail account to your clients on your behalf — such as deal updates, document requests, and booking confirmations. Kora uses this scope only to send messages you initiate; it does not read, delete, or otherwise access your existing emails or mailbox.calendar.events): to read your existing events and to create, update, and delete events on your primary Google Calendar, so that client appointments and reminders you set in Kora stay in sync with your Google Calendar. To power scheduling features, event details you ask Kora to act on (such as title, description, time, location, and attendees) may be processed by our AI service providers as described under "AI processing of Google user data" below. This data is used only to deliver the feature you requested and is never used to train or improve any AI/ML models.Kora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
Kora does not use Google Workspace API data — including any Gmail or Google Calendar data — to develop, improve, or train generalized or foundational artificial intelligence (AI) and/or machine learning (ML) models. Google user data is used solely to provide and improve the specific user-facing features you request.
Certain Kora features are powered by third-party AI providers. When you ask Kora to act on your Google Calendar, the relevant event details may be sent to OpenAI (model gpt-4o-mini) and Google (model gemini-2.5-flash) solely to interpret your request and complete that action. Your Gmail is used only to send messages you initiate and is never transmitted to any AI provider.
We send Google user data to these AI providers only through their enterprise/API offerings, under terms that prohibit the provider from using the data to train or improve their models and that do not retain the data for any secondary purpose. We do not transfer Google user data to any AI/ML service that would use it to train or improve generalized AI/ML models.
We do not sell your personal information. We may share data with:
Your customer data (the leads and contacts you manage in Kora) is yours. We do not access, use, or share it except to provide the service you requested.
We implement industry-standard security measures to protect your information, including:
No system is completely secure. If you suspect unauthorized access to your account, contact us immediately at privacy@tellkora.com.
We retain your personal information for as long as your account is active or as needed to provide services. When you close your account:
You may request early deletion of your data by contacting privacy@tellkora.com.
Depending on your location, you may have the right to:
To exercise any of these rights, email privacy@tellkora.com. We will respond within 30 days.
We use the following types of cookies:
You can control cookies through your browser settings. Disabling essential cookies may prevent certain features from working.
Kora is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Kora is based in the United States. If you access our service from outside the U.S., your information may be transferred to and processed in the U.S. or other countries. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for international transfers where required.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on our website at least 30 days before the change takes effect. Continued use of Kora after the effective date constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or your personal data, contact us:
© 2026 Kora. All rights reserved.