Privacy Policy

Effective date: March 28, 2026

1. Introduction

Kor AI LLC ("Kor", "we", "us", or "our") is a Wyoming limited liability company that operates Kor (korhq.ai), an influencer marketing platform for marketing agencies. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

2. Data We Collect

We collect the following categories of information:

  • Account information — name, email address, and authentication details when you create an account. You may also sign up using Google OAuth ("Sign in with Google"), which provides your name and email address from your Google account.
  • Workspace data — creators, brands, deals, campaigns, tasks, and other records you create within your workspace.
  • Email data (with your authorization) — email messages and thread metadata accessed through your connected email account. See Section 3 for details.
  • Payment information — processed securely by Stripe. We do not store credit card numbers on our servers.
  • Usage data — pages visited, features used, and interactions with the platform, collected to improve the service.

3. How We Access and Use Email Data

Kor accesses your email account only with your explicit authorization. We support Google and Microsoft email providers, authenticated through OAuth or encrypted app-specific access depending on the provider and your configuration. Email access uses IMAP and SMTP protocols for the following purposes:

  • Sending outreach — sending outreach emails to creators on your behalf through your connected email account.
  • Reply detection — detecting creator replies in email threads, enabling automated sequence management and reply tracking.
  • Inbox scanning — scanning your inbox for existing creator and brand communications so you can import them into your workspace.
  • Account identification — displaying your connected email address in settings and associating the connection with your Kor account.

You can revoke email access at any time through your email provider's account settings or within the Kor settings page.

4. What Email Data We Store

When you connect your email account, the following data is stored in our database:

  • Email connection records — connection metadata, encrypted authentication info, and provider information for your connected email account.
  • Email message records — metadata and content from threads related to your creator and brand communications.
  • Thread summaries — AI-generated summaries of email threads including sentiment, deal stage signals, and key topics (see Section 5a).

This data is stored exclusively to power reply detection, sequence automation, and relationship context within your workspace. It is not used for any other purpose.

5. AI Processing

Kor uses AI (powered by Anthropic Claude) to provide intelligent features. The following data may be processed by our AI provider:

  • Email content — email threads are sent to Anthropic's API for thread summarization, contact classification, and relationship summary generation. This processing occurs only for emails you have explicitly imported or scanned into your workspace.
  • Creator profiles — public YouTube channel data may be processed by AI for creator profiling, content analysis, and sponsor detection.
  • Raya AI assistant — when you interact with Raya, your workspace data (creator profiles, brand information, deal details) is included as context to provide relevant responses.

Anthropic does not use data sent via their API for model training. See Anthropic's privacy policy for details.

5a. Cross-Workspace Intelligence

Kor maintains shared intelligence databases to improve creator and brand data quality across the platform:

  • Global creator profiles — public YouTube channel statistics, AI-generated content profiles, and audience demographics are stored in a shared layer. This data is derived from publicly available YouTube data and AI analysis, not from your private workspace data.
  • Global brand profiles — brand names, industries, and domain information detected across the platform are stored to improve brand recognition accuracy.

Your private workspace data (rates, notes, deal terms, email communications, payment preferences) is never shared across workspaces and remains exclusively accessible to your workspace members.

6. YouTube Data API

Kor uses the YouTube Data API v3 to enrich creator profiles with public channel statistics (subscriber count, view counts, video metadata). This data is accessed via API key — we do not use YouTube OAuth or store YouTube authorization info.

Data freshness: YouTube API data displayed in our application is refreshed on a rolling basis. Creator statistics are re-fetched from the YouTube API within 30 days to ensure data accuracy and compliance with the YouTube API Services Terms of Service.

Calculated metrics: Kor displays certain metrics that are independently calculated by our platform (such as engagement rate), which are clearly labeled and visually distinguished from data provided by the YouTube API.

Your use of Kor's YouTube-related features is subject to the Google Privacy Policy and the YouTube Terms of Service.

7. Google API Services — Limited Use Disclosure

Kor's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google API data for the purposes described in this policy.
  • We do not use Google API data to serve advertisements.
  • We do not sell Google API data to third parties.
  • We do not use Google API data for any purpose other than providing and improving the stated features of the Kor platform.
  • Human access to Google API data is limited to what is necessary for debugging, security, and legal compliance, and only by authorized personnel.

8. Data Retention

Email data (message records and thread summaries) is retained for as long as your account is active and your email connection is authorized. If you disconnect your email account or delete your Kor account, associated email data will be deleted within 30 days.

YouTube API data is refreshed within 30 days. If you delete a creator from your workspace, associated YouTube data is removed.

You may request deletion of your data at any time by contacting us at support@korhq.ai. We will process deletion requests within 30 days.

9. Cookies

Kor uses essential cookies to maintain your authentication session. We do not use third-party advertising or tracking cookies. We use Sentry for error monitoring, which may set cookies for session replay functionality in production.

10. Third-Party Services

We use the following third-party services:

  • Stripe — payment processing.
  • Neon — PostgreSQL database hosting.
  • Vercel — application hosting and deployment.
  • Google — YouTube Data API for creator profile enrichment; OAuth for Google email account authentication (when selected by user); Google OAuth for account signup ("Sign in with Google"), which uses a separate OAuth client from email connection. Subject to the Google Privacy Policy.
  • Microsoft — OAuth for Microsoft email account authentication (when selected by user).
  • Anthropic — AI-powered features including email thread summarization, contact classification, creator profiling, sponsor detection, and the Raya AI assistant. Email content and workspace data are sent to Anthropic's API for processing. Anthropic does not use API data for model training.
  • Resend — transactional email delivery (system notifications only, not outreach).
  • Sentry — error monitoring and performance tracking.

Each service processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

11. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted data at rest, AES-GCM encryption for sensitive stored values, and workspace-scoped data isolation to ensure your data is never accessible to other users.

12. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Revoke email access at any time.
  • Export your workspace data.

To exercise any of these rights, contact us at support@korhq.ai.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

Kor AI LLC
Email: support@korhq.ai