Privacy Notice

This is a translation for convenience. The Spanish version (/terminos, /privacidad) is the legally binding one and prevails in case of any difference.

Who is responsible for your data

Kortu (kortu.ai) is responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (published on March 20, 2025). Contact for any privacy matter: soporte@kortu.ai.

What data we use

• Your account: name, email address and password (stored encrypted; nobody can read it). If you sign in with Google, we receive only your name, your email and an identifier of your Google account; not your password or anything else from your account.
• How you got here and from where: your IP address, and the approximate country and internet provider derived from it (we calculate this on our server, without sending your IP to anyone), your browser and device, your browser language, and the page or campaign that brought you (for example, an ad or a link on social networks).
• Your content: the links you process, the files you upload (videos, photos, audio), the texts and instructions you write, the transcripts and what is created with them. Your content may include the image or voice of other people; see "People who appear in your content".
• How you use Kortu: ratings, downloads, copied titles, the adjustments you make to your clips, suggestions you send us and the history of your jobs.
• Your plan: the status of your subscription, your payments and your credits. Your card details are received and stored by the payment processor; Kortu never sees them.
• Your permissions: what you accepted (terms, news, voice, AI program, your declaration of rights over the videos you link to), with the date, the version of the text, your IP and your browser, as proof of your consent.
• Your social networks (when the publishing feature exists): the name and identifier of the accounts you connect, the permissions you give us and the data of your posts made from Kortu.

Sensitive personal data: your voice and your face

If you use AI Voice, we store the recording of your voice and a copy made with AI. Your voice can identify you, so we treat it as sensitive data. The same applies to photos or videos of your face that you use so the AI can create content with you. Therefore:

• We only use them with your express, written consent: a checkbox that you check yourself (it never comes pre-checked) and, for voice, a permission sentence that you read aloud. We keep that permission with its date and version.
• We use them only for the purpose you accepted: creating your voice or your content, for your account only. No other user can use them.
• Using them to train Kortu's AI requires another, separate permission (see "Program to improve Kortu's AI").
• We do not use your voice or your face to identify you, verify your identity or for anything other than the above.
• Where your voice is processed: to create each narration with your voice, we send your recording and the text to be narrated to an artificial intelligence provider located in the United States. That provider uses it only to generate that audio, on Kortu's behalf; we ask it to delete the result within 1 hour at most and not to keep the history of the request. The original recording stays stored at Kortu. By giving your voice permission you also accept this transfer; if you do not accept it, we cannot create your voice.

We do not ask for other sensitive data (health, religion, political opinions, ethnic origin, sex life). Please do not include it in your texts or files if it is not necessary.

What we use it for

Necessary purposes (without them we cannot provide the service):

• Creating and protecting your account, confirming your email and preventing abuse (for example, fake accounts, bots or many accounts created from the same connection to use the free videos).
• Processing your content with AI to give you what you request (clips, captions, voice, videos, images), showing it to you and notifying you by email when it is ready.
• Publishing on your social networks what you tell us, when you connect your accounts.
• Charging your plan, managing your credits and handling refunds.
• Giving you support, fixing failures and answering your messages.
• Improving how Kortu works with usage data (your adjustments, ratings and transcripts), without using your voice, photo or video files to train models.
• Complying with the law, responding to authorities and defending our rights.

Voluntary purposes (you can refuse or change your mind and the service stays the same):

• Sending you Kortu news, tips and offers, only if you checked the box. You can unsubscribe at any time from the email or by writing to soporte@kortu.ai.
• Measuring which campaigns and channels bring us users and producing aggregated statistics (without identifying you). If you do not want us to use your origin data for this, write to us at soporte@kortu.ai.
• Measuring the results of our ads on Meta (Facebook and Instagram), TikTok and Google with their measurement tools (pixels), as we explain in "Cookies". Only if you choose "Accept" in the cookie notice.
• Improving Kortu and its AI models with anonymous data about how the service is used (which options you choose, which clips you download, edit or discard, times, failures and ratings). Before using it, we remove anything that could identify you and combine it with that of many users; it is no longer personal data. It does not include your voice recordings, photos or videos (that is what the program below is for).
• Training and improving Kortu's AI with the files you uploaded (voice, photos or videos), only if you join the program below.

Program to improve Kortu's AI (optional)

If you accept, we may use your voice recordings, photos or videos to train Kortu's AI models: for example, to create Kortu's own voices that blend features of many voices, or to teach the AI to cut, frame and edit better.

• It is voluntary and separate: we ask you separately from these terms (once in your dashboard, when you record your voice or when you upload a file) and it only counts if you say yes. In My account you can choose by type of file and change it whenever you want. It is not a condition for using Kortu.
• What is included: only files you uploaded after accepting, or earlier ones if you expressly authorize us. Never videos processed from YouTube, Kick or other platform links, nor data from your Google account or your social networks.
• How we protect it: we copy the files to a separate space, with a random code instead of your name or email, and we remove hidden data from them (such as the location of photos). They are only used by the team and the providers who work on it, under confidentiality. We do not sell or share them.
• Blended voices: a Kortu voice is made with many voices so that no person can be recognized. We never present it as your voice or with your name, and we never use it to imitate or impersonate anyone.
• Withdrawing your permission: you can do it whenever you want from your account or by writing to soporte@kortu.ai. We stop using your files in new training and delete them from the training data within 30 days at most (and from backups within the period indicated below). An already trained model cannot be "untrained": it may continue to be used, but it does not contain your files or make it possible to recognize you. If we detect that a model reproduces your voice or your face in a recognizable way, we stop using it.
• Other people: if another person appears or is heard in your file, you may only include it if they gave you their written permission for this use.

People who appear in your content

The videos, photos and audio you process may include the image or voice of other people. This happens especially in AI Studio, where we process with AI the video you link to (which may belong to another person) to translate it, dub it and subtitle it. We process this data only to provide the service you request (for example, detecting who is speaking to frame the clip) and we do not use it to identify anyone. You are responsible for having their permission to use and publish that content. If you are a person who appears in content processed in Kortu and you want to exercise your rights, write to us at soporte@kortu.ai.

Who we share it with

We do not sell your data. We only share it with providers that help us provide the service and that may only use it for that, some of them outside Mexico (for example, in the United States):

• Stripe (and Mercado Pago when available): processing payments. They store your card details.
• Google: signing in with your Google account, if you choose to.
• Cloud providers: hosting the website, the database and your files, and providing computing power to process videos.
• Email delivery providers: sending you your account emails and, if you accepted, news.
• Artificial intelligence providers located in the United States and other countries: transcribing audio, analyzing and translating texts, writing scripts, and creating or modifying images, videos, voices, sound or music (for example, in Clips, AI Voice, the Explainer / AI Creator and AI Studio). What we send them: only what the feature needs: the audio or video, the topic, script or texts you write, the images being generated, the photos or videos you upload and, if you use your voice, your voice recording (sensitive data, see above). Some models are processed by the company that created them, also outside Mexico. How long they keep it: we ask them to delete what they process as soon as the request ends or, when that cannot be chosen, within the shortest period they offer (for example, 1 hour at most for what is generated with your voice); we download the result immediately and keep our copy at Kortu.
• Social networks you connect (YouTube, TikTok, Instagram, Facebook or others) and, if we use one, an intermediary publishing service: receiving what you decide to publish.

In addition, only if you choose "Accept" in the cookie notice, Meta (Facebook and Instagram), TikTok and Google (Google Ads) receive data about your visit to measure our ads (we explain it in "Cookies"). They also use it for their own purposes, so this is a transfer to third parties, outside Mexico, and we only do it with your consent.

These providers act as processors: they process your data only on Kortu's behalf and to provide you the service, not for their own purposes, except that some may use anonymous data, which no longer identifies you, to improve their services and models according to their terms. Several are in the United States and other countries, so your data leaves Mexico; we ask them to protect it at least as this notice says. Part of the work runs on Kortu's own equipment. We may add or change providers within these categories without changing this notice; if you want to know which ones we use today for a feature, write to us at soporte@kortu.ai. Sending data to these processors does not require a separate permission because it is necessary to provide you the service, except your voice and your face, which we only send with the permission you give when using them. We may also share data when a competent authority orders it.

Cookies

Cookies are small files that your browser stores. We use Kortu's own cookies and, to measure our ads, cookies from Meta, TikTok and Google.

Kortu's own cookies:

• krea_session (necessary, 90 days): keeps your session open. It stores a random identifier, not your data.
• krea_google (necessary, 10 minutes): protects access when you sign in with Google.
• krea_origen (measurement, 90 days): remembers which page or campaign brought you the first time, to know which channels work. It is not shared with anyone.
• krea_cookies (necessary, 1 year): remembers whether you accepted or rejected the ad measurement cookies. Without your acceptance we do not load the Meta, TikTok and Google cookies.

Meta, TikTok and Google cookies (ad measurement):

• _fbp (Meta Pixel, from Meta Platforms, 90 days), _ttp (TikTok Pixel, from TikTok, up to 13 months) and _gcl_au (Google Ads tag, from Google LLC, 90 days). If you arrive from an ad, other similar ones may also be stored, such as _fbc, _ttclid or _gcl_aw (Google, 90 days: stores the identifier of the click on the Google ad).
• What for: to know how many people arrive through our ads, how many sign up and how many subscribe, and in this way show our ads to people who may be interested.
• What they receive: the page you visit, whether you completed your sign-up or subscribed (with the plan amount in dollars), the cookie identifier, your IP address and data about your browser and device. When you subscribe, we also send Google an identifier of the purchase (that of the payment session) so it does not count it twice. We do not send them your email, your name, your phone number or your content. If you have a session open on Facebook, Instagram, TikTok or a Google account in that browser, those companies may link the visit to your account.
• Who processes them: Meta, TikTok and Google, outside Mexico, according to their own policies: Meta privacy policy, TikTok privacy policy and Google privacy policy (and how Google uses data from sites that use its services). It is a voluntary transfer of data to third parties: you do not need it to use Kortu.
• They are only loaded on Kortu's public pages (home, plans, legal pages and the dashboard entry), never on your videos, clips, voices or the administration pages.

How to accept or refuse: we do not load the Meta, TikTok and Google cookies until you accept them.

• If you do not have an account or have not signed in: we ask you with the notice that appears at the bottom of the screen; if you choose "Reject" or do not choose anything, they are not loaded.
• If you have an account: by accepting the Terms and this Notice (when you create your account, when you sign in with Google or when we ask you to accept a new version) you also accept these measurement cookies, and that is why we no longer show you the cookie notice while your session is open.
• You can withdraw them at any time with the "Cookies" link at the bottom of each page: when you reject them, we delete their cookies and stop loading them. Withdrawing them does not affect your account or anything in the service.

You can also block or delete any cookie from your browser; if you block krea_session you will not be able to sign in to your account.

Visit statistics

To know how many people visit Kortu and where they come from, we record each page viewed without using cookies: the page, the site or campaign you come from, the type of device (phone or computer) and the browser language. To avoid counting the same person twice in one day we use a code calculated from your IP and your browser that changes every day; we do not store your IP in these statistics, we do not follow you from one day to the next and we do not share them with anyone.

Data from Google and your social networks

What we receive from your Google account (name, email and identifier) is used only to create your account and let you sign in. The data we receive from your social networks is used only to publish what you ask us to and to show you results. We do not sell it, we do not use it for ads, we do not use it to train AI models and we do not share it, in accordance with the Google API Services User Data Policy (including its Limited Use requirements) and the rules of each platform.

How long we keep it

We keep each thing only for as long as it is useful to you or the law requires. Having your files at hand for a few days makes Kortu faster for you; after that time we delete them.

• Your account and your usage history: while you have your account.
• Videos, audio, images and clips: we keep the original video for up to 30 days without use and your finished clips for up to 30 days without use. We do it for you: this way you can adjust a clip or regenerate it in seconds, without waiting for us to download, transcribe and process the video again from scratch. Each time you open, adjust, download or rate a clip, the period for that video starts over. When the original video is deleted, you can no longer "Adjust" its clips without processing the video again. Before deleting your clips, we notify you by email 7 days and 1 day in advance. Then we delete the files (or earlier, if you ask us to); your history and your ratings remain. Download the clips you want to keep.
• AI Studio and AI Creator videos: the video we deliver to you is kept 30 days from when you requested it; opening or downloading it does not extend the period. We notify you by email 7 days and 1 day before deleting it. Download it if you want to keep it.
• Server security logs: accesses to Kortu, attempts to sign in to an account and the IP addresses they were made from are kept for up to 24 months, only to protect the service, investigate failures or attacks and prevent fraud. Then they are deleted.
• Your voice: while you have AI Voice active, so that each narration comes out in your voice without you having to record yourself again. You can delete it whenever you want from AI Voice. If you delete it or close your account, we delete the recording and the copy within 30 days at most; we only keep the record of your permission (text, date), without the audio, as proof. What we send to the AI provider for each narration is deleted there within 1 hour at most.
• AI program files: while your permission remains valid and for a maximum of 24 months from when you uploaded them; then they are deleted.
• Payments: for the time tax law requires (generally 5 years).
• Backups: we keep backup copies so as not to lose data because of failures. What you delete leaves the backups within 90 days at most; in the meantime it remains blocked and is not used.

If you close your account (from My account): we delete your voice immediately, withdraw your AI program permissions, cancel your plan and you can no longer sign in. We keep, blocked and without using them for anything else, your name, email, IP, encrypted password and usage logs, to prevent abuse (for example, closing and opening accounts to get free videos again), comply with the law and defend ourselves against a claim, for a maximum of 5 years. Your files follow the periods above and are then deleted.

How we protect your data

We use encrypted connections, encrypted passwords, restricted access to servers and files, private paths for your files, and backups. No system is 100% secure; if a breach occurs that affects your rights, we will notify you without delay with what happened and what you can do.

Your ARCO rights and your consent

You can access your data, rectify it, cancel it or object to its use, and revoke your consent (for example, for news, for your voice or for the AI program). Write to soporte@kortu.ai from the email you signed up with, saying which right you want to exercise and over which data; if another person requests it for you, they must prove that they represent you. We respond within 20 business days at most and, if appropriate, we apply it within the following 15 business days. Some options (deleting your voice, unsubscribing from news, leaving the AI program) you can also do directly from your account.

If you believe we did not handle your request properly, you may go to the personal data protection authority (currently, Mexico's Secretaría Anticorrupción y Buen Gobierno, the Ministry of Anti-Corruption and Good Governance).

Minors

Kortu is not directed to people under 18 years of age and we do not knowingly collect their data. If you know of a minor who gave us their data, write to us and we will delete it.

Changes to this notice

If we change this notice, we will publish the new version on this page with its "Last updated" date; review it from time to time. When the change comes with a new feature, we will also notify you by email or in your dashboard. If a new purpose needs your consent, we will ask you for it before using your data for it.

Language

This is a translation for convenience. The Spanish version (/terminos, /privacidad) is the legally binding one and prevails in case of any difference.