Corebee privacy & data

Corebee as Data Controller Corebee is the data controller for personal data collected through our website, marketing activities, and account management.

Account information: name, email address, company name, and password when you register

Payment information: processed securely through our payment provider (Polar/Stripe), or Shopify, if you subscribe through the Shopify App Store.

Communications: messages you send to us via email, chat, or other channels

Device data: browser type, operating system, device type, screen resolution, and language preferences

Usage data: pages visited, features used, session duration, click patterns, and referral sources

Network data: IP address (anonymized for EU/EEA visitors in analytics), approximate geographic location

We process this data for the purposes of managing our relationship with you, operating our business, and complying with legal obligations.

Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity

After an account ends, you have 30 days to export your Customer Data.

Payment records: 7 years (as required by tax law)

We have configured a data retention period of 14 months.

Retained 30 days.

The Corebee application runs on infrastructure physically located in Mumbai, India

Product analytics (PostHog): EU Cloud (Frankfurt, Germany).

Voice servers (Fly.io): United States (Ashburn, Virginia).

We have executed the Standard Contractual Clauses approved by the European Commission (Implementing Decision 2021/914) with our Indian and US sub-processors as the primary transfer mechanism for personal data leaving the EEA.

Where a US sub-processor (e.g. Sentry, Resend, OpenAI, Anthropic, Stripe, Google, Meta) is self-certified under the EU-US Data Privacy Framework

UK Addendum to the EU SCCs issued by the UK Information Commissioner (ICO)

our Data Processing Agreement

You can request deletion of your data at any time by contacting us.

Access your personal data (Article 15)

Delete your data ("right to be forgotten") (Article 17)

Data portability : receive your data in a structured, commonly used, machine-readable format (Article 20)

Object to processing of your data, including for direct marketing (Article 21)

Right to opt out: of the sale or sharing of personal information

We do not sell personal information.