Privacy Policy

Effective date: January 1, 2025 · Last updated: May 2026

Korfix (“we”, “our”, “the Service”) operates the platform available at korfix.info and related subdomains. This Privacy Policy explains how we collect, use, and protect information about you when you use our services.

1. Information we collect

We collect information you provide directly:

Account data — name, email address, and password when you register.
Content data — catalogs, records, mini-apps, and other data you create inside the platform.
Usage data — log files, IP addresses, browser type, pages visited, and actions taken within the Service.
Communication data — messages you send us via email or the feedback form.

2. How we use your information

To provide, operate, and improve the Service.
To authenticate you and manage your account.
To send transactional emails (account confirmations, password resets).
To respond to support requests.
To analyze usage patterns and improve product features.
To comply with legal obligations.

We do not sell your personal data to third parties.

3. MCP tokens and data access

Korfix issues MCP (Model Context Protocol) tokens that allow AI assistants to interact with your catalogs. You control which catalogs each token can access — tokens can be scoped to specific catalogs and revoked at any time from your account settings. We do not share MCP token data with any third party.

4. Data storage and security

Your data is stored on servers operated by or on behalf of Korfix. We use industry-standard encryption in transit (TLS) and at rest. We implement access controls, monitoring, and regular security reviews.

You can export all your data in JSON format at any time from the platform settings.

5. Cookies

We use cookies to maintain your session, remember preferences, and analyze traffic. You can disable cookies in your browser settings; some features may not work correctly without them.

6. Third-party services

The Service may integrate with third-party APIs (e.g., AI providers, automation platforms). When you use such integrations, data exchanged with those services is governed by their respective privacy policies.

7. Your rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Export your data at any time.

To exercise these rights, contact us at [email protected].

8. Data retention

We retain your account data for as long as your account is active. After account deletion, we remove your personal data within 30 days, unless longer retention is required by law.

9. Children

The Service is not directed to children under 16. We do not knowingly collect data from minors. If you believe we have done so, please contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact

Korfix is operated by IE Lyadkov A.D. (ИП Лядков А.Д.), INN 525907778824.
Email: [email protected]