Privacy Policy

Last Updated: February 26, 2026

This Privacy Policy ("Policy") outlines how Keplogic, Inc. ("Coral," "we," "us," or "our") gathers, utilizes, shares, and safeguards information related to your use of the Coral platform, website (https://coral.inc), communications with us, use of artificial intelligence and machine learning technologies, and associated services (together, the "Services"). For the purposes of this Policy, "Personal Information" refers to any information that relates to an identified or identifiable individual.

By accessing or using the Services, you consent to the collection and use of information as described in this Policy. If you do not agree with this Policy, please refrain from using the Services.

IMPORTANT NOTICE REGARDING AI AGENTS: The Services allow you to link third-party services (including email, messaging, productivity, and other applications) to AI-powered agents running within virtual machines. When you establish such connections, AI agents will access and process data from those services on your behalf. This may include personal data belonging to you and others. You are responsible for ensuring that your use of the Services complies with all applicable privacy laws and that you have secured any required consents. Coral does not govern the actions performed by AI agents and bears no responsibility for how AI agents access, utilize, or disclose data from connected services.

1. Personal Information We Collect

We may gather Personal Information about you directly, from third-party sources, and automatically through your interaction with the Services.

Information You Provide

• Contact Information: We may collect professional contact details including your first and last name, email address, phone number, company name, job title and department, and other pertinent information required to manage your account and business relationship.

• Profile Data: We may collect information such as the username and password you create to set up an online account with us, biographical information, and any other data that you add to or that becomes associated with your account.

• Payment Information: If you subscribe to our Services, we will request your payment details, such as credit card number and billing address, to facilitate payment processing. Payments are handled by our third-party payment processor, and we do not retain complete credit card numbers.

• User-Generated Content: This includes photos, images, music, videos, comments, questions, messages, correspondence, and other content or information that you create, transmit, or otherwise make available through the Service to us or other users, along with associated metadata.

• Phone Number: If you provide your phone number during account registration or in your account settings, we collect and use it to send you SMS messages for account verification, service notifications, and support communications. By providing your phone number, you consent to receive these text messages. See Section 2A below for full details on our SMS messaging practices.

• Communication Information: When you reach out to us through a contact form, email, or other channels, you may supply us with communication information, including your name, email address, company, and the substance, date, and time of your message.

• Support Information: When you seek technical support, we will process your contact information, communication details, the nature of your support request, and any supplementary information you provide.

• API Keys and Credentials: You may supply third-party API keys (for AI providers such as Anthropic, OpenAI, or others) and authentication credentials for Connected Services. These are securely stored within your Virtual Machine environment and are not held centrally by Coral.

Information from Connected Services

• Third-Party Service Data: When you authorize connections to third-party services (such as email, messaging, calendars, file storage, development tools, or other applications), data from those services may be accessed and processed within your Virtual Machine by AI agents. This data may include: emails and message content; contacts and address books; calendar events and scheduling data; files and documents; usage data from connected applications; and any other data accessible through the APIs of those services.

Note: Coral's access to Connected Service data is limited to enabling the connection. The AI agents operating within your Virtual Machine access and process this data based on your instructions. You maintain control over and responsibility for all data accessed from Connected Services.

Information Collected Through Automated Means

• Website Usage Information: When you interact with our Services, we may automatically gather information about your visit, including through cookies, beacons, invisible tags, and comparable technologies in your browser. This information may include Personal Information, such as your IP address, web browser type, device type, and the pages you visit.

• Device and Log Information: We collect data about the devices you use to access the Services, including: IP address; browser type and version; operating system; device identifiers; and log data such as access times and referring URLs.

Information Collected from Third Parties

• Information from Other Sources: We may acquire information, including Personal Information, from third parties and sources beyond our Services, such as our business clients and partners. If we merge or associate information from other sources with Personal Information collected through our Services, we will handle the combined information as Personal Information in accordance with this Policy.

2. How We Use Personal Information

We may utilize Personal Information for the following purposes:

• Providing the Services: We may use your Personal Information to deliver and personalize the Services, process payments, offer customer service, maintain or manage accounts, verify customer information, provision Virtual Machines, support AI agent operations, enable connections to third-party services, and perform similar functions.

• Support: We use Personal Information to deliver technical support, including diagnosing and resolving issues you report.

• Customer Relationship Management: We may process your Personal Information for customer relationship management activities.

• Communicating with You: We may use your email address and other Personal Information as needed to reach out to you for administrative purposes, manage your account, provide requested information, deliver service-related notices, updates, security alerts, and respond to your comments and questions.

• Understanding Usage and Enhancing the Services: We use data collected through the Services to understand and analyze usage trends and preferences, enhance the Services, and develop new products, services, features, and capabilities.

• Marketing: We may use your email address and other Personal Information to send marketing communications, including updates about promotions and events related to our products and services. You may opt out of receiving promotional communications as outlined below under Your Rights and Choices.

• Security and Fraud Prevention: We may use your Personal Information to identify, prevent, and address fraud, abuse, security incidents, and other harmful activities.

• Administrative and Legal Purposes: We may use your Personal Information to resolve administrative or legal matters, including but not limited to intellectual property infringements, defamation, or privacy rights, and to comply with applicable laws, regulations, legal processes, and governmental requests.

• Aggregation: We may aggregate or otherwise de-identify Personal Information and use the resulting data ("De-identified Information") for any lawful purpose. We will maintain and use De-identified Information in de-identified form and will not seek to re-identify the information, except to verify our de-identification processes.

Important: We do not use Customer Content (including data from Connected Services) to train AI models or for any purpose beyond providing the Services to you.

2A. SMS/Text Messaging

If you provide your phone number during account registration or in your account settings, you may receive SMS text messages from Coral related to the Services. By providing your phone number and opting in, you consent to receive the following types of text messages:

• Account Verification: One-time verification codes to confirm your identity during sign-up or login.
• Service Notifications: Alerts about your account status, AI agent activity, scheduled job results, and other service-related updates.
• Support Communications: Responses to support requests you initiate.

Message Frequency: Message frequency varies based on your account activity and notification preferences. You may receive up to approximately 10 messages per month, depending on your usage of the Services.

Opt-Out: You can opt out of receiving SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive a single confirmation message and will no longer receive SMS messages from us. You may also opt out by contacting us at support@coral.inc or by updating your notification preferences in your account settings.

Opt-In: You can opt back in at any time by replying START to any previous message from us, by updating your preferences in your account settings, or by contacting us at support@coral.inc.

Help: For assistance, reply HELP to any message from us, or contact us at support@coral.inc.

Message and Data Rates: Message and data rates may apply depending on your mobile carrier and plan. Coral is not responsible for any carrier fees or charges.

Supported Carriers: SMS messages are sent via standard protocols and should be supported by all major U.S. carriers. However, carrier support is not guaranteed.

Privacy: We will not share or sell your mobile information with third parties for promotional or marketing purposes. Your phone number and SMS opt-in data are used solely for the purposes described in this section.

No Purchase Required: Providing your phone number and opting in to SMS is not a condition of purchasing any goods or services from Coral.

3. When We Share Information

We may share information with third parties under the following circumstances:

• Service Providers: We may engage third-party service providers to help deliver hosting services or other services essential to the operation of the Services. These providers may access or process your information as part of delivering those services to us. They are contractually required to protect your information.

• AI Providers: When you utilize AI agents, your prompts and instructions may be processed by third-party AI providers (such as Anthropic, OpenAI, or other providers you select) under your API key and their terms of service. Coral does not control how AI providers handle this data, and such processing is subject to the relevant AI provider's terms and privacy policy.

• Connected Services: When you link third-party services, information is shared with those services as necessary to support the integration. Such sharing is governed by the terms and privacy policies of those services.

• Business Purposes: We may make certain information available to third parties for various purposes, including compliance with reporting obligations or for our business needs. Any such sharing will be in accordance with applicable laws and regulations.

• Legal Requirements: We may disclose your information if required by law or in the good-faith belief that such action is necessary to comply with applicable laws, respond to a court order, judicial or other government subpoena or warrant, or to cooperate with law enforcement or other governmental agencies.

• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, we may transfer your information to the acquiring entity as part of the transaction.

• Affiliates: We may share Personal Information with our affiliates, subsidiaries, and branch offices where it is reasonably necessary or appropriate for us to disclose Personal Information for the purposes described above.

• With Your Consent: We may share information with your consent or at your direction.

4. AI Agents and Data Processing

The Services enable AI agents to carry out automated tasks within your Virtual Machine, including accessing and processing data from Connected Services. Please be aware of the following:

• Data Access: AI agents may access, read, process, modify, send, and delete data from Connected Services in accordance with your instructions. This may include personal data of third parties (such as email correspondents or contacts).

• AI Provider Processing: Data processed by AI agents may be transmitted to third-party AI providers for processing. Such transmission is subject to the AI provider's terms of service and privacy policy, as well as your use of their API key. Different AI providers maintain different data retention and usage policies.

• Logging and Monitoring: Activity within your Virtual Machine may be logged for troubleshooting and security purposes. You bear responsibility for any personal data processed within your VM.

• Your Responsibility: You are solely responsible for:

  • Ensuring you have the authority to connect third-party services and grant AI agents access to data within them;
  • Obtaining any necessary consents from individuals whose data may be processed;
  • Complying with applicable privacy laws;
  • Configuring appropriate permissions and safeguards for AI agent activities; and
  • Reviewing the privacy policies of any AI providers you utilize.

5. Cookies and Other Tracking Technologies

We and our service providers may employ cookies and similar technologies to gather usage and browser information about how you interact with our Services. The technologies used for this automatic data collection may include cookies and web beacons that enable us to verify system and server integrity and compile statistics about the popularity of certain content.

• Essential Cookies: Required for the functioning of the Services, including authentication and security.

• Analytics Cookies: Help us understand how visitors engage with the Services. We may use services such as Google Analytics to collect and analyze usage data.

• Preference Cookies: Store your settings and preferences.

• Cookie Choices: You can manage cookie preferences by adjusting your browser settings to refuse all or some browser cookies, or to notify you when websites set or access cookies. If you disable certain cookies, please be aware that some portions of our Services may not operate properly.

• Interest-Based Advertising: We may permit third parties to collect Personal Information to deliver interest-based advertising. You can opt out of interest-based advertising through the Digital Advertising Alliance (optout.aboutads.info) or the Network Advertising Initiative (optout.networkadvertising.org).

• Selling Personal Information: While we do not sell Personal Information in exchange for monetary compensation, we do share Personal Information for other benefits that could be considered a "sale" under various data protection laws. You may opt out as described in Section 6.

6. Your Rights and Choices

Depending on your location, you may have certain rights concerning your Personal Information under applicable data protection laws. To exercise any of the privacy rights available to you, please refer to the How to Contact Us section below.

• Access: The right to request access to and obtain a copy of any Personal Information we hold about you.

• Deletion: The right to have your Personal Information that we have collected or obtained deleted, subject to certain exceptions.

• Correction: The right to request correction of any inaccuracies in your Personal Information, subject to certain exceptions.

• Opt Out of Certain Processing: The right to opt out of the processing of your Personal Information for purposes of targeted or cross-context behavioral advertising and/or the sale of your Personal Information.

• Objection/Restriction of Processing: The right to object to or restrict our processing of your Personal Information under certain circumstances.

• Withdraw Consent: The right to withdraw your consent where we rely on your consent to process your Personal Information.

• Portability: The right to receive your Personal Information in a structured, commonly used, and machine-readable format.

• Automated Decision-Making and Profiling: At this time, we do not use Personal Information for automated decision-making or for profiling that produces legal or similarly significant effects. Accordingly, we do not fulfill requests to opt out of these uses.

• Lodge a Complaint: The right to file a complaint with a supervisory authority or other regulatory body if you believe we have violated any of the rights afforded to you under applicable data protection laws. We encourage you to reach out to us first so we have an opportunity to address your concerns directly.

• Global Privacy Control (GPC): You may also exercise your opt-out rights by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you use an Opt-Out Preference Signal, you will need to enable it for each supported browser or browser extension you use.

You will not face discrimination of any kind for exercising the rights described in this Policy. However, if you withdraw your consent, object to the processing of your Personal Information, or choose not to provide certain Personal Information, we may be unable to deliver some or all of our Services to you.

• Marketing Communications: You have the right to opt out of receiving promotional communications from us. You can do so by following the instructions included in the communication or by contacting us using the contact details at the end of this Policy.

To exercise these rights, please reach out to us at support@coral.inc. We will respond within the timeframes mandated by applicable law.

7. Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes for which it was gathered, unless a longer retention period is required or permitted by law. We take reasonable steps to ensure that Personal Information is securely deleted or anonymized when it is no longer needed.

• Account Information: Retained for the duration of your account and for a reasonable period afterward for legal, tax, and audit purposes.

• Virtual Machine Data: Customer Content within your Virtual Machine is retained while your account is active. Following account termination, VM data may be deleted after thirty (30) days.

• Usage and Log Data: Retained for up to 1 month for analytics and security purposes.

• Communication Records: Support communications may be retained for quality assurance and legal purposes.

8. Information Security

We implement reasonable security measures to safeguard the Personal Information we collect and maintain, including:

• Encryption: Data transmitted to and from the Services is encrypted using industry-standard protocols (TLS/SSL). Sensitive data at rest is also encrypted.

• VM Isolation: Each customer's Virtual Machine is isolated from other customers to prevent unauthorized access.

• Access Controls: We maintain access controls to restrict access to information to authorized personnel.

• Security Monitoring: We monitor our systems for potential security threats and vulnerabilities.

However, no security system is impenetrable, and we cannot guarantee the absolute security of your information. You acknowledge that you provide information at your own risk. You are responsible for maintaining the security of your account credentials, API keys, and access to your Virtual Machine.

9. International Data Transfers

Our Services are hosted in the United States of America. If you access our Services from a different jurisdiction, please note that your Personal Information may be transferred to and stored in the United States of America. By providing your Personal Information, you consent to the transfer and processing of your information in accordance with this Policy.

Individuals in the European Union, European Economic Area, Switzerland, and the United Kingdom

This section provides supplementary information regarding our processing of Personal Information of individuals located in the European Union (EU), European Economic Area (EEA), Switzerland, and the United Kingdom (UK) in accordance with the EU General Data Protection Regulation (GDPR), UK Data Protection Regulation, and the Swiss Federal Data Protection Act.

For transfers from the EEA, United Kingdom, or Switzerland, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses, adequacy decisions, or other lawful bases.

10. Legal Bases for Processing

Our legal basis for processing Personal Information depends on the specific Personal Information involved and the context in which we process it. Where we act as a controller, we process your Personal Information:

• With your consent: Where you have provided us consent to process your Personal Information for specific purposes.

• Where necessary to perform a contract: To deliver the Services you have requested.

• To comply with our legal obligations: Where we are legally obligated to process your data.

• Where doing so is in our legitimate interests: Including the purposes outlined in this Policy, such as analytics, security, fraud prevention, and improvement of our Services, and where such interests are not overridden by your rights and freedoms.

11. Special Category Data

We do not intend to collect any Special Category Data, which encompasses data revealing your racial or ethnic origin, political opinions, religious, moral or philosophical beliefs, trade union membership, political views, genetic data, biometric data for identification purposes, and data concerning health or a person's sex life and/or sexual orientation. Please do not send us any Special Category Data.

12. Children's Privacy

The Services are not designed for children under the age of 18. We do not knowingly collect Personal Information from children under the age of 18 without parental consent. If you believe we have collected information from a child under the age of 18, please contact us using the details provided at the end of this Policy, and we will take steps to remove such information.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to Know: The right to know what personal information we collect, use, disclose, and sell.

• Right to Delete: The right to request deletion of personal information.

• Right to Correct: The right to correct inaccurate personal information.

• Right to Opt-Out: The right to opt out of the sale or sharing of personal information.

• Right to Non-Discrimination: The right not to be discriminated against for exercising your privacy rights.

To exercise your California privacy rights, contact us at support@coral.inc.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent laws:

• Data Controller: Keplogic, Inc. is the data controller for Personal Information processed in connection with the Services.

• Data Protection Officer: Not applicable.

• Right to Lodge a Complaint: You have the right to file a complaint with a supervisory authority if you believe we have violated your privacy rights. We encourage you to contact us first so we can address your concerns.

15. Third-Party Services

The Services may include features or links to websites and services operated by third parties. Any information you provide on third-party sites or services is subject to those operators' privacy and security policies. We encourage you to review the privacy policies of those third parties before providing them with any information. We are not responsible for the privacy practices of third parties.

16. Changes to This Privacy Policy

We may revise this Policy from time to time. The "Last Updated" date at the top of this Policy indicates when the most recent revisions were made. Changes take effect when published on our website. For material changes, we will provide notice through the Services or via email. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how we collect, use, and share your Personal Information.

17. How to Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Keplogic, Inc. 241 El Camino Real Menlo Park, CA 94025

Email: support@coral.inc

Website: https://coral.inc

Please allow a reasonable time for us to respond to your inquiry.