Privacy Policy

Corta ("Corta," "we," "us," or "our") operates the website and application at trycorta.com(the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

By using Corta, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information we collect

We collect information in the following categories:

• Account information. When you create an account, we collect your email address and authentication identifiers (for example, when you sign in with Google or email and password). Authentication is handled through Supabase Auth.
• Product inputs. We collect the information you provide while using Corta, including conversation messages, business descriptions, ideal customer profile (ICP) content, monitoring preferences, tone settings, and outreach drafts you create or edit.
• Public platform content. Corta analyzes publicly available content from third-party platforms (such as Reddit and X/Twitter) to surface relevant conversations and generate insights. We store excerpts, metadata, and derived analysis tied to your workspace. We do not access private messages on those platforms through your personal accounts unless you explicitly authorize a separate integration in the future.
• Payment information. If you subscribe to Corta Pro, payments are processed by Stripe. We receive subscription status, billing identifiers, and related metadata from Stripe. We do not store full payment card numbers on our servers.
• Usage and diagnostics. We collect technical and usage data such as pages viewed, feature interactions, device/browser type, IP address, and error reports. We use PostHog for product analytics and Sentry for error monitoring.

2. How we use information

We use collected information to:

• Provide, operate, and improve the Service
• Run AI-assisted workflows (for example, ICP synthesis, reply drafts, and outreach messages) using third-party model providers
• Process subscriptions and manage your account
• Monitor performance, debug issues, and prevent abuse
• Communicate with you about the Service, including support
• Comply with legal obligations

3. AI processing

Corta sends relevant portions of your inputs and retrieved public content to AI providers (such as Anthropic, OpenAI, and Google) to generate outputs. Those providers process data according to their own terms and policies. AI-generated content may be inaccurate or incomplete. You are responsible for reviewing outputs before using them, including before posting replies or messages on third-party platforms.

4. How we share information

We may share information with:

• Service providers that help us run Corta, including hosting (Supabase), background jobs (Trigger.dev), payments (Stripe), analytics (PostHog), error tracking (Sentry), and AI model providers
• Legal and safety recipients when required by law, regulation, legal process, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections

We do not sell your personal information.

5. Data retention

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may delete your account from Settings; when you do, we delete or de-identify associated workspace data subject to reasonable backup and legal retention requirements.

6. Security

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and row-level security on database tables. No method of transmission or storage is completely secure.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To make a request, contact us at support@trycorta.com. We may need to verify your identity before responding.

You can stop receiving non-essential product emails by using unsubscribe links where provided or by contacting support.

8. International users

Corta is operated from the United States. If you access the Service from outside the United States, your information may be processed in the United States and other countries where our service providers operate.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may also be communicated by email or in-product notice where appropriate.

11. Contact

Questions about this Privacy Policy: support@trycorta.com