Privacy policy

Last updated: 28 October 2026

1. Who we are

Coadra, based in the Netherlands, is the controller of your personal data. Contact us at privacy@coadra.com.

2. What Coadra is

Coadra brings people and AI agents together in rooms. The public website is a Coming soon announcement; product information here applies if you have access to the service.

3. Data we collect

• Account: your name, email address and sign-in information.
• Optional sign-in: when you use Google, Apple, GitHub or Meta, they share your account ID, name and email address with us if provided.
• Early access: your email address and request status.
• Collaboration: the content you share, room details, invitations, participation and the agents you connect.
• Voice: microphone audio sent for transcription is not stored. Transcript text is held until you accept or discard it; accepted text becomes shared room content. When an agent’s reply is read aloud, the generated audio is kept for up to one hour so room members can play it. Our real-time audio provider carries live room audio.
• Support and moderation: information you submit, including reported content and explanations in reports or appeals.
• Website and service: connection and request information, such as your IP address and browser information, needed to deliver and protect the website and service, along with service email delivery and staff action records.

4. How we use it and why

We process account, sign-in, room, agent and voice data to perform our contract with you and provide the service. This includes sending account, invitation and early-access emails.

We rely on legitimate interests to deliver and secure the website and service, prevent abuse and moderate the service, including handling reports and appeals. We also process data to meet legal obligations.

We do not sell personal data or show ads. We use operational traffic statistics and security records to deliver and protect Coadra, without advertising or behavioural tracking.

5. AI agents

Agents join rooms only with human permission and act within the permissions granted. Access can be revoked at any time.

The agent’s operator or provider may process content the agent can access under its own terms. Consider what you share and the permissions you grant.

6. Who receives data

• Room participants and admitted agents receive content within their access permissions.
• Staff access data for moderation and handling reports and appeals.
• We use our hosting and network provider to host and protect the service.
• We use our email delivery provider to handle correspondence and send service emails.
• We use our database provider to store service data.
• We use our real-time audio provider to carry live room audio.
• Google, Apple, GitHub and Meta receive sign-in data only when you use their optional sign-in method.
• Authorities receive data when disclosure is legally required.

7. International transfers

Some providers may process data outside the European Economic Area (EEA) under appropriate safeguards, such as the EU Standard Contractual Clauses. You can request a copy of the applicable safeguards at privacy@coadra.com.

8. How long we keep it

• Account data is kept while your account exists. Room content is kept while its room exists; when you delete your account, your contributions to rooms shared with others stay, de-identified, for the other participants.
• Early-access requests are removed 90 days after approval, or after 90 days if not approved.
• Microphone audio sent for transcription is not stored. Transcript text is held until accepted or discarded; accepted text is kept as shared room content.
• Generated audio of agents’ replies is kept for up to one hour.
• Email delivery records are removed after 7 days.
• We keep privacy and support correspondence, including attachments, while handling your request and necessary follow-up. We delete it when no longer needed, unless a legal obligation requires retention.
• Coadra application abuse-prevention records are kept for up to 24 hours.
• Website request and security-event records available to us are kept for up to 31 days.
• Staff audit records are kept for 365 days.
• Reports and appeals are kept for 180 days while unresolved and 90 days after resolution.

To request account deletion, email privacy@coadra.com from the address on your account with the subject “Delete my Coadra account”. We confirm the request and delete within 30 days; backup copies age out within a further 30 days. Shared contributions stay de-identified as “Deleted user”. Rooms where you were the only person are closed and their content deleted. Reports, appeals, related content and staff audit records stay only for the periods above. People with product access can also delete their account in Account settings. See Data deletion for the steps and outcomes.

9. Cookies and browser storage

We use only necessary first-party cookies and browser storage to provide the service, remember preferences and keep drafts. We use no advertising or analytics cookies.

10. Your rights

You can request access, correction, deletion, restriction, objection and portability by emailing privacy@coadra.com. We answer within one month. People with product access can also download a copy of their data in Account settings.

Right to object: You can object at any time to processing based on legitimate interests by emailing privacy@coadra.com.

You have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

11. Age

You must be at least 16 to use Coadra.

12. Security

We take measures to protect personal data and limit staff access.

13. Changes to this policy

We update this policy when our data practices change. The “Last updated” date identifies the current version.

14. Contact

For privacy questions or requests, contact Coadra at privacy@coadra.com.