Privacy policy

This policy explains how data is processed on the website and in the Kory AI-ization Diagnostic, in accordance with Brazil’s General Data Protection Law (LGPD, Law 13,709/2018).

1. Who the controller is

Legal business name: 47.378.637 ALLISSON FERNANDO GONCALVES. CNPJ (Brazilian company registration number): 47.378.637/0001-80. Address: Curitiba, PR, Brazil. Privacy contact: ola.korailabs@gmail.com.

2. Diagnostic data

To run the diagnostic, we use your business description, answers to the 10 questions and record of agreement to the conditions of use. The free preview does not require contact details. To unlock the full report and PDF, we request a valid name, email and phone number, together with authorization to contact you about the diagnostic. We also record use of features such as report generation, unlocking, copying and downloading.

We use browser identifiers, connection information such as IP addresses and operational records to keep the service available and prevent abuse. Describe processes without including personal data about clients, patients or your team. Do not submit health information, identity documents, passwords or other confidential information.

3. Purposes and legal bases

• Providing the diagnostic and report you request: performance of a contract and preliminary steps at your request (LGPD, art. 7, V).
• Contacting you about the diagnostic: specific consent, which you may withdraw (art. 7, I).
• Protecting the service, applying usage limits and preventing abuse: legitimate interest, with respect for your rights and expectations (art. 7, IX).
• Evaluating use of diagnostic features to improve the service: legitimate interest, subject to the necessity of the data used (art. 7, IX).
• Using optional analytics and advertising cookies and tools: consent, as described in section 8 (art. 7, I).
• Handling support and data rights requests: compliance with legal obligations and handling your request, as applicable (art. 7, II and V).

4. Use of artificial intelligence

Kory uses your business description and answers to prepare an advisory analysis with artificial intelligence and criteria defined by Korai Labs. The name, email and phone number from the contact form are not sent to the model to write the diagnostic. The content may contain inaccuracies and does not replace professional evaluation. You can request clarification or human review at ola.korailabs@gmail.com.

5. Processors and optional channels

• Google Firebase and Google Cloud: service hosting, processing and storage.
• Google Gemini: generating diagnostic text with artificial intelligence.
• Web3Forms: forwarding contact form messages to our team.
• hCaptcha: security checks against automated contact form submissions.
• Cloudflare Turnstile, when enabled: protection against automated access and abuse.

These providers may process data outside Brazil, subject to the LGPD rules on international transfers. We do not sell personal data. WhatsApp and scheduling are optional channels; information you submit there is also subject to the respective services’ policies. You can request information about data sharing at ola.korailabs@gmail.com.

6. Retention

Sessions that remain at the business description or answers stage are covered by the automatic deletion routine after 30 days. This period does not apply to generated reports or the contact details provided to unlock them, which remain stored. You can request deletion at ola.korailabs@gmail.com; requests are assessed under the LGPD, including legal grounds for retention. Support and data rights records are retained according to the needs of the request and applicable obligations.

7. Browser storage

Your browser stores information needed to maintain the session, recover your progress when the page reloads and apply usage limits. The description, answers and report are kept in tab storage; closing the tab or clearing browser data may end session access. The diagnostic does not save contact details in that storage. To keep your report, copy it or download the PDF after unlocking it. Storage needed for the service to work is separate from the optional cookies described below.

8. Cookies and measurement

Optional analytics and advertising tools are only activated after you accept the cookie notice. Declining does not prevent you from using the diagnostic. When configured, these tools have the following purposes:

• Google Analytics 4: analyzing visits, pages viewed, traffic sources and site interactions.
• Meta Pixel: measuring visits and actions related to Facebook and Instagram campaigns.
• Google Ads: measuring actions such as report unlocks and WhatsApp clicks, and supporting ads shown to site visitors.

These tools may use cookies and identifiers and process information such as IP address, device and pages viewed, under Google’s and Meta’s policies. Their use depends on your consent (LGPD, art. 7, I).

Your choice is saved in your browser. You can change it through Cookie preferences in the footer. If you decline after accepting, the site communicates the new choice to the tools and triggers removal of known cookies it can access. Reload the page to also prevent these tools from loading. Withdrawal does not reverse processing already carried out; cookies on other domains may need to be managed through your browser or the provider’s settings.

Storage needed for the diagnostic session and security does not depend on optional cookie consent. Its purpose is explained in section 7.

9. Security

We adopt technical and administrative measures to protect data, including encrypted connections and restricted access. Keep your report safe, especially on shared devices. No service can guarantee the complete absence of risk. Incidents requiring notification will be handled under applicable law.

10. Your rights

You can request confirmation of processing, access and correction; anonymization, blocking or deletion of unnecessary or unlawfully processed data; portability in accordance with regulation; and information about sharing. You can also request deletion of data processed with consent, subject to legal retention grounds, withdraw consent and obtain information about the option not to consent and its consequences. You may object where the law allows and request review of automated decisions that affect your interests.

Send your request to ola.korailabs@gmail.com. Exercising these rights is free of charge and may require proportionate identity verification to protect your data. You may also submit a petition to Brazil’s National Data Protection Agency (ANPD), subject to its available channels and requirements.