Privacy Notice
Last updated: September 18, 2026.
1. Who we are
Nekora is operated by Chukwuemeka Noble Odoh, who acts as the data controller for the personal data described in this notice. Contact: noblechukwuemeka41@gmail.com.
2. Data we collect and why
- Account data — name, email address, and login credentials, to create and secure your account (legal basis: contract performance). When you choose "Continue with Google", we receive your Google account name, email address, and profile picture from Google solely to create and sign you into your Nekora account; we never share this data with third parties or use it for advertising.
- Calendar and meeting data — events, attendees, meeting transcripts, recordings, and notes you create, to provide the service (legal basis: contract performance).
- Usage and device data — IP address, device and browser identifiers, and product usage/telemetry, for security, fraud prevention, and product improvement (legal basis: legitimate interests).
- Support messages — correspondence when you contact us (legal basis: legitimate interests).
Payment-related data (card details, billing address) is collected and processed directly by our Merchant of Record, Paddle, not by us.
3. Who we share data with
- Service providers / subprocessors — cloud hosting and database (Lovable Cloud / Supabase), AI transcription (AssemblyAI), AI language models, email delivery, and meeting infrastructure (Jitsi), each processing data only to provide the service.
- Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance, and invoicing.
- Professional advisers and authorities — where required by law.
4. International transfers
Some providers process data outside your country, including outside the UK/EEA. Where this happens we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.
5. Retention
We keep your data while your account is active and delete or anonymise it when it is no longer needed, unless a longer period is required by law. You can delete individual meetings and transcripts at any time.
6. Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, or port your data, to object to processing, and to withdraw consent. You may also complain to your local data protection authority. To exercise any right, email noblechukwuemeka41@gmail.com; we respond within one month.
7. Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level isolation of user data. Your API keys never leave our servers.
8. Cookies
We use essential cookies/storage to keep you signed in and remember preferences. You can clear them in your browser settings; essential cookies cannot be disabled without breaking sign-in.
9. Changes
We may update this notice; material changes will be posted on this page.
