Privacy Notice
Last updated: 17 October 2026
Who we are
Kora is provided by Micro Intelligence Consult ("we", "us"), a business registered in Ghana. We are the data controller for the personal data described in this notice: we decide why and how it is processed.
Data we collect and why
- Account data (name, email address, login credentials or Google sign-in details) — to create and secure your account. Legal basis: performance of our contract with you.
- Workspace content (tasks, saved documents, saved conversations) — to provide the service. Legal basis: contract.
- AI requests (your messages, attached document text and the current conversation) — sent to our AI provider to generate replies. Original uploaded files are not stored. Legal basis: contract.
- Usage data (daily message counts, plan and subscription status) — to apply plan limits and prevent abuse. Legal basis: contract and legitimate interests.
- Technical data (IP address, device and browser information, logs) — for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
- Support messages — to answer your questions. Legal basis: legitimate interests.
We do not sell your workspace content. Where advertising tracking is permitted, we share limited public-page visit information with Meta Platforms to measure Facebook and Instagram ads and support ad optimization. We do not share your messages, documents, email address or payment details through the pixel.
Who we share data with
- Service providers that host our app and database and process AI requests on our behalf, under confidentiality obligations.
- Paddle.com, our Merchant of Record, which handles the sale of subscriptions, payments, subscription management, tax compliance and invoicing. Paddle processes payment data under its own privacy policy.
- Professional advisers such as lawyers and accountants, where needed.
- Authorities where we are required to by law.
How long we keep data
Account and workspace data are kept while your account is active. You can delete saved tasks and documents at any time. When you ask us to close your account, we delete or anonymise your data within 30 days, except records we must keep by law (such as billing records). Daily usage counts are kept for up to 12 months. Logs are kept for up to 90 days.
Your rights
Under Ghana's Data Protection Act, 2012 (Act 843) and other applicable laws, you may request access to your data, ask us to correct or delete it, object to certain processing, and withdraw consent where we rely on it. You may also complain to the Data Protection Commission of Ghana. To make a request, contact us through Help & support.
Security
We use encryption in transit, access controls so only you can read your private workspace, and restricted administrative access. No system is perfectly secure, so please avoid uploading highly sensitive identity, banking or health information.
International transfers
Our service providers and Paddle may process data outside Ghana. We use providers that apply appropriate safeguards to protect it.
Cookies and local storage
Essential browser storage keeps you signed in and makes the app work. The Meta Pixel may also send public-page visits, IP address, browser and device information, and advertising cookie identifiers to Meta Platforms. It is disabled on private workspace screens, signed-in visits and URLs containing query parameters. No purchase or signup conversion reporting, advanced matching, or server-side advertising reporting is enabled.
Visitors in consent-required regions see an advertising choice before tracking starts. If we cannot determine your region, tracking remains off until you accept. Elsewhere, ordinary advertising tracking may operate without a banner, subject to your refusal and applicable browser privacy opt-outs. Reject advertising is as easy as Accept advertising.
Open Cookie settings in any page footer to withdraw or change your choice at any time. Opening settings does not change your existing choice. Withdrawal stops new advertising events, including in other open tabs; blocked visits are not replayed. Clearing browser storage removes your local preference record.
We keep a browser-local consent history containing a random visitor reference, each choice and timestamp, region, notice version and the text and choices shown. A later withdrawal preserves earlier acceptance evidence. Meta may process permitted visit information outside Ghana under its own privacy terms. You can also contact us through Help & support about your advertising choices.
Changes
We may update this notice and will change the date above when we do.