Privacy policy
Last updated 27 October 2026. Aura is a product of Kora, Lusaka, Zambia. This policy explains what information we collect, why we use it, and how to ask us to delete it.
Who this covers
It covers people who open an Aura workspace, people they invite, and people those businesses message or who message them on WhatsApp, SMS, or email. Kora decides how workspace account data is used. A business that uploads its own customers decides why those customers are contacted, and Aura processes that contact data on the business’s instructions.
Information we collect
From a workspace user:
- Name, email address, and password. Sign-in can also use Google.
- Workspace name, role, and invitation details.
- Billing records: plan, amount in Zambian kwacha, payment status, and a payment reference from DPO. Card and mobile-money details are entered on DPO’s page. Aura does not store the card number.
From contacts a business adds, and from messages:
- Name, phone number, email address, and WhatsApp number.
- Whether that person opted in or out on SMS, email, or WhatsApp, with the time and the source.
- Message text the business sends, template names, and delivery status.
- Inbound WhatsApp messages, the sender’s phone number, and the profile name WhatsApp includes, so Aura can reply and can record STOP and START.
Why we use it
- To run the workspace, sign people in, and take payment for a plan.
- To send WhatsApp, SMS, and email only where the contact has opted in on that channel, and to show the business whether a message was sent or failed.
- To reply to an inbound WhatsApp message. A reply may be drafted by an AI model using the message text and material the business stored in Aura. A person on the business’s team can also reply.
- To honour STOP, START, and unsubscribe, and to limit abuse.
We do not sell contact lists.
Who else processes it
- Meta, to send and receive WhatsApp messages through the WhatsApp Business Platform.
- Zamtel, to deliver SMS.
- Resend, to deliver email.
- Anthropic, when Aura generates a reply or a draft. We send the text needed for that task.
- DPO, to take payment.
- Supabase, which hosts the workspace database and sign-in, through Lovable Cloud.
How to request deletion
Email info@koratechnical.com from the workspace address, or with the phone number you want removed. Say whether you want the workspace closed or a contact deleted. We delete or anonymize the personal information we hold for that request, except records we have to keep for tax, fraud, or a legal claim. A workspace admin can also remove a contact inside Aura. On WhatsApp, reply STOP to opt out of campaign messages.
How long we keep it
We keep workspace, contact, and message records while the workspace is open. After you ask us to delete them, or after the workspace is closed, we delete them except where Zambian law requires a record to be kept, such as a payment record.
Law and contact
Kora handles this information under Zambia’s Data Protection Act, 2021. A business messaging people outside Zambia is also responsible for the law that applies to those people. Questions and deletion requests go to info@koratechnical.com. Kora, Lusaka, Zambia.