Privacy Policy

1. Introduction

Imori ("we," "our," or "us") is an AI-assisted writing platform operated by Namos Labs. This Privacy Policy explains what information we collect when you use Imori's web app, browser clipper, desktop app, and Raycast extension, how we use it, and the choices you have.

2. Information We Collect

2.1 Account Information

• Sign-up details: Name, email address, and profile photo, managed through our authentication provider, Clerk
• Billing information: If you subscribe to a paid plan, payment details are collected and processed directly by Stripe — we do not store your card number

2.2 Content You Create

• Writing content: Drafts, artifacts, outlines, and publications you write or generate in Imori
• Voice profile / style guides: Writing samples you provide so Imori can learn and match your voice
• Bookmarks and clips: Articles, pages, and text you save via the Chrome clipper or bookmarks tools
• Voice agent audio: If you use the Imori voice agent, your microphone audio is captured and processed (via ElevenLabs) to transcribe and respond to you. Audio is not used for any purpose beyond powering that conversation

2.3 Usage and Technical Data

• Product usage: Features used, pages visited, and actions taken in the app (e.g. AI generations, edits, publishes)
• Device and log data: IP address, browser type, and device information, collected for security, rate limiting, and abuse prevention
• Error and performance data: Crash reports and performance traces, collected via Sentry, to diagnose and fix bugs

2.4 Analytics (Only With Consent)

If you accept analytics cookies in our cookie banner, we may use one or more of the following, depending on which are enabled for this environment: Google Analytics, PostHog, or Plausible. If you decline or dismiss the banner, only essential cookies are used and none of these tools load. See our GDPR page for a breakdown of what each analytics tool collects.

3. How We Use Your Information

• Provide and operate the Imori service — your dashboard, drafts, artifacts, and voice tools
• Generate AI writing suggestions and content on your behalf, by sending relevant context to our AI providers (see Section 6)
• Process subscription billing and manage your account
• Send transactional email (e.g. verification, billing receipts, product updates) via Resend
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Improve the product, with your consent, using aggregated analytics

Legal Basis for Processing (GDPR)

• Contract Performance: Processing necessary to provide the service you signed up for
• Legitimate Interest: Security, fraud prevention, and product improvement
• Consent: Optional analytics and marketing communications

4. Data Storage and Security

• Your data is stored in Convex, our database provider, encrypted in transit and at rest
• Access to your account data is scoped to your authenticated Clerk identity — no shared or default accounts
• We monitor for errors and anomalies via Sentry

Data Retention

• Account and content data: Retained until you delete it or close your account
• Voice agent audio: Not stored beyond what's needed to complete the conversation session
• IP addresses: Used only for active rate limiting, not permanently stored
• Security/audit logs: Retained for up to 90 days
• Billing records: Retained as required for tax and accounting purposes

5. Your Rights and Controls

• Access and edit: View and update your content and account information at any time from your dashboard
• Delete: Delete individual drafts/artifacts, or your entire account
• Export: Request a copy of your data
• Object/restrict: Object to processing based on legitimate interest, or ask us to restrict it

To exercise any of these rights, contact us at team@namoslabs.com. See our GDPR page for the full list of EU data subject rights, and our Data Processing Agreement if you need it for your own compliance obligations.

6. Data Sharing and Subprocessors

We Do NOT Sell Your Data

We never sell, rent, or trade your personal information for marketing purposes.

Service Providers We Use

• Clerk — authentication and account management
• Convex — application database
• Stripe — payment processing
• Resend — transactional email delivery
• Sentry — error monitoring and performance tracing
• OpenRouter, OpenAI, and/or Anthropic — AI text generation (your writing context is sent to power AI suggestions and drafting)
• ElevenLabs — voice agent transcription and speech, if you use the voice agent
• Netlify — web hosting and content delivery
• Google Analytics, PostHog, and/or Plausible — analytics, only if you consent to cookies

See our Data Processing Agreement for the full subprocessor list and our contractual commitments as a data processor.

7. Cookies and Tracking

We use essential cookies (authentication, session state, CSRF protection) required for the service to function — these cannot be disabled. Analytics cookies are optional and only load after you accept them in our cookie banner. You can change your choice at any time by clearing your browser's local storage for this site, or by re-visiting the cookie banner.

8. Children's Privacy

Imori is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us so we can delete it.

9. International Data Transfers

Our subprocessors operate globally. Where personal data is transferred outside your region, we rely on appropriate safeguards such as Standard Contractual Clauses with our subprocessors.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy here and update the "Last Updated" date above. For material changes, we'll notify you via email or an in-app notice.

11. Contact Information

Questions about this Privacy Policy or our data practices: