CoraPilot · Privacy & Data

CoraPilot privacy & data

Read from CoraPilot's own page on 2026-11-09. 17 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

The page states nothing on this.

Data categories

category: identifying
Your name, email address, and a securely hashed password.
Read from CoraPilot's own page on 2026-11-09
category: financial
Your plan, subscription status and renewal dates.
Read from CoraPilot's own page on 2026-11-09
category: communication
Messages, contacts, group names and sender names that arrive while you're connected, so your AI can search and summarise them.
Read from CoraPilot's own page on 2026-11-09
category: behavioral
Records of key actions (sign-in, subscription changes, messages/changes made on your instruction) for security and support.
Read from CoraPilot's own page on 2026-11-09
category: device
Basic connection metadata and server logs.
Read from CoraPilot's own page on 2026-11-09

Purposes

purpose: Provide the connector
To provide the connector and let the AI you authorise read and act on the services you connect.
Read from CoraPilot's own page on 2026-11-09
purpose: Accounts and billing
To operate accounts, subscriptions, trials and billing.
Read from CoraPilot's own page on 2026-11-09
purpose: Security and support
To secure the service, prevent abuse, and provide support.
Read from CoraPilot's own page on 2026-11-09
purpose: Lifecycle emails
To send service and lifecycle emails (welcome, trial reminders, connection alerts).
Read from CoraPilot's own page on 2026-11-09

Retention

scope: WhatsApp data
Disconnecting WhatsApp deletes the stored WhatsApp messages for a clean slate.
Read from CoraPilot's own page on 2026-11-09
scope: Google refresh token
Disconnecting Google removes the stored Google refresh token.
Read from CoraPilot's own page on 2026-11-09
scope: Paused unsubscribed accountperiod: 14 days
A paused, unsubscribed account is deleted after 14 days (with reminders first).
Read from CoraPilot's own page on 2026-11-09

Residency

The page states nothing on this.

International transfers

The page states nothing on this.

Subprocessors

We share data only with providers that help us run the service, under contract: Stripe — payment processing. SMTP2GO — transactional email delivery. A WhatsApp gateway — to maintain your linked-device WhatsApp connection. Google — the Google Ads API, when you connect Google Ads. Cloud hosting — to run the service.
Read from CoraPilot's own page on 2026-11-09

Data processing agreement

Deletion

route: Account deletion in the portal or by emailing us
You can delete your account and data at any time, or email us to request deletion.
Read from CoraPilot's own page on 2026-11-09

Data subject rights

right: Access, correct, export or delete
you may have rights to access, correct, export or delete your personal data
Read from CoraPilot's own page on 2026-11-09
right: Object or restrict processing
and to object to or restrict certain processing
Read from CoraPilot's own page on 2026-11-09

Sale or sharing

stance: prohibited
We don't sell your personal data.
Read from CoraPilot's own page on 2026-11-09

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page