CORA AI Privacy Policy

Effective date: 15 August 2026

YourLifePurpose Limited (“YourLifePurpose”, “YLP”, “we”, “us”, or “our”) explains in this Privacy Policy how we collect, use, disclose, protect, and retain personal information when you visit our website, purchase or use CORA AI, contact us, or participate in a corporate CORA AI account.

1. Who we are
YourLifePurpose Limited is based at 9 Regents Gardens, Westmoorings, Port of Spain, Trinidad and Tobago. Privacy questions and personal-data requests may be sent to info@yourlifepurpose.com. Our privacy contact is Anthony Hadeed, CEO / Leadership, Career, and Life Coach.

2. Information we collect
Depending on how you use the service, we may collect:

  • name, email address, telephone number, company, and account details;
  • authentication, access, subscription, seat, billing-status, and support information;
  • payment and transaction information. Card details are handled by Stripe or the payment provider and are not stored by CORA in full;
  • conversation prompts, messages, generated summaries, saved reports, and other content you choose to submit;
  • employee and corporate-administration information such as name, email, access status, subscription status, access-email status, last CORA login, and monthly conversation-usage counts;
  • device, browser, IP-address, security, diagnostic, and service-usage information; and
  • information you provide in communications, forms, surveys, assessments, or support requests.

Please do not submit highly sensitive information unless it is necessary for your use of the service and you have a lawful basis to do so.

3. How we use information
We may use personal information to:

  • create and administer accounts and subscriptions;
  • provide CORA AI, conversation history, summaries, assessments, and support;
  • administer corporate seats, employee access, usage limits, billing, and security;
  • process payments, refunds, cancellations, receipts, and billing communications;
  • send access emails, service notices, and requested support messages;
  • protect the service, investigate misuse, prevent fraud, and maintain records;
  • understand service performance and improve features, subject to applicable law and appropriate safeguards;
  • comply with legal obligations or respond to lawful requests.

4. Privacy principles and legal grounds
We aim to collect only information reasonably necessary for identified purposes, use it fairly and transparently, keep it accurate, protect it with appropriate safeguards, and retain it only as long as reasonably necessary. Depending on the circumstances and applicable law, processing may be based on consent, performance of a contract, legal obligations, or legitimate business interests.

5. AI processing
Conversation content is currently processed through OpenAI’s API for the production CORA AI service. OpenAI’s API data controls and enterprise privacy information are available at OpenAI Data Controls and OpenAI Enterprise Privacy. YourLifePurpose may conduct controlled evaluations of other providers, including Anthropic, using approved test prompts. Anthropic is not described as a production provider for customer requests unless and until it is enabled, approved, and disclosed in an updated notice. CORA AI should not be used to submit information that you are not authorised to share.

6. Corporate employee privacy
Corporate administrators may see employee name, email address, subscription status, CORA access status, access-email status, last CORA login, and monthly distinct-conversation usage information needed to administer company seats and access.

Through the CORA company portal, employers do not receive the employee’s private conversation text, prompts, or personal AI-generated conversation summaries, unless the employee deliberately shares them or disclosure is required by law.

Employers are responsible for providing employees with any additional workplace privacy notice required for their use of CORA AI.

7. When we disclose information

We may disclose information to service providers that help us provide hosting, AI infrastructure, payment processing, email, authentication, security, analytics, customer support, and technical operations. We may also disclose information when required by law, to protect rights and safety, in connection with a business transfer, or with your consent. The current provider list and relevant information are:

8. International transfers
Some providers may process information outside Trinidad and Tobago and the United States of America. Processing locations may vary according to the provider, service used, account or project configuration, contractual arrangements, and any approved data-residency controls. We will update this Policy if a material change affects the providers or transfer safeguards used for CORA AI.

  • OpenAI: locations and regional controls depend on the applicable OpenAI account, project, endpoint, and approved configuration.
  • Anthropic: not currently used for production customer requests; any future use will be assessed and disclosed before activation.
  • Stripe, WordPress, Render, Cloudflare, and GitHub: locations and safeguards are governed by the applicable provider terms, data-processing agreements, and service configuration.

9. Retention and security
We retain information only for as long as reasonably necessary for the purposes described above, legal obligations, dispute resolution, fraud prevention, security, and accounting. The following describes our intended application-level approach; specific retention periods may be extended where required by law, a valid legal request, a security investigation, or a documented contractual obligation.

B2C CORA AI Questions and Answers

  • CORA AI Application Standard: This type of data may be retained during the active account to provide conversation history and requested reports. After account closure or a verified deletion request, we intend to delete or de-identify it within 30 days, subject to the exceptions described above and the completion of the applicable deletion process.
  • Provider Processing: Provider-side retention is governed by the provider’s applicable terms, endpoint controls, safety requirements, and any approved data-retention configuration. OpenAI API data is not used to train models by default, but that does not mean zero retention. We do not promise provider-side zero retention until the relevant approval, configuration, testing, and contractual documentation are complete.

B2B CORA AI Questions and Answers

  • CORA AI Application Standard: This type of data is intended to be deleted or de-identified within 30 days after the corporate service and related access end, or within the period required by a verified deletion request, subject to legal, security, and contractual exceptions. We will not promise immediate deletion until the applicable request-handling and purge process has been implemented and tested.
  • Provider Controls: YourLifePurpose is seeking and evaluating provider-specific retention controls, including OpenAI ZDR. ZDR requires provider approval and applies only to eligible services and configurations; it is not triggered by subscription cancellation. If Anthropic is later used, any Anthropic ZDR arrangement would require separate organization-level approval and would be governed by Anthropic’s applicable terms.

B2C & B2B Subscriptions and Financial Transactions

  • CORA AI Application Standard: Subscription, invoice, payment-status, and transaction records may be retained for the period reasonably required for accounting, tax, audit, fraud prevention, dispute resolution, and legal compliance. The applicable period depends on the record and the law that applies; it is not represented as a universal seven-year rule.
  • Vendor Isolation: Full payment-card details are handled by Stripe or the applicable payment provider and are not included in CORA prompts. We do not intentionally send full payment-card details to the LLM APIs.

B2B Company AI Statistics

  • CORA AI Application Standard: Aggregated or de-identified statistics may be retained for up to 3 years or the life of the corporate contract, whichever comes first, where needed for reporting, support, or agreed organisational purposes.
  • Privacy qualification: Aggregation or de-identification may reduce the information’s identifiability, but does not automatically make it exempt from privacy, confidentiality, contractual, or deletion requirements. We will assess requests and applicable law before retaining or deleting this information.

We use reasonable administrative, technical, and organisational safeguards. No online service can guarantee absolute security.

Provider or legal safety processes may require limited content or metadata to be retained for longer than the ordinary period described above. Where that occurs, retention is governed by the applicable provider terms, law, and documented security process; users are not treated as having waived their privacy rights merely because a prompt triggered a safety control.

10. Your choices and rights
Subject to applicable law, you may ask us about the personal information we hold, request correction, raise an objection or concern, withdraw consent where consent is the basis, or request deletion where appropriate. Send requests to info@yourlifepurpose.com with your account email, the request type, and enough information for us to verify the relevant account. Do not send full payment-card numbers or security codes. We may need to verify your identity and may retain limited information where legally required. We will review and respond to requests under applicable law and our documented data-request process.

11. Children
CORA AI is not directed at children under the age of 14 years. Do not use the service or submit a child’s personal information without appropriate authorisation and a lawful basis.

12. Changes and contact
We may update this Policy by posting a revised version with a new effective date. Questions or privacy requests may be sent to info@yourlifepurpose.com or mailed to YourLifePurpose Limited, 9 Regents Gardens, Westmoorings, Port of Spain, Trinidad and Tobago.