Privacy Policy

• Account details: your full name, email address, country and a hashed password (or your Google sign-in identity).
• Your startup and readiness: startup name, sector and stage, your KIRA™ answers and scores, checklist and lesson progress.
• Things you write: messages, community posts, questions for office hours, Founder AI conversations, service request briefs and files or links you share with our team.
• Payments: which plan you have and payment status. Card and bank details are handled by Paystack and Stripe; we never see or store them.
• Technical data: sign-in sessions, device and browser details, and notification subscriptions you choose to turn on.
• Notes from our team: private notes our advisors keep about your work with us. You can ask to see them.

• To run your account and deliver Korixa (assessments, community, office hours, services): this is necessary to perform our contract with you.
• To take payments and keep records: contract and legal obligation.
• To keep Korixa safe (preventing abuse, moderating the community, audit logs of sensitive actions): our legitimate interests.
• To send notifications and emails you ask for, such as reminders and updates: your consent, which you can withdraw in settings.
• To power Founder AI and premium analysis using what you provide: contract, and your consent when you choose to use those features.

When you sign up we record that you accepted these documents, which version, and when. We do not sell your personal data and we do not run advertising trackers.

Only with providers who help us run Korixa, under contracts that require them to protect it:

• Supabase: database, sign-in and file storage. Our project is hosted in the European Union (Ireland).
• Vercel: hosting of the website and app.
• Paystack and Stripe: payment processing.
• Anthropic: processes the text you send to Founder AI to generate answers. It is not used by us to build public profiles of you.
• Resend (email) and push notification services: to deliver messages you opted into.

Our own team (advisors and administrators) can see your profile, startup, scores and requests so they can help you. Other founders see only what you post in community spaces and your name in messages. Korixa does not share your information with investors unless you ask us to make an introduction and agree to what is shared.

Some of these providers process data outside Nigeria, including in the United States and the European Union. We rely on contractual safeguards and the protections these providers offer for such transfers.

• Your account data: until you delete your account.
• Payments: Paystack and Stripe keep their own records for as long as the law requires them to. Our own record of your plan is deleted with your account.
• Security and audit logs: up to 24 months.
• Backups: removed on a rolling schedule after deletion.

You can, at any time:

• Access and download your data: use “Download my data” on your profile page.
• Correct your name and country on your profile page, or ask us to fix anything else.
• Delete your account and personal data: use “Delete my account” on your profile page.
• Withdraw consent for notifications in settings, or object to or restrict how we use your data by emailing us.
• Complain to the Nigeria Data Protection Commission, or to the regulator in your own country, if you think we have handled your data unlawfully. We would appreciate the chance to fix it first.

We use only what is needed to work: a sign-in session, your light or dark theme choice, and a note that you have seen our introduction. We also store some data on your device so the app works offline. We do not use advertising or cross-site tracking cookies.

Data is encrypted in transit. Access to data is limited by role and enforced in the database, our team's sensitive actions are logged, and we limit how often key actions can be repeated to prevent abuse. No system is perfectly secure; if a breach affecting you occurs we will tell you and the regulator as the law requires.

Korixa is for adults and is not directed at anyone under 18. If we change this policy in a way that matters, we will ask you to review and accept it again. Contact us at hello@korixa.com for anything in this policy.