Koora Care Pty Ltd (Koora, we, us, our) is an Australian company bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This page covers how we handle information collected via the pre-launch waitlist on this website. When Koora launches publicly, a fuller privacy policy will replace this page.
What we collect
When you join the waitlist we collect: your email address, first name, and (for providers) your business name, the Australian states you operate in, and your approximate worker count. We also collect technical details like your IP address, user-agent, and any UTM parameters on the link you arrived from, so we can tell which campaign brought you to us.
Why we collect it
We use this information to:
- Email you when Koora launches.
- Follow up about your interest before launch (founder reply, etc.).
- Understand which marketing channels are reaching the right people.
We don't sell your information or share it for marketing.
Where it's stored
Waitlist signups are stored in our Australian Supabase Postgres database (AWS Sydney region).
Service providers we share waitlist information with
To send your confirmation email and let our team know you signed up, we share waitlist information with the following service providers. Some are located overseas; under Australian Privacy Principle 8 we remain accountable for how they handle your information, and we have data processing agreements in place with each.
- Supabase Inc. (data hosted in AWS Sydney, Australia): the Postgres database where waitlist signups are stored. Supabase operates the database service; data sits in the AWS ap-southeast-2 region.
- Vercel Inc. (United States): hosts the website and runs the API route that processes your signup. Vercel sees the request payload in transit but does not store waitlist records.
- Resend Inc. (United States): sends your confirmation email and any future launch announcement. We share your email address, first name, and (for providers) business name.
- Slack Technologies LLC (United States): notifies our team internally when you sign up. We share the same fields we store (email, name, business, states, worker count, UTM source).
- Lightfield (United States): our CRM, where we track provider waitlist signups and follow-up status. We share the same provider fields. Workers don't flow through Lightfield.
- PostHog Inc. (United States and EU): product analytics and feature flag evaluation. We share anonymous page views, click events, and (post-signup) the audience type plus campaign attribution as a person property.
- Lemlist SAS (France and United States): sends our cold outreach emails to prospective providers. If you received an email from us via Lemlist, we share your business name, first name, and email address with them to deliver the message and attribute campaign clicks. Lemlist is only used for outbound prospect outreach; it does not process signups from this website.
By submitting the waitlist form you consent to your information being disclosed to these overseas service providers, in jurisdictions where Australian Privacy Act protections may not apply.
Retention
We keep your waitlist record until you ask us to delete it, or until 12 months after launch, whichever comes first. Every confirmation email contains a one-click unsubscribe link; using it marks your record as unsubscribed (you won't hear from us again).
Your rights
Under the Australian Privacy Act you have the right to:
- Access the personal information we hold about you
- Ask us to correct anything inaccurate or out of date
- Ask us to delete it
- Make a privacy complaint
To exercise any of these rights, email us at privacy@koora.care. We respond within 30 days.
Complaints
If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au/privacy/privacy-complaints.
Contact
For any privacy question, email privacy@koora.care.