Terms of Service

Korely-specific clarification

Your Content Is Private to Your Account

Notwithstanding the broad license language above (which is industry-standard boilerplate), Korely does NOT publish your content publicly, does NOT share it with other Korely users, and does NOT use it for advertising or marketing. The license we require is solely for the technical operation of the service: to store, transcribe, process via AI, build your personal knowledge graph, and serve content back to you.

The "publicly display" and "translate" rights in the license are technical necessities (e.g., to display your own content back to you in a translated UI) and do NOT mean Korely will publish your content publicly. See our Privacy Policy for the exhaustive list of how we use your content.

Korely-specific

AI Processing of User Content

1. Korely uses third-party AI providers ("AI Providers"), primarily Google Gemini (Google LLC) for large-language-model tasks and Deepgram, Inc. for real-time speech-to-text. These providers process User-submitted content for the purposes of audio transcription, summarization, semantic search, entity extraction, knowledge graph construction, and the Gordon AI assistant feature.
2. By using Korely, Users acknowledge and agree that:
   1. Audio captured via Korely's in-app live recording feature is streamed to Deepgram, Inc. via Deepgram's EU data-residency endpoint (api.eu.deepgram.com) acting as a sub-processor under Article 28 GDPR;
   2. Uploaded audio and video files, transcripts, notes, search queries, and other content Users submit to Korely are sent to Google Gemini (operated by Google LLC and, for European Union customers, Google Ireland Limited) acting as a sub-processor under Article 28 GDPR;
   3. Pursuant to Google's API Terms of Service applicable to Korely's paid Gemini API usage, Google does NOT use User content submitted via the Gemini API to train its foundation models;
   4. The AI Provider may retain submitted content in transient logs for a limited period (typically 30 days) for abuse detection, service quality, and security purposes per the AI Provider's published policies;
   5. Korely retains all processed content (including AI-generated transcripts, summaries, embeddings, and knowledge graph entities) within its own infrastructure (hosted on Render and Cloudflare R2 in the European Union) for the duration of the User's account, plus any retention period required by applicable law;
   6. AI-generated outputs may contain inaccuracies, errors, hallucinations, or unintended omissions. Users are solely responsible for verifying the accuracy of AI outputs before relying on them for any decision, legal advice, medical advice, financial advice, or other consequential use. Korely makes no warranty as to the accuracy, completeness, or reliability of AI outputs.
3. Automated decision-making disclosure (Article 22 GDPR): Korely uses automated AI processing for content organization, search ranking, billing-tier model routing, and similar operational functions. These automated processes do NOT produce legal effects concerning Users nor do they significantly affect Users in a way that would invoke Article 22 GDPR rights against solely automated decision-making. Users retain at all times the right to manually edit, correct, or delete any AI-generated content within their account.
4. Model Context Protocol (MCP) integrations: Korely exposes a server-side MCP interface that allows Users to connect third-party MCP clients (including but not limited to Claude, Cursor, ChatGPT, and other MCP-compatible tools) to their Korely account. When a User connects a third-party MCP client:
   1. The third-party MCP client becomes an independent data CONTROLLER for any data it retrieves via the MCP interface;
   2. Korely is not responsible for how third-party MCP clients store, process, share, or display data retrieved from the User's Korely account;
   3. Users are responsible for understanding the privacy and data handling policies of any third-party MCP client they connect;
   4. Users may revoke MCP access at any time via Korely's settings, which will immediately invalidate any associated authentication tokens.
5. The complete and current list of AI Providers and other sub-processors used by Korely is published at korely.ai/subprocessors.html and is incorporated by reference into these Terms.

Korely-specific

AI System Transparency — EU AI Act Article 50

This section implements the transparency obligations set out in Article 50 of Regulation (EU) 2024/1689 ("EU AI Act"), applicable from 2 August 2026 to AI systems intended to interact with natural persons.

1. You are interacting with AI. Korely's chat assistant ("Gordon AI" / "Ask Korely AI"), transcription, summarisation, entity extraction, semantic search, and "related items" features are powered by artificial intelligence systems, primarily large language models operated by Google (Gemini family) and a real-time speech-to-text model operated by Deepgram, Inc. for live audio transcription. Every interaction with these features is an interaction with an AI system, not a human operator.
2. Visible disclosure in the user interface. Korely labels AI-generated outputs and AI-driven interactions in the UI with text such as "Korely AI", "Ask Korely AI", model identifiers, and similar markers, in compliance with Article 50(1) of the EU AI Act. If you cannot determine whether a particular output was generated by AI, treat it as AI-generated and verify it before use.
3. Limitations and accuracy. AI outputs may be inaccurate, incomplete, biased, fabricated ("hallucinated"), or otherwise unsuitable for your specific use case. Korely makes no warranty as to the accuracy, completeness, fitness for purpose, or reliability of AI outputs. You are solely responsible for verifying any AI output before relying on it for any decision, including but not limited to legal, medical, financial, regulatory, professional, or operational decisions. Korely is not a substitute for qualified professional advice.
4. Human oversight. You retain full editorial control over your Korely account at all times. You may manually edit, override, correct, supplement, or delete any AI-generated transcript, summary, entity, search result, or chat response. Korely does not enforce AI outputs against your wishes; the User remains the final decision-maker on every piece of content stored in their account.
5. Synthetic content marking. Where Korely generates synthetic text or audio content that could be mistaken for human-generated content (Article 50(2) EU AI Act), such content is labelled in the UI as AI-generated. You agree not to remove, obscure, or misrepresent such labels when sharing or republishing AI-generated outputs produced by Korely.
6. No emotion recognition, no biometric categorisation, no real-time identification. Korely does NOT operate AI systems for: real-time biometric identification of natural persons; biometric categorisation of natural persons; emotion recognition in workplaces or educational institutions; social scoring; or any other practice prohibited under Article 5 of the EU AI Act. The voice biometric data processed by Korely (audio recordings) is used solely for transcription and speaker diarisation labelling within the User's own account, never for identification.
7. Risk classification. Korely's AI features are classified as limited-risk AI systems under the EU AI Act framework. They are not high-risk AI systems within the meaning of Annex III of Regulation (EU) 2024/1689. Should Korely's feature scope evolve toward high-risk use cases (for example, employment screening, education evaluation, or law enforcement support), Korely will update these Terms and implement the additional obligations required by the AI Act before such features go live.
8. Reporting concerns. If you believe an AI output from Korely caused you harm, contains illegal content, or violates the EU AI Act transparency or prohibition rules, contact privacy@korely.ai. Korely will investigate and respond within the applicable legal deadlines, and where appropriate, notify the competent national authority designated under the AI Act.

Korely-specific

Knowledge Graph and Data Subject Rights

1. Korely automatically extracts entities (including but not limited to persons, organizations, topics, locations, projects, and concepts) from User-submitted content and constructs a knowledge graph that links these entities across notes, meetings, recordings, transcripts, and AI conversations. This graph powers Korely's retrieval features, "related items" suggestions, and the Gordon AI assistant.
2. Implications for third parties mentioned in User content:
   1. When a User records a meeting, writes a note, uploads a document, or submits any other content that mentions a third party (for example: a colleague, client, family member, or any other identified or identifiable natural person), Korely processes that person's name, role, relationships, and the context of the mention as part of the knowledge graph;
   2. The User acts as the data CONTROLLER under GDPR for any personal data about third parties they upload to Korely, and is responsible for ensuring they have a lawful basis under Article 6 GDPR (and, where applicable, Article 9 GDPR for special categories of data) to process such personal data through Korely;
   3. Korely acts as the data PROCESSOR under Article 28 GDPR with respect to such third-party personal data and processes it solely on the documented instructions of the User-controller, namely to provide the Korely service.
3. Data subject rights and access requests:
   1. Any natural person, including third parties mentioned in a User's content, may contact Korely at privacy@korely.ai to exercise their rights under Articles 15 to 22 GDPR (right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object) or equivalent rights under other applicable data protection laws;
   2. Where the requester is a User, Korely will respond directly within the legally mandated deadline (typically 30 days under Article 12(3) GDPR);
   3. Where the requester is a third party mentioned in another User's content, Korely will route the request to the relevant User-controller and assist them in fulfilling the request, in accordance with Korely's role as processor;
   4. Korely reserves the right to verify the identity of the requester before disclosing or modifying any personal data;
   5. Where Korely receives a request that it cannot fulfill without User cooperation (because the User is the controller), Korely will provide the User with a reasonable deadline to respond. If the User fails to respond, Korely reserves the right to take appropriate protective action (including but not limited to restricting processing of the disputed personal data) to comply with applicable law.
4. Account closure and erasure: when a User closes their Korely account, Korely will, within 30 days (subject to legal retention obligations such as those imposed by tax, accounting, and anti-money-laundering laws):
   1. Delete all content owned by the User, including notes, recordings, transcripts, knowledge graph entities, and AI conversation history;
   2. Trigger backend deletion cascades that remove the User's content from active storage. Backups stored on Cloudflare R2 are subject to a rolling retention window and will be overwritten by subsequent backup cycles;
   3. Where required, anonymize or pseudonymize any data that must be retained for legal reasons (e.g. invoice records, payment history) so that it can no longer be linked to an identified natural person.
5. Data Protection Authority: Users and other data subjects have the right to lodge a complaint with a competent supervisory authority. For the European Union, the competent authority for Korely (whose data controller is established in Italy) is the Italian Garante per la protezione dei dati personali (https://www.garanteprivacy.it/).

Korely-specific

Dispute Resolution — EU Consumers (ODR)

If you reside in a European Union Member State and qualify as a consumer under EU law, you have the right to resolve any dispute arising from these Terms of Service through the European Commission's Online Dispute Resolution (ODR) platform, established by Regulation (EU) 524/2013:

https://ec.europa.eu/consumers/odr/

• Korely will receive ODR notifications at privacy@korely.ai and respond within the timelines set by Regulation (EU) 524/2013.
• Use of the ODR platform is voluntary. Nothing in this clause limits your right to bring proceedings before any court of competent jurisdiction in your Member State of residence under Article 18 of Regulation (EU) 1215/2012.
• This clause applies only to consumers. Business customers (B2B) are bound by the Governing Law and exclusive jurisdiction clause above.

For non-EU consumers, the Governing Law section above applies, and any dispute may be brought before the competent court in your jurisdiction of residence to the extent permitted by mandatory local consumer protection law.