Privacy Policy

1. Who we are

Korporate ("we", "us") provides a link-in-bio, shop, funnel, wallet, and AI marketing tool at korporatelinks.com. This policy explains what we collect, why, and how you control it.

2. Information we collect

• Account data: email, password hash (bcrypt), display name, username slug, avatar URL, bio, wallet address.
• Google sign-in: if you use "Continue with Google", we receive your email, name, and profile picture from Google via Emergent-managed OAuth.
• Content you create: bio links, products, leads, funnels, campaigns, AI conversations.
• Payment data: PayPal order/subscription IDs, transaction amounts. We never see or store your card number — PayPal handles that end-to-end.
• Analytics: click counts on your bio links (aggregated), lead form submissions, page views. Anonymised.
• 2FA data: your TOTP secret (encrypted at rest) and bcrypt hashes of recovery codes.
• Push tokens: web-push endpoint + p256dh/auth keys tied to your device, only if you grant notification permission.

3. How we use it

• Run the service — show your bio page, process payments, credit your wallet, deliver AI responses.
• Notify you — receipts, subscription renewals, referral commissions, lead captures (email + optional push).
• Secure your account — 2FA, password reset, login alerts, fraud prevention.
• Improve Korporate — usage analytics in aggregate, never sold to third parties.

4. Third parties we share with

• PayPal — payment processing (subscriptions, one-time orders, payouts).
• Anthropic (via Emergent) — powers the AI Copilot; prompts you send are processed by Claude to generate responses.
• Resend — sends transactional emails (verification, receipts, renewals).
• Emergent Auth — Google OAuth broker.

We do not sell your data. We do not run third-party ad trackers on your dashboard.

5. Your rights

• Access, edit or delete your data from Settings at any time.
• Export a copy — email us and we'll send a machine-readable dump within 30 days.
• Delete your account permanently — email us; all your data is wiped within 30 days (payment records retained where required by law).
• Withdraw notification consent from Settings → Push Notifications.

6. Data retention

We keep your data as long as your account is active. When you delete your account, we purge all personal data within 30 days. Anonymised aggregate analytics may be retained indefinitely.

7. Security

Passwords are hashed with bcrypt (cost 12). 2FA is available and enforced on wallet withdrawals. Transport is TLS 1.2+. TOTP secrets are stored server-side; recovery codes are stored only as bcrypt hashes.

8. Children

Korporate is not intended for anyone under 13. If we learn that a child has created an account, we'll delete it immediately.

9. Contact

Questions, corrections, deletion requests: support@korporatelinks.com

10. Changes

We'll update this page and, for material changes, notify you by email. Continued use after changes means you accept the updated policy.