On this page
Have a question?
Ask us anything about privacy or your data, and our team will get back to you by email.
Privacy Policy
Your privacy matters to us. This Privacy Policy explains what personal information Koronik.AI collects, how we use and protect it, and the choices and rights you have.
Effective Date: November 2, 2026
Last Updated: November 2, 2026
Introduction
This Privacy Policy explains how Graaho Technologies LLC, operating as Koronik.AI (“Koronik,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you visit koronik.ai, use the Koronik.AI platform at app.koronik.ai, or otherwise interact with our products and services (together, the “Services”).
Our Role
For information about our website visitors, prospects, and account holders, Koronik acts as a data controller: we decide why and how that information is processed.
When our Clients use the Services to deploy AI agents, the content and end-user data they process through those agents (“Client Data”) is handled on the Client’s behalf. In that case the Client is the controller and Koronik acts as a data processor (or service provider), following the Client’s instructions as set out in our Terms of Use and Data Processing Addendum (“DPA”). If you are an end user of a business that uses Koronik.AI, please contact that business about its privacy practices.
How This Policy Fits With Other Terms
This Policy should be read together with our Terms of Use and, where applicable, the DPA and any Order Form. If there is a conflict about the processing of Client Data, the DPA takes precedence.
In Plain Language
This policy explains what personal information Koronik.AI collects and what we do with it. For your own account and website visits, we’re responsible for your data; for data your agents handle for your customers, you’re in control and we follow your instructions.
01. Information We Collect
1.1. Information You Provide to Us
Depending on how you interact with us, we may collect:
- Account and contact details, such as your name, business email address, phone number, company name, job title, and login credentials.
- Billing information, such as billing contact and address, plan, and transaction history. Card details are handled by our payment processors and are not stored on our servers.
- Communications, such as messages you send through our website forms, demo requests, support tickets, emails, and survey or feedback responses.
- Configuration content, such as agent instructions, knowledge-base documents, FAQs, and policies you upload to set up your agents.
1.2. Information Collected Automatically
When you use the website or platform, we automatically collect certain technical information, including IP address, browser and device type, operating system, referring pages, pages viewed, approximate location derived from IP address, and dates and times of access, as well as platform usage events such as features used, sessions, and error logs.
1.3. Information Processed on Behalf of Clients
When a Client connects Koronik.AI agents to its website, messaging apps, social channels, or business systems, we process Client Data on that Client’s behalf. This may include end-user names, contact details, conversation messages, uploaded documents, and other content the Client chooses to send through the Services.
1.4. Information From Third Parties
We may receive information from third-party sign-in providers, integrations you authorize (for example Facebook, WhatsApp, Instagram, Gmail, or Outlook), AWS Marketplace when you subscribe through it, payment processors, and publicly available business sources used for sales and marketing.
1.5. Sensitive Information
The Services are not designed to process special categories of personal data (for example health, biometric, or financial-account information) unless expressly agreed in writing. Clients should not submit such data through the Services without a suitable agreement in place.
In Plain Language
We collect what you give us (such as your name, email, and agent setup), basic technical data when you use our site, and the data your agents process for you. Card details are handled by our payment processors rather than stored by us, and we ask that you don’t send highly sensitive data through your agents unless we’ve agreed on it.
02. How We Use Information
2.1. Purposes of Processing
We use personal information to:
- Provide, operate, and maintain the Services, including creating accounts and delivering agent functionality;
- Process subscriptions, payments, and AWS Marketplace transactions;
- Respond to enquiries, demo requests, and support requests;
- Secure the Services, prevent fraud and abuse, and troubleshoot issues;
- Analyse usage to understand how the Services are used and to improve features and performance;
- Send service announcements, administrative messages, and, where permitted, marketing communications;
- Comply with legal obligations and enforce our agreements.
2.2. Marketing Choices
You can opt out of marketing emails at any time by using the unsubscribe link in the email or contacting us at ai@graaho.com. We will still send essential service and account messages.
2.3. Client Names and Logos
With the Client’s permission, we may display a Client’s name and logo as a customer reference. Clients may withdraw permission at any time by contacting us.
In Plain Language
We use your information to run the platform, support you, keep things secure, and make the product better. We only send marketing where it’s allowed, and you can unsubscribe at any time.
03. Legal Bases for Processing
3.1. Why We Are Allowed to Process Your Data
Where laws such as the EU or UK General Data Protection Regulation (GDPR) apply, we rely on the following legal bases:
- Contract: to provide the Services you or your organization signed up for;
- Legitimate interests: to secure, support, improve, and promote the Services, where those interests are not overridden by your rights;
- Consent: for non-essential cookies and certain marketing communications, which you may withdraw at any time;
- Legal obligation: to meet tax, accounting, and other legal requirements.
In Plain Language
We process data because we need it to provide the service, because we have a fair business reason, because the law requires it, or because you’ve said yes.
04. AI Agents and Client Data
4.1. Processing on the Client’s Instructions
We process Client Data only to provide the Services, as instructed by the Client, and as described in the DPA. The Client is responsible for having a lawful basis to collect end-user data and for providing any required notices to its end users.
4.2. AI Model Providers
To generate responses, agents may send Client Data to large language model and AI infrastructure providers engaged as our subprocessors. These providers process the data only to deliver the requested output and are bound by contractual confidentiality and data protection obligations.
4.3. Model Training
We do not use Client Data to train general-purpose AI models. Clients’ knowledge-base content is used to ground their own agents’ responses (for example through retrieval-augmented generation) and is not shared with other Clients.
4.4. Human Oversight
AI-generated responses can be inaccurate. Clients control their agents’ instructions, escalation rules, and human hand-off settings, and are responsible for reviewing outputs where accuracy matters.
In Plain Language
Your agents’ data is used to serve you, not to train general AI models. AI model providers process only what’s needed to generate answers, under strict contracts. Because AI can make mistakes, we recommend keeping a human in the loop for important decisions.
05. Cookies and Tracking Technologies
5.1. What We Use
We use cookies and similar technologies to keep you signed in, remember preferences, secure the Services, and understand how our website is used. Some cookies are set by analytics and advertising partners.
5.2. Your Choices
You can control cookies through your browser settings and, where available, our cookie banner. Blocking essential cookies may affect how the Services work. Where required by law, we ask for your consent before setting non-essential cookies.
In Plain Language
Cookies keep you signed in and help us understand how the site is used. You can manage them in your browser settings or through our cookie banner.
06. How We Share Information
6.1. We Do Not Sell Personal Information
We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under California law.
6.2. When We Share
We share personal information only as needed with:
- Service providers and subprocessors that help us host, operate, secure, and support the Services, such as cloud hosting (including Amazon Web Services), AI model providers, payment processors, email delivery, and analytics providers;
- Integrations you enable, such as messaging and social platforms that your agents connect to, which receive data according to your configuration and their own terms;
- Our affiliates, for the purposes described in this Policy;
- Successors in a merger, acquisition, financing, or sale of assets, subject to this Policy’s protections;
- Authorities and others where required by law or to protect the rights, property, or safety of Koronik, our Clients, or others;
- Anyone else with your consent or at your direction.
6.3. Links to Other Sites
Our website may link to third-party sites, including AWS Marketplace. Their privacy practices are governed by their own policies.
In Plain Language
We don’t sell your personal information. We share it only with trusted providers that help us run Koronik.AI, with the integrations you turn on, or when the law requires it.
07. Data Retention and Security
7.1. How Long We Keep Information
We keep personal information only for as long as needed for the purposes described in this Policy, including to provide the Services, meet legal, tax, and accounting requirements, resolve disputes, and enforce our agreements. Client Data is retained according to the Client’s settings and agreement, and is deleted or returned at the end of the subscription as described in the DPA. When information is no longer needed, we delete or anonymize it.
7.2. How We Protect Information
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls based on least privilege, logging and monitoring, and isolated storage for Enterprise deployments. No system is completely secure, so we cannot guarantee absolute security.
7.3. Incident Notification
If we become aware of a security incident affecting personal information, we will notify affected Clients and individuals, and the relevant authorities, as required by applicable law and our agreements.
In Plain Language
We keep data only as long as we need it, then delete or anonymize it. We protect it with encryption, access controls, and monitoring, and we’ll tell you if something goes wrong.
08. International Data Transfers
8.1. Where Data Is Processed
Koronik is based in the United States, and we and our service providers may process personal information in the United States and other countries. Enterprise Clients may be able to select a hosting region or deploy in their own AWS account.
8.2. Safeguards
Where personal information from the European Economic Area, the United Kingdom, or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.
In Plain Language
Your data may be processed in the U.S. or other countries. When data leaves Europe or the UK, we use approved legal safeguards.
09. Your Privacy Rights
9.1. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy;
- Correct inaccurate or incomplete information;
- Delete your personal information;
- Object to or restrict certain processing, including direct marketing;
- Receive your information in a portable format;
- Withdraw consent at any time, without affecting earlier processing.
9.2. How to Make a Request
Email us at ai@graaho.com or use the “Have a Question?” form on this page. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law. If your request concerns Client Data, we will refer you to the relevant Client and assist them in responding.
9.3. EEA, UK, and Swiss Residents
You also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concerns first, so please contact us.
9.4. California Residents
Under the California Consumer Privacy Act, as amended, you have the rights to know, delete, and correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information as defined by that law, and we will not discriminate against you for exercising your rights. You may use an authorized agent to make a request on your behalf.
In Plain Language
You can ask to see, correct, delete, or download your data, or to stop certain uses of it. Just email us or use the form on this page, and we won’t treat you differently for asking.
10. Children’s Privacy
10.1. Age Restriction
The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at ai@graaho.com and we will delete it.
In Plain Language
Koronik.AI is designed for businesses and is not intended for children under 16.
11. Changes and Contact Us
11.1. Changes to This Policy
We may update this Policy from time to time. We will post the updated version on this page with a new “Last Updated” date and, for material changes, notify account holders by email or through the Services before the changes take effect.
11.2. Contact Us
If you have questions about this Policy or our privacy practices, please contact:
- Graaho Technologies LLC (Koronik.AI)
- 1530 Wilson Blvd, Suite 650, Arlington, VA 22209, USA
- Email: ai@graaho.com
In Plain Language
If we change this policy, we’ll update the date on this page and let you know about significant changes. If you have questions, email us at ai@graaho.com.
Related documents
Questions
For legal questions, email legal@graaho.com. For privacy questions or requests about your data, email ai@graaho.com.
koronik.ai
Koronik.AI is an agentic AI platform for deploying bespoke AI agents at scale. We automate communication, intelligence, and workflow to deliver measurable ROI.
Arlington, VA 22209, USA
Join our newsletter
Koronik.AI is an agentic AI platform for deploying bespoke AI agents at scale. We automate communication, intelligence, and workflow to deliver measurable ROI.
Platform
Address
Address: 1530 Wilson Blvd, Suite 650, Arlington VA 22209, USA