Legal
Last updated: 19 June 2026
Kora ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, and what rights you have over it.
By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
Kora is an issue-tracking and ticket management SaaS platform operating under the brand Kora, accessible at usekora.app. For privacy-related enquiries, contact us at support@usekora.app.
Payment information (card number, billing address) is collected and stored exclusively by our payment processor Dodo Payments. We never store raw card details on our servers. We retain transaction records (plan, amount, date) for accounting and support purposes.
| Purpose | Legal Basis |
|---|---|
| Providing and operating the Service | Contract performance |
| Authenticating your account and maintaining security | Contract performance / Legitimate interest |
| Processing payments and managing subscriptions | Contract performance |
| Sending transactional emails (ticket updates, trial reminders, invoices) | Contract performance |
| Improving and debugging the Service | Legitimate interest |
| Responding to support requests and grievances | Contract performance / Legal obligation |
| Complying with applicable law | Legal obligation |
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
All primary data — including your account information, workspace content, and file uploads — is stored on Cloudflare's infrastructure located in Europe. We have chosen European data centres to align with strong data protection standards.
By using the Service, you consent to this transfer and storage of your data within European territory under Cloudflare's security controls.
We work with the following sub-processors who may access or process your data as part of delivering the Service:
| Provider | Purpose | Data location |
|---|---|---|
| Cloudflare | Infrastructure, storage, CDN, DDoS protection | Europe |
| Dodo Payments | Payment processing & subscription management | As per their policy |
| AI Provider (e.g. OpenAI / Anthropic) | AI Ticket Structuring & AI Analyst features | As per their policy |
| Email Service Provider | Transactional email delivery | As per their policy |
| Google Fonts | Font delivery (no personal data stored) | Global CDN |
Each sub-processor is bound by contractual obligations to protect your data and use it only for the specified purpose.
When you use AI-powered features (such as AI Ticket Structuring or the AI Analyst), the content of your tickets and queries may be sent to our AI provider for processing. We instruct our AI providers not to use this data for model training. We recommend not including highly sensitive personal information (e.g. passwords, financial details) in ticket descriptions.
Kora uses strictly necessary cookies (for session management and authentication) and functional cookies (for theme preferences and workspace context). We do not use advertising or tracking cookies. You can clear cookies through your browser settings; doing so will log you out of the Service.
We retain your data for as long as your account is active. After account deletion:
You have the following rights in relation to your personal data:
To exercise any of these rights, email us at support@usekora.app. We will respond within 48 hours on business days and fulfil your request within the applicable legal timeframe.
We implement industry-standard measures to protect your data, including:
No method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights, we will notify you and relevant authorities as required by law.
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe a minor has provided us with personal data, contact us immediately and we will delete it promptly.
In accordance with applicable law, if you have a grievance about the processing of your personal data, you may contact our Grievance Officer:
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and notify active users of material changes by email. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.
This Privacy Policy is governed by the laws of India. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the competent courts in India.
