Privacy Policy

Draft – pending legal review. This page describes intended practice and is not legal advice.

What we collect

When you submit an enquiry form we collect exactly these details: your name, work email, and – where you provide them – your company, role, company size and message. We also record which enquiry type you selected and which page you submitted from, so we can answer in context. Nothing else is collected, and there is no hidden field.

Who receives it

Your enquiry is stored on our own server in the UK/EU, and read by the Koralis founders. It is also emailed to us through Resend, an email delivery provider, which sends it via Amazon SES. Those two are the only third parties that receive it. There is no CRM and no marketing platform.

Resend processes it in the EU (Ireland) under a data processing agreement. Resend is a US company, so while your enquiry is stored in the EU, its staff can access it in the course of providing the service. We would rather say that plainly than let “held in the UK/EU” imply something stronger.

The site also supports a webhook to a system we operate. It is switched off and has never received an enquiry. We name it so that switching it on is a change you can see here, rather than one you cannot.

Analytics

We do not currently use analytics of any kind. When we add it, it will be privacy-friendly and cookieless, and this page will say so before it starts. We do not build advertising profiles or sell data.

Lawful basis & retention

We rely on our legitimate interest in replying to an enquiry you chose to send us. The one exception is the update list: if you ask to join it, that is consent, and you can withdraw it at any time by replying to any message or writing to us.

We keep an enquiry for 24 months from our last exchange with you, then delete it. Two years because the conversations this site starts often take that long – an evaluation that stalls can restart much later, and we would rather still have the context than ask you to explain yourself twice. If an enquiry goes nowhere, the clock runs from the last thing either of us said.

On our own server that deletion is automatic. In our email, it is a review we carry out at least annually rather than something that happens on a particular day – we would rather describe that accurately than claim a precision we do not have. You can ask us to delete an enquiry sooner at any time, and we will.

Delivery failures are recorded in our server log, which is kept for 30 days.

Your rights

You can ask us to access, correct or delete your data, or to stop contacting you, at any time by emailing hello@koralis.ai.