Privacy notice

This notice explains what personal data Kōra Labs collects through koralabs.my, why we collect it, and what you can do about it. It is issued under Malaysia's Personal Data Protection Act 2010 (PDPA).

Who we are

Kōra Labs is an AI automation studio based in Kuala Lumpur, Malaysia. For the purposes of the PDPA, we are the data user in respect of the personal data described below. You can reach us at hello@koralabs.my.

What we collect

We only collect what you choose to give us. If you complete the enquiry form on our contact page, we collect:

• Your name
• Your company name
• Your email address
• Your phone number
• Your answers about your current process: the bottlenecks you selected, what you are looking to build, your team size, and your intended timeline

If you contact us by email or WhatsApp instead, we hold whatever you include in that message.

We do not collect sensitive personal data as defined by the PDPA, and we do not ask for identity card numbers, payment card details, or financial information through this website.

Cookies and analytics

We use Google Analytics to understand which pages people read and how they found us. It tells us that a page was visited, roughly from where, and on what kind of device. We use it to improve the site, not to identify you.

Analytics only runs if you accept it. The first time you visit, we ask. If you decline, the Google Analytics script is never loaded and no analytics cookies are set at all. Your choice is remembered in your browser, and you can change it any time by clearing this site's data in your browser settings, which will bring the prompt back.

We do not run advertising trackers, we do not use analytics to build an advertising profile of you, and we have IP anonymisation enabled.

Separately, fonts are loaded from Google Fonts and Fontshare, and our enquiry form is delivered by Formspree, so those providers process your IP address and browser details as a normal part of serving a request. That is standard web infrastructure rather than tracking by us, and it happens whether or not you accept analytics.

Why we collect it

We use your information to:

• Respond to your enquiry and arrange a discovery call
• Understand your process well enough to scope what we would build
• Prepare a proposal, and deliver the work if you engage us
• Keep in touch about your project while it is active

We do not sell your data, and we do not add you to a marketing list from a form submission alone.

Supplying your data is voluntary

You are not obliged to give us any of this. It is entirely your choice whether to complete the form. If you choose not to, we simply will not be able to respond to an enquiry or scope a project for you, since we would have no way to reach you or understand what you need.

Who we share it with

We keep this tight. Your data may be processed by:

• Formspree, which receives and forwards our enquiry form submissions
• Our email provider, which hosts the inbox your enquiry lands in
• Google Analytics, which processes anonymised usage data, but only if you accepted analytics

These providers process data on our behalf so that the form and our email work. We do not otherwise disclose your personal data to third parties, except where we are required to do so by law or by a lawful request from an authority. Because these providers operate internationally, your data may be stored on servers outside Malaysia.

How long we keep it

We keep enquiry data only for as long as it serves the purpose it was given for. If an enquiry does not become a project, we delete it once it is clearly no longer live. If you become a client, we retain project records for as long as needed to deliver and support the work, and to meet any legal or accounting obligation.

Keeping it secure

We take reasonable steps to protect the data we hold, including limiting access to the two of us, using reputable providers, and serving this site over an encrypted connection. No system is perfectly secure, but we do not hold more than we need, which is the most effective protection there is.

Your rights

Under the PDPA you have the right to:

• Request access to the personal data we hold about you
• Request that we correct it if it is inaccurate, incomplete, or out of date
• Withdraw your consent to our continued processing
• Limit how we process your data, including asking us to stop contacting you
• Withdraw analytics consent at any time by clearing this site's data in your browser

Email hello@koralabs.my and we will action it. We will not make this difficult. Note that the PDPA allows a data user to charge a prescribed fee for a formal data access request, and there are limited circumstances where access may be refused by law.

Changes to this notice

If we change how we handle personal data, we will update this page and change the date at the top. Material changes, such as introducing analytics, will be reflected here before they take effect.