Cora

PRIVACY POLICY

Your Privacy Rights

Effective Date: Oct 17, 2025

This Privacy Policy describes the types of information gathered by Cora Software LLC (collectively, “Company”, “us” or “we”) in the process of providing https://cora.computer/ (collectively, the “Site”), our portfolio company websites (as described below), our Model(s), and the data, services, information, tools, functionality, updates and similar materials (collectively, the “Service”), how we use it, with whom the information may be shared, what choices are available to you regarding collection, use and distribution of information and our efforts to protect the information you provide to us through the Service.

By using the Service, you hereby consent to allow us to process information in accordance with this Privacy Policy. Please also refer to our Terms of Service, https://cora.computer/terms, which are incorporated as if fully recited herein. Terms defined in the Terms of Service that are not defined herein shall have the same definition as in the Terms of Service.

This policy is subject to change. If our information retention or usage practices change, we will let you know by posting the Privacy Policy changes on the Service and/or otherwise making you aware of the changes. Your continued use of the Service following our notice of changes to this Privacy Policy means you accept such changes. Please refer to the “Effective Date” above to see when this Policy was last updated.

Territoriality

Regardless of where our servers are located, your personal data may be processed by us in the United States, where data protection and privacy regulations may or may not be to the same level of protection as in other parts of the world. BY VISITING THE SITE AND USING THE SERVICE, YOU UNEQUIVOCALLY AND UNAMBIGUOUSLY CONSENT TO THE COLLECTION AND PROCESSING IN THE UNITED STATES OF ANY INFORMATION COLLECTED OR OBTAINED BY US THROUGH VOLUNTARY SUBMISSIONS, AND, TO THE EXTENT POSSIBLE, THAT U.S. LAW GOVERNS ANY SUCH COLLECTION AND PROCESSING.

This Privacy Policy may be subject to the provisions of the EU General Data Protection Regulation (“EU GDPR”), the UK General Data Protection Regulation (“UK-GDPR”, and together with the EU GDPR, the “GDPR”), and other applicable privacy laws. Under the GDPR, we are a data “Controller”. If you are an individual who resides in the United Kingdom, the European Economic Area, or Switzerland (collectively, and for the purposes of this Privacy Policy, the “EEA”), you are a “Data Subject” with certain protected privacy rights concerning your “Personal Data.” We will take commercially reasonable steps to maintain compliance with GDPR. Your Personal Data, combined with any other information that may identify you as a person, may be referred to in this Privacy Policy as Personally Identifiable Information (collectively, “PII”)

Who Collects Your Information On Our Service?

We do. Under the GDPR, we are what is known as a “Controller” of the Personal Data that you provide us with. We collect information from you on the Service, and we are responsible for protection of your information.

You may provide us with information when you interact with us through email, read an email from us, online chat, messaging functions within the Service, or otherwise. We may retain such information in order to provide you with services, and you agree that we may share this information as needed with other users in order to resolve any issues that may arise between you and another user of the Service.

The Service may be integrated with third party social media platforms, such as Facebook and Instagram (“Platforms”). If you choose to interact with the Platforms through the Service, the Platforms may make additional PII about you available to us. The Service may use your mobile data plan in order to use certain features of the Service, such as communication with other users through the Service.

Automatically tracking Internet Protocol (IP) addresses is one method of automatically collecting information about your activities online and information volunteered by you. An IP address is a number that is automatically assigned to your device whenever you surf the internet. Further, the Service may utilize web beacons, pixel tags, cookies, embedded links, and other commonly used information-gathering tools. Through collecting your IP address, we may be able to approximate your geographic location, however, unless and until this is information is paired with your PII, it cannot be used to identify you. If Non-Personal Information is paired to any of your PII, we will treat the Non-Personal Information as if it was PII too.

Why Is My Information Being Collected?

We accept and gather information, including your Google Data, in an effort to provide the Service to you. We need to collect your PII so that we can respond to your requests for information or to be added to our email lists, to integrate with the Platforms, to process your payment for the Service and, to train, develop, and improve the artificial intelligence and/or machine learning models and algorithms that we develop and train (“Models”), if applicable. We may also collect aggregate information, to help us better design the Service, and log information, for monitoring purposes to help us to diagnose problems with our servers, administer the Service, calculate usage levels, and otherwise provide services to you.

How Do We Use the Information We Collect?

We use the PII you provide for the purposes for which you have submitted it including

We will not share your PII except: (a) for the purposes for which you provided it; (b) with your consent, such as other users of the Service; (c) as may be required by law or as we think necessary to protect our organization or others from injury (e.g., in response to a court order or subpoena, in response to a law enforcement agency request, or when we believe that someone is causing, or is about to cause, injury to or interference with the rights or property of another); or (d) with persons or organizations with whom we contract to carry out internal operations or business activities, including but not limited to our co-branded partner(s), as described in Section 11 below. We will also share your Google Data with the Third-Party AI Providers (defined below) for purposes of providing you with our Service, and to Google, because this is a requirement of Google in order for our software to interact with Google’s systems.

To the extent necessary to provide the Services that you request, we may have to share your Content and/or PII with one or more companies that provide certain technology tools and services (“Third-Party AI Providers”). Our current Third-Party AI Providers are as follows: OpenAI (https://openai.com/policies/business-terms/ - https://openai.com/policies/privacy-policy/); Anthropic (https://www.anthropic.com/legal/commercial-terms - https://www.anthropic.com/legal/privacy); Gemini (https://ai.google.dev/gemini-api/terms - https://policies.google.com/privacy). Neither our Privacy Policy, nor our Terms of Service, apply to the services that our Third-Party AI Providers provide in relation to you. You agree and acknowledge that the actions taken by such Third-Party Providers will be subject to, and governed by, their own terms and policies, including, but not limited to their privacy policy. Please review the terms of the Third-Party AI Providers before using our Service. You hereby consent to our sharing your Content and/or PII with the Third-Party AI Providers as necessary to provide the parts of our Service that you request.

We may also share aggregate information with others, including affiliated and non-affiliated organizations.

Finally, we may transfer your PII to a third party, or an actual or potential successor-in-interest, in relation to, or in the event of, an actual or potential merger, acquisition, sale of all or substantially all of our assets, reorganization, bankruptcy, or other change of control. After such disclosure or transfer, the third party or successor in interest may use the information in accordance with applicable law.

You may elect to share certain personal information with individuals or with the public via your use of the Service. In this case, you will control such sharing via settings that we provide. For example, the Service may make it possible for you to publicly share information via Platforms such as Facebook, or Instagram. Be aware that when you choose to share information with friends, or with the public at large, you may be disclosing sensitive information, or information from which sensitive information can be inferred. Always use caution when sharing information through the Service. You understand and agree that we are not responsible for any consequences of your sharing of information through and beyond the Service.

After becoming a user of the Service, you may revise or edit your information by sending an email to privacy@cora.computer. For instructions on how you can further access your PII that we have collected, or how to correct errors in such information, please send an e-mail to privacy@cora.computer. We will also promptly stop using your information and remove it from our servers and database at any time upon your e-mail request. Furthermore, you may opt out of the use of information by the Service to send you promotional emails by sending an email to privacy@cora.computer with “Opt-Out” in the subject line. To protect your privacy and security, we will take reasonable steps to help verify your identity before granting access, making corrections or removing your information.

Our Terms of Service document may identify certain third-party websites to which we may provide links, and that you may click on our Site or in our Service. Please check the privacy policies of these other websites to learn how they collect, use, store and share information that you may submit to them or that they collect.

We may partner with Every Studio, LLC to provide you with content or Services on a joint or “co-branded” basis. At a co-branded site, you will see both our logo and the logo of Every Studio displayed on your screen. In the instance of a co-branded site, we will still be the entity collecting your information, and our Privacy Policy will apply to that information as well. You should read the individual privacy policies of our co-branding partner, available here, https://every.to/legal,as they may differ in some respects from ours. Reading these policies will help you to make an informed decision about whether to provide your information to a given site.

If you currently reside in the EEA, the GDPR applies to your PII and you are a Data Subject. The GDPR requires that we, in our capacity as a Controller, have a legal basis to process your PII.

You can find instructions for enforcing some of these rights elsewhere in this Privacy Policy. Otherwise, if you wish to find out more about these rights, please contact us at privacy@cora.computer.

To contact our privacy team, please email us at privacy@cora.computer.

We do not knowingly collect any information from any minors, and we comply with all applicable privacy laws including the GDPR, the Children’s Online Privacy Protection Act (“COPPA”), and associated Federal Trade Commission (“FTC”) rules for collecting personal information from minors. Please see the FTC’s website (www.ftc.gov) for more information. If you have concerns about this Site, wish to find out if your child has accessed our Services, or wish to remove your child’s PII from our servers, please contact us at privacy@cora.computer. Our Site will not knowingly accept PII from anyone under 13 years old in violation of applicable laws, without consent of a parent or guardian. In the event that we discover that a child under the age of 13 has provided PII to us, we will make efforts to delete the child’s information in accordance with the COPPA. If you believe that your child under 13 has gained access to our Site without your permission, please contact us at privacy@cora.computer.

California law allows California residents to request information regarding our disclosures in the prior calendar year, if any, of their personally identifiable information to third parties. To make such a request, please contact us at privacy@cora.computer with “Request for Privacy Information” in the subject line. Please include enough detail for us to locate your file; at a minimum, your name, email, and username, if any. We will attempt to provide you with the requested information within thirty (30) days of receipt. We reserve our right not to respond to requests sent more than once in a calendar year, or requests submitted to an address other than the one posted in this notice. Please note that this law does not cover all information sharing. Our disclosure only includes information covered by the law.

If you are a Nevada resident, we do not “sell” your “covered information” as such terms are defined in the Nevada Privacy of Information Collected on the Internet from Consumers Act as amended by Nevada Revised Statutes Chapter 603A (“Nevada Privacy Law” or “NPL”). Though we do not sell your covered information, as someone that is subject to the NPL, you have a right of access in relation to the covered information of yours that we have or process, including why we process it, and other parties with whom we may share such information. If you would like to tell us not to sell your information in the future, please email us at privacy@cora.computer with your name, postal address, telephone number, and email address with “Nevada Do Not sell” in the subject line.

If you have any questions or suggestions regarding our Privacy Policy, please contact us at:

Cora Software LLC

920 Broadway, Floor 15

New York, NY 10010

ATT: Privacy Officer

privacy@cora.computer

Copyright © Cora Software LLC. All rights reserved. The Service is our property, and is protected by United States and international copyright, trademark, and other applicable laws. This includes the content, appearance, and design of the Service, as well as the trademarks, product names, graphics, logos, service names, slogans, colors, and designs.