Privacy Policy

1. About Us

Kurrel is a bookmarking engine powered by AI, designed to help you save, organize, and retrieve content from across the web. Kurrel is developed and operated by Kurrel Systems ([REVIEW: legal entity name]).

Contact: raphaelsocrates@gmail.com
[REVIEW: consider dedicated privacy email]

2. Data We Collect

Account Information:

• Email address, name, and avatar (via Google OAuth authentication)
• Account plan (Free or Pro)

Bookmark and Content Data:

• URLs you bookmark
• Page content (text, DOM snapshots, raw HTML)
• Your notes and tags attached to bookmarks
• Platform metadata (Instagram, LinkedIn, Reddit, Twitter, Threads, or generic web)

AI-Derived Data:

• AI-generated descriptions and summaries
• Automatic tags assigned by our AI model
• Vector embeddings for semantic search

Usage and Technical Data:

• Search queries
• API calls and rate limit data
• Browser extension activity (if installed)
• IP address, user-agent, access logs

3. How We Use Your Data

• Core Service: to store, organize, and retrieve your bookmarks
• AI Enrichment: to automatically tag, summarize, and generate embeddings
• Search: to enable hybrid (full-text + semantic) search across your library
• Account Management: authentication, authorization, and preference management
• Service Improvement: usage analytics and error monitoring [REVIEW: anonymized / pseudonymized]

4. Third Parties and Data Sharing

• Google: OAuth provider (authentication only; no bookmark data shared)
• AI Services: Page content and metadata are sent to our backend's AI model for enrichment
• Infrastructure: Hosting on VPS and Cloudflare CDN [REVIEW: vendor names / details]

[REVIEW: Do we use any third-party analytics, error tracking, or data processors? List here.]

5. Data Retention and Deletion

Bookmarks: Your bookmarks are retained as long as your account is active. When you delete a bookmark, it is soft-deleted (hidden from view but retained in our database for data recovery purposes).
[REVIEW: exact retention period for soft-deleted records]

Account Deletion: If you delete your account, all associated bookmarks, notes, and account data will be [REVIEW: permanently deleted / anonymized / retained for X days].

6. Your Privacy Rights

• Access: You can request a copy of all personal data we hold about you
• Correction: You can update or correct your account information
• Deletion: You can request deletion of your account and associated data
• Data Portability: [REVIEW: if applicable]
• Objection: [REVIEW: right to object to processing]

To exercise any of these rights, contact us at raphaelsocrates@gmail.com.

7. Security

We use industry-standard security measures to protect your data:

• HTTPS encryption for all data in transit
• Bearer token authentication (access tokens expire in 15 minutes; refresh tokens in 30 days)
• Secure storage of sensitive data [REVIEW: encryption at rest details]

No guarantee of absolute security. While we implement robust measures, no system is completely immune to attacks. Please do not store highly sensitive information as bookmark content.

8. Age and Eligibility

Kurrel is intended for users aged 13 or older [REVIEW: jurisdiction-specific age]. If you are under this age, please do not use this service without parental consent.

9. Beta / Early Access Disclaimer

Kurrel is in beta. Features, data structures, and policies may change without notice. We make no guarantees of uptime, data persistence, or service continuity. You use the service at your own risk.

10. Regional Compliance

[REVIEW: Add LGPD (Brazil), GDPR (EU), CCPA (California), or other applicable legal frameworks based on your target users and operations jurisdiction.]

11. Changes to This Policy

We may update this privacy policy at any time. Continued use of the service after changes constitutes your acceptance of the updated policy.

12. Contact

Questions or concerns about this privacy policy? Contact us at raphaelsocrates@gmail.com.