legal
Privacy Policy
Last updated: September 18, 2026
Who we are
The controller of your personal data is Oleh Karmazyn, sole trader (jednoosobowa działalność gospodarcza), Katowice, Poland — NIP 6272797122, REGON 540789943. You can reach us about anything in this policy at [email protected].
Summary
We run no third-party analytics. There is no Google Analytics, no Meta pixel, no PostHog, no Plausible, no advertising network and no session recorder in any Corlecti product — so there is no cookie banner, because there is nothing to ask you about. We do not sell your data and we never will.
The browser extension is local-first: your notes live in your browser, not on our servers — unless you connect Corlecti Map and choose folders or files to send to it. Map, Threads and Talk are hosted products, so what you create in them is stored on our servers in the EU — and where you use an AI feature, the content that feature needs is sent to the model provider you selected. Every section below says which.
Your Corlecti account
One account works across all our products. It is created when you sign in with Google, and it is the only place we hold identity and billing information.
| What | Specifically | Where it lives | How long |
|---|---|---|---|
| Identity | Email address, Google account id, name, display name, avatar URL, language | Our database (EU) | While your account exists |
| Profile you fill in | Age range and field of work, asked once during onboarding | Our database (EU) | While your account exists |
| Consent record | Whether you accepted this policy and whether you opted in to marketing email, with the time you did | Our database (EU) | While your account exists, plus 3 years as proof of consent |
| Sessions | A hashed refresh token, the product you signed in from, your browser user-agent string and your IP address | Our database (EU) | Until the session expires or you sign out |
| Billing | Stripe customer and subscription identifiers, plan, status, renewal date. We never receive your card number. | Our database (EU) and Stripe | While subscribed, then as long as tax law requires (5 years in Poland) |
| Credits and usage counters | How much of your plan you have used, which product and model it was spent on. Not the content. | Our database (EU) | 24 months |
| Support tickets | The subject, description and replies you write to us | Our database (EU) | 24 months after the ticket is closed |
We store your IP address and browser user-agent against each sign-in session. We use them to detect a stolen session token and to end it — not to profile you.
Corlecti Extension
Local-first. Your notes live in your browser, and optionally in your own Google Drive. They reach our servers only if you connect Corlecti Map and link a folder or send a file to it.
| What | Specifically | Where it lives | How long |
|---|---|---|---|
| Notes and folders | Everything you save, your folder tree, edit history, agent chat sessions, and images you paste or upload into a note | chrome.storage.local (images in the extension’s own IndexedDB), on your device — except what you link or send to Corlecti Map (below) | Until you delete it or remove the extension |
| Your AI provider keys | The Anthropic, OpenAI, Gemini, DeepSeek or OpenRouter key you paste in | chrome.storage.local, on your device only — never transmitted to us | Until you clear it |
| Text you send to AI | The selection, note or prompt you act on | Sent from your browser directly to the provider you chose, using your own key. It does not pass through us. | Governed by that provider’s policy, not ours |
| Sign-in session | Your email, name, plan and access tokens | chrome.storage.local, plus your account record on our servers | Until you sign out |
| Licence key (optional) | The Pro licence key you enter, its expiry date and when it was last checked | chrome.storage.local, on your device. The key is sent to our API to activate it and, about once a day while you use the extension, to check it is still valid. | Until you deactivate it or remove the extension. Signing out keeps it. |
| Note count | A single number — how many notes you have — reported to us so we can enforce free-plan limits | Our database (EU) | Overwritten on each report |
| Content you link or send to Corlecti Map (optional) | The name and Markdown text of the files in a folder you link to a map, kept in sync one way while it is linked (adds, edits, renames, moves, deletes), and a file you send to a map together with your instruction. Pictures are not sent — a placeholder line stands in for each. Nothing else is sent: not your other folders, chats, settings or API keys. | Sent from your browser to Corlecti Map (map.corlecti.com), only after you connect it in Settings → Account and only for the folders and files you choose. It becomes your own maps there, covered by the Corlecti Map section below — including its AI, which builds the map from a file you send. | Until you delete the map. Unlinking a folder stops syncing and leaves the map as it is. |
| Corlecti Map connection (optional) | The access and refresh tokens for Corlecti Map, which folder is linked to which map, and the status of files you sent | chrome.storage.local, on your device only. Not included in the data export or in Google Drive sync. | Tokens until you disconnect, which also revokes the extension’s access on Corlecti Map; links until you unlink; send statuses until you clear them |
| Google Drive backup (optional) | Your folders and notes, and the images in them, if you switch sync on | Your own private Drive appDataFolder. Only your extension can read it; we cannot. | Until you turn sync off or delete it |
Your own AI keys
The extension talks to AI providers using a key you supply. The request goes from your browser straight to the provider — it does not pass through our servers, so we never see your key or the text you send. Your use of those providers is governed by your agreement with them, not by this policy.
| Provider | Endpoint |
|---|---|
| Anthropic | api.anthropic.com |
| OpenAI | api.openai.com |
| Google Gemini | generativelanguage.googleapis.com |
| DeepSeek | api.deepseek.com |
| OpenRouter | openrouter.ai |
Usage reporting
To enforce free-plan limits, while you are signed in the extension periodically sends our API at api.corlecti.com a single number: how many notes you currently have. That report carries no note content, no titles and no browsing history. It is the only thing the extension reports to that API about your usage, and it is the reason we describe ourselves as having no analytics rather than no network traffic.
What the extension can read
The extension can access any page because a text operation has to work wherever you are reading. It reads a page only when you use it there — selecting text, a keyboard shortcut, a context-menu click, the save button. Its background work never reads a page: Google Drive sync and Corlecti Map folder sync if you switched them on, finishing a file you sent to Corlecti Map, and the note count reported while you are signed in. It does not monitor your clipboard and does not send page content to us. The clipboard is read only when you press Paste.
| Permission | Why it is needed |
|---|---|
| storage | Save folders, notes, settings, chat sessions and usage logs in chrome.storage.local on your device |
| activeTab | Read the AI chat page content to extract and save responses when you ask for it |
| clipboardRead | Read the clipboard only when you click the Paste button |
| tabs | Open extension pages and deliver the Ctrl+Shift+S save shortcut to the active tab |
| contextMenus | Add a right-click “Save to Corlecti Extension” item for selected text, on AI chat pages and on the sites you allowed the save button on |
| identity | Optional Google sign-in and optional Google Drive sync, and the optional Corlecti Map connection, where you sign in and approve access in Corlecti Map’s own window at map.corlecti.com |
| alarms | Wake the extension for background work: Google Drive sync on a schedule or after an edit, if you switched it on (Pro); Corlecti Map folder sync a minute after you edit a linked folder; checking on a file you sent to Corlecti Map; and the note-count report while you are signed in |
| scripting | Add the “save selection” button to the sites you choose in Settings, beyond the AI chat sites it ships on |
| host access to all sites | Read the text you have selected when you invoke a text operation or the save shortcut, and show the save button on the sites you chose. Nothing is read until you act, and page content is never sent to us. |
| host access to AI providers and Google | Reach api.anthropic.com, api.openai.com, generativelanguage.googleapis.com, api.deepseek.com and openrouter.ai with your own key, and www.googleapis.com and accounts.google.com for Google sign-in and Drive sync |
Optional Google Drive sync writes to your own private appDataFolder. Only your extension can read it — we cannot, and turning sync off removes it.
The optional Corlecti Map connection is off until you connect it in Settings → Account → Corlecti Map. You sign in and approve access in Corlecti Map’s own window at map.corlecti.com, and the tokens it issues stay on your device. Once connected, only the folders you link and the files you send leave your browser, and they go to Corlecti Map, where they become your own maps under the Corlecti Map section of this policy. Disconnecting revokes the extension’s access; unlinking a folder stops syncing and leaves the map as it is.
Corlecti Map
A hosted product: your boards live on our servers, and AI features run server-side, which means content you use them on is sent to the model provider you selected.
| What | Specifically | Where it lives | How long |
|---|---|---|---|
| Your maps | Boards, blocks, connections, drawings, comments, documents | Our database (EU) | Until you delete them or close your account |
| Uploads | Images, files and audio you add to a board | Our object storage (EU) | Until you delete them or close your account |
| AI conversations | The full transcript of chats with the map agent, and scenario runs | Our database (EU) | Until you delete the board or close your account |
| Content sent to AI providers | The blocks, prompts and documents a feature needs, sent to Anthropic, OpenAI, DeepSeek or Google Gemini depending on the model you select | The selected provider | Providers are used through their API, which is not used to train their models. Their own retention applies. |
| Search index | Numeric embeddings of your block text, generated by OpenAI, that power search and related-note suggestions | Our database (EU); the text is sent to OpenAI to generate them | Regenerated on edit; deleted with the block |
| Audio transcription | Audio you upload, converted to text | A transcription provider, then our database | The transcript is kept with your board; the audio per your upload |
| Your own AI key (optional) | A provider key you supply so requests run on your account | Our database, encrypted at rest. Only the last four characters are ever displayed. | Until you remove it |
| Access credentials | Personal API keys and OAuth tokens you create for MCP access | Our database (EU), hashed | Until you revoke them |
| Telegram link (optional) | Your Telegram user id and the messages you send the bot, if you connect one | Our database (EU), via Telegram | Until you unlink |
How AI features use your content
When you use the map agent, generate a board, search semantically or run a scenario, the blocks and prompts that feature needs are sent to the provider behind the model you picked. We use these providers through their business APIs, under terms that do not permit your content to be used to train their models. If you supply your own provider key, requests run on your account instead and we store the key encrypted.
Corlecti Threads
A reading product. It stores what you write and what you bought, and counts anonymous steps through the reading flow.
| What | Specifically | Where it lives | How long |
|---|---|---|---|
| Your notes | Highlights, the passage you highlighted, and anything you write against it | Our database (EU) | Until you delete them or close your account |
| Reading progress | Which dialogue you are on and how far through it you are | Our database (EU) | Until you close your account |
| Purchases | What you bought, the amount, currency and Stripe identifiers | Our database (EU) and Stripe | As long as tax law requires (5 years in Poland) |
| Your address, your opt-in state, and a record of what we sent you | Our database (EU) and Resend | Until you unsubscribe, then a suppression record so we do not email you again | |
| Feedback and votes | Comments you leave on a dialogue, topics you suggest or vote for | Our database (EU) | Until you close your account |
| Funnel events | That a visit, a reader open, a paywall view or a checkout happened — tied to your account if you are signed in, or to a random cookie id if you are not | Our database (EU) | Pruned automatically; never shared with anyone |
The anonymous visitor id
Before you sign in, Threads sets a random identifier in a cookie so we can count how many people reach each step — opened a dialogue, hit the paywall, started checkout. It contains nothing about you, is first-party, is never sold or shared, and is not used for advertising. It is the only measurement cookie anywhere in Corlecti, and we name it here rather than bury it.
Corlecti Talk
A speech trainer. Your voice recordings stay in your browser: uploading them is switched off in the running service, so no recording of you is ever written to disk.
| What | Specifically | Where it lives | How long |
|---|---|---|---|
| Your recordings | The audio of you speaking | Your browser only. Audio upload is disabled in the deployed configuration, so nothing is sent to us or stored. | Discarded when you close the tab. If upload is ever enabled, recordings are deleted after 7 days and this policy will be updated first. |
| Transcripts | The text of what you said, and the mistakes detected in it | Our database (EU) | Until you close your account |
| Learning profile | Your target and native language, level, tone and voice preference, streaks, vocabulary | Our database (EU) | Until you close your account |
| Generated speech | The audio you listen to, produced by Google Cloud Text-to-Speech | Google Cloud, then our object storage (EU) | Cached as part of the lesson content, not tied to you |
| Access credentials | Personal API keys you create | Our database (EU), hashed | Until you revoke them |
Your voice
Talk needs to hear you speak, but it does not need to keep the recording. Audio upload is switched off in the deployed service: your recording exists only as an object in your browser tab and is destroyed when you close it. Nothing is written to our storage. What we do keep is the transcript — the text of what you said — because that is what progress tracking is built on. If we ever enable audio upload, we will update this policy before doing so, and recordings would be deleted after seven days.
Corlecti Agency
os.corlecti.com is our internal operations tool. It has no public sign-up and is not part of the products this policy describes. If you are a client whose project we manage there, contact us for details of what we hold.
Why we are allowed to process this
Under Article 6 of the GDPR, we rely on:
- Performing our contract with you — running your account, storing what you create, taking payment. Without this we cannot provide the service.
- Your consent — marketing email, optional Google Drive sync, the optional Corlecti Map connection in the extension, optional Telegram linking. You can withdraw consent at any time, and withdrawing it does not affect what happened before.
- Our legitimate interests — keeping accounts secure, preventing abuse, and counting usage so we can enforce plan limits and decide what to build. We keep this to aggregates and counters.
- Legal obligation — retaining invoices and accounting records for the period Polish tax law requires.
Cookies
Every cookie we set is listed below. All of them are strictly necessary or functional, which is why you are not asked to consent to any.
| Cookie | Product | What it does |
|---|---|---|
| corlecti_token, corlecti_refresh | corlecti.com, Threads | Keep you signed in. Strictly necessary. |
| corlecti_oauth | corlecti.com | Protect the sign-in redirect against forgery. Strictly necessary. |
| corlecti_map_token, corlecti_map_refresh | Map | Keep you signed in. Strictly necessary. |
| talk_token, talk_refresh | Talk | Keep you signed in. Strictly necessary. |
| threads_post_login_path | Threads | Return you to the page you were reading after signing in. Functional. |
| NEXT_LOCALE | corlecti.com, Threads, Talk | Remember your language choice. Functional. |
| anonymous visitor id | Threads | A random identifier, set before you sign in, that lets us count how many people reach each step of the reading and checkout flow. It is first-party, is never shared, and is not used for advertising. |
Who else can see your data
We use the following providers to run the service. Each sees only what its job requires, and each is bound by a data processing agreement. This list is kept in step with what our code actually calls.
| Provider | What it does for us | Used by | Where |
|---|---|---|---|
| Stripe | Subscription and one-off payments, invoices, tax receipts | Extension, Map, Threads | USA / Ireland |
| Google (Sign-In) | Authentication — verifying who you are when you sign in | All | USA / EU |
| Google Drive | Optional backup of your extension data to your own private app folder | Extension | USA / EU |
| Google Cloud Text-to-Speech | Generating the spoken audio you listen to | Talk | USA / EU |
| Anthropic | AI generation and analysis of the content you send to it | Map, Talk | USA |
| OpenAI | AI generation, and embeddings used for search and related-note suggestions | Map | USA |
| DeepSeek | AI generation, when you select it as your model | Map | China |
| Speech transcription provider | Converting audio you upload into text | Map | EU / USA |
| Resend | Sending transactional and opted-in email | Threads | USA |
| Email delivery (SMTP) | Sending account, billing and support email | All | EU |
| Telegram | Optional bot integration you connect yourself; internal operational alerts | Map | Global |
| Object storage (S3-compatible) | Storing images, files and audio you upload | Map, Talk | EU |
| Hosting provider | Running our servers and databases | All | EU |
We do not sell your personal data, we do not share it for advertising, and we disclose it otherwise only where the law obliges us to.
International transfers
Our servers and databases are in the European Union. Some providers above operate outside the EEA — chiefly in the United States. Those transfers rely on the European Commission’s Standard Contractual Clauses, or on the EU–US Data Privacy Framework where the provider is certified under it. DeepSeek processes in China; it is used only if you select a DeepSeek model, and you can avoid the transfer entirely by choosing a different one.
How we protect it
- Everything travels over TLS, and databases are not reachable from the public internet.
- Refresh tokens and API keys are stored hashed. Provider keys you give us are encrypted at rest, and only their last four characters are ever displayed.
- We never see your card details — Stripe handles payment on its own pages.
- Signing in uses Google, so we never hold a password of yours.
No system is perfectly secure. If a breach affects your data and puts your rights at risk, we will tell you and notify UODO within the 72 hours the GDPR allows.
Your rights
Wherever you are, you can ask us to:
- Give you a copy of what we hold about you.
- Correct anything that is wrong.
- Delete your account and the data in it.
- Export your data in a portable, machine-readable form.
- Stop processing based on legitimate interests, or restrict processing while a dispute is resolved.
- Withdraw a consent you gave, such as marketing email.
Email [email protected] from the address on your account and we will answer within 30 days. There is no charge. We will not make you justify the request.
Deleting your account removes your personal data within 30 days, apart from records we are legally required to keep — invoices, and proof that you accepted this policy.
If you think we have handled your data wrongly, we would rather you told us first. But you have the right to complain to a supervisory authority regardless. Ours is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland — uodo.gov.pl. If you live elsewhere in the EEA, you may complain to your own national authority instead.
California residents
In the past twelve months we have collected the categories set out in the tables above: identifiers, commercial information, internet activity limited to your use of our own products, audio and text content you create, and inferences drawn only for search within your own data.
We have not sold or shared personal information, as the CCPA defines those terms, and we have no plans to. Because we do not, there is nothing to opt out of — but the rights to know, delete, correct and to be free from discrimination for exercising them all apply, and you exercise them at the same address: [email protected].
Children
Corlecti is not for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, write to [email protected] and we will delete it.
Changes to this policy
We will update the date at the top whenever this changes. If a change materially affects your rights — a new category of data, a new purpose, a new provider seeing your content — we will tell you by email or in the product before it takes effect, not after.
Contact
Privacy questions, data rights requests and anything else: [email protected]. Our terms of service are at corlecti.com/terms.