Effective: 2026-07-17
Privacy Policy
Coro is a public conversation square operated by Rodrigo Uroz, a natural person based in Argentina. This Policy explains what data we process, why we use it, who receives it, how long we keep it, and how you can exercise your rights. When you use Coro, your messages and the profile information you choose to publish may be seen by other people.
1. Controller and contact
Rodrigo Uroz is the controller of personal data processed by Coro. To exercise your rights or ask a privacy question, email [email protected]. Coro is subject to applicable Argentine law without limiting mandatory rights that may apply where you live.
2. Data we process
We do not require an identity document, private home address, phone number, or payment information to use the free version of Coro. Do not publish information you want to keep private.
- Identity and session: internal identifier, session cookie, creation and update dates, IP address, and user agent when recorded by the authentication system.
- Profile: display name, handle, languages you understand, reading language, and optional country.
- Content and context: messages, replies, quotes, relationships between messages, translations, and context summaries.
- Use and personalization: deliveries, impressions, reactions, engagement, preferences, blocks, mutes, and routing signals.
- Safety: classifications, reports, moderation decisions, review evidence, and administrative access records.
- Notifications: preferences plus the endpoint and keys of a push subscription when you choose to enable it.
- Analytics and operations: minimized product events, errors, metrics, technical logs, and model artifacts needed to operate and explain the service.
- Contact: the address, content, and metadata of emails you send to privacy or support.
3. How we use data
We use data to provide and secure Coro; maintain session and identity continuity; display, order, translate, and contextualize conversations; adapt what you see to your languages and relevance signals; deliver notifications you enable; prevent abuse; investigate reports; enforce the Rules; review appeals; measure reliability and use; comply with law; and defend claims.
4. AI and automated processing
Coro uses models and automated rules for language detection, safety classification, translation, semantic signatures and embeddings, context summaries, and routing voices that may be relevant to each person. These tools may reduce distribution, hold content for review, or prevent immediate delivery. If you believe a material action is wrong, request review at [email protected]. Coro does not guarantee that models are always accurate.
5. Public content
Your messages, display name, and handle are intended to be shared with other people. Distribution can vary with language, context, safety, and relevance; we do not promise that a message will reach a particular audience. Coro may include eligible Voice text in an external unattributed artifact without asking for new approval for each share. Removing product names, handles, and other identity details does not make the text anonymous: words or circumstances may identify the writer. Even if content leaves the active service or the official artifact is revoked, we cannot recall copies, screenshots, or caches retained by other people or platforms outside Coro.
6. Providers and international processing
Cloudflare provides hosting, Workers, D1, Durable Objects, Vectorize, Workers AI/AI Gateway, logs, web push, and email routing as configured for production. OpenAI provides models that Coro uses through Cloudflare AI Gateway for certain safety, language, translation, and context-summary tasks. PostHog Cloud US receives minimized product events sent by the Coro Worker. We do not send PostHog message or draft text, handles, translations, or context summaries.
Global operation may involve international processing. We use regional configuration, provider contractual commitments, and security measures where appropriate. We do not sell personal data or use it for behavioral advertising.
8. Retention
Deletion may require anonymizing or separating content from records that must legitimately remain. Backups and distributed systems may need a limited technical period to complete deletion.
- Public messages: until you request deletion or moderation removes them, subject to limited justified preservation for safety, claims, or law.
- Profile and anonymous identity: while active or until a verified deletion request.
- Detailed routing, delivery, and technical events: 90 days.
- Operational logs: 30 days.
- Reports, necessary moderation evidence, and audit records: up to 2 years when needed for safety, appeals, or claims.
- Push subscription: until disabled, invalidated, or identity deletion.
- PostHog Cloud US product events: 12 months.
- Support and privacy email: until the request closes and then up to 2 years when needed to evidence the response or defend a claim.
9. Security
We use access controls, environment separation, contract validation, minimized events, managed secrets, and audit records. No system is completely secure. If you find a problem, email [email protected] without including secrets or unnecessary third-party data.
10. Your rights
You may request access, correction, update, or deletion at [email protected]. We verify identity before disclosing or changing data. In Argentina, access requests are answered within 10 calendar days and correction, update, or deletion requests within 5 business days under applicable law. You may also complain to Argentina's Agency for Access to Public Information (AAIP). Mandatory additional local rights can be exercised through the same contact.
11. Adults only
Coro is only for people aged 18 or older. We do not knowingly offer the service to children. If you believe a minor provided data, email [email protected] so we can investigate.
12. Changes
We may update this Policy when Coro, its providers, or the law changes. We will publish the new date and provide reasonable notice of material changes. The Spanish version controls if it differs from the English translation.