Privacy Policy
Last updated: 20 September 2026
Where we are today: registering interest
Imora is in early access. It is not open to the public, we do not take payments, and the project is not yet incorporated as a company. Right now this site does one thing with personal data: it lets you register your interest. This section describes that. The rest of this policy describes how the product handles data for invited testers, and how it will work for everyone once accounts open.
- What we collect when you register interest: your email address, your name if you choose to give it, the plan you are interested in, and, on the teams form, your company, team size and any message you write. Nothing else.
- Why: only to tell you when a place opens and to understand which plans people want. We rely on your consent, which you give by submitting the form.
- Where it is kept: in a contact list held by our email provider, Resend, which also sends the confirmation email. Resend is based in the United States and processes this data under its data processing terms. We do not sell it, share it or use it for advertising.
- How long: until you ask us to remove it, or for 12 months after the product opens, whichever comes first.
- Removing it: email hello@imora.ai from the address you registered and we will delete your details. You can also use the unsubscribe link in any email we send.
- Abuse protection: the form counts submissions per IP address for up to an hour, in memory only, to stop spam. That count is not stored.
- Analytics: off unless you choose Accept on the cookie banner. See the cookies entry below.
Until a company is registered, the Imora project team in the United Kingdom is responsible for this data and can be reached at hello@imora.ai. When the company is formed we will publish its name, number and registered address here and tell everyone on the list.
1. Who we are
Imora (“we”, “us”, “our”) operates the Imora platform at imora.ai and related services. We are the data controller for personal data processed through our platform. Imora is in early access and is not yet incorporated; see the section above for what that means today. For any privacy-related queries, contact us at hello@imora.ai.
2. What data we collect
We collect the following categories of personal data:
- Account data: name, email address, password (hashed), and billing information when you create an account or subscribe to a plan.
- Creator content: text, documents, and other materials you provide to build your AI twin. This may include professional experience, opinions, writing samples, and uploaded files.
- Conversation data: messages exchanged between users and AI twins, including metadata such as timestamps and token counts.
- Usage data: pages visited, features used, device information, IP address, browser type, and referring URLs.
- Payment data: processed securely by Stripe. We do not store full card numbers. We retain transaction IDs, plan details, and billing history.
3. How we use your data
- To provide, maintain, and improve the Imora platform and services.
- To build and operate AI twins based on creator-provided content.
- To process payments and manage subscriptions.
- To send transactional emails (account confirmations, billing receipts, security alerts).
- To monitor platform health, prevent abuse, and enforce our Terms of Service.
- To understand how the site and product are used, through product analytics that run only with your consent.
4. How AI twins use your data
When a creator builds a twin, the content they provide (Imprint answers, calibration answers, corrections, messages to their own twins and documents they mark as their own) is stored in Imora's systems as a structured reasoning graph: evidence, the principles derived from it, and the links between them. At runtime, Imora selects the parts of that graph and of the creator's documents that are relevant to a question, assembles them into a request context together with the twin's configuration, and sends that request context to our AI provider (Anthropic) to generate the response. The graph itself is not shared with the provider; only the context needed for each answer is.
- Creator content is used solely to build and operate the creator's own reasoning graph and twin(s). It is not used to train any base AI model, and messages from people talking to a twin are never used to change how the creator's twins reason.
- Embeddings used to search a creator's content are stored within Imora's own infrastructure.
- Conversation data between users and twins is logged for quality calibration and analytics. Creators can access conversations with their own twins.
- We do not sell, share, or use creator content or conversation data for advertising purposes.
- Our AI provider (Anthropic) processes data under a data processing agreement and does not use API inputs to train their models.
5. Legal basis for processing
We process personal data on the following grounds:
- Contract: processing necessary to provide services you have requested (account management, twin operation, billing).
- Legitimate interest: platform security, fraud prevention, and product improvement.
- Consent: for analytics cookies and for optional marketing communications. You may withdraw consent at any time.
- Legal obligation: where we are required to retain or disclose data by law.
6. Data sharing and sub-processors
We do not sell your personal data. We share data only with the following sub-processors:
- Anthropic: AI responses. Receives the context needed to generate each twin answer, under a data processing agreement.
- PostHog (EU): product analytics, only with your consent.
- Resend: transactional email, such as account confirmations and usage notices.
- Stripe: payments and subscriptions.
- A UK/EU hosting provider: the servers that run Imora and store its database, hosted in Europe.
- Law enforcement: where required by law, court order, or to protect our legal rights.
Voice and meeting features are not available today. If you enable voice or meetings in future, they would involve additional providers (such as ElevenLabs or Recall), and we will update this list first.
7. Data retention
- Account data is retained for the duration of your account and for up to 12 months after deletion, for legal and compliance purposes.
- Creator content is deleted when a twin is permanently deleted by the creator, or within 30 days of account closure.
- Conversation logs are retained for up to 24 months for calibration and analytics, then anonymised or deleted.
- Payment records are retained as required by applicable tax and accounting regulations (typically 6 years).
8. Data security
Our servers are hosted in Europe, and data is encrypted in transit and at rest. Accounts are protected by hashed passwords, optional two-factor authentication, rotating sessions and the ability to sign out everywhere. Access to production systems is restricted to the people who need it.
9. Your rights
Under applicable data protection laws (including UK GDPR), you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (right to be forgotten), subject to legal retention requirements.
- Restrict processing in certain circumstances.
- Port your data to another service in a structured, machine-readable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at hello@imora.ai. We will respond within 30 days.
10. International transfers
Our own servers are in Europe. Some sub-processors, including our AI provider, may process data in the United States. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms.
11. Children
Imora is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that a user is under 18, we will promptly delete their account and data.
12. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our platform. Continued use of the service after changes constitutes acceptance of the updated policy.
13. Contact
For privacy-related queries, requests, or complaints, contact us at:
hello@imora.ai
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.