Privacy Policy

Last updated: July 10, 2026

This Privacy Policy explains what information Chorus collects, how we use and share it, and the rights you have over it. It applies to the Chorus web application at app.trychorus.ai, our marketing site at trychorus.ai, and our Slack integration (together, the "Service").

1. Who we are

Chorus is operated by Marmentum LLC ("Chorus," "we," "us," or "our"), a company based in San Francisco, California, USA. Chorus is a B2B tool that helps a company's marketing team adapt LinkedIn posts into a unique draft for each participating employee, delivered through Slack. For data inside a company workspace, we generally act as a service provider (processor) to the company that owns the workspace.

2. Information we collect

• Account information: your name, work email address, job title, avatar or profile photo, and authentication identifiers from Auth0 or Google SSO.
• Workspace information: company name, email domain, workspace settings, roles (admin or poster), and seat assignments.
• Content you provide: posts, drafts, chat prompts, edits, and voice profile inputs such as writing samples, tone keywords, and style notes.
• Slack information: when an admin connects Slack, we receive workspace metadata through OAuth, including member names, Slack IDs, avatars, and out-of-office status, which we use to deliver drafts by direct message. We store the OAuth bot token needed to send those messages. We do not read your Slack channels or messages unrelated to Chorus.
• Waitlist information: the name, business email, company name, and team size you submit if you join the waitlist on our marketing site.
• Usage and device data: we use Vercel Analytics, a privacy-friendly analytics tool, to understand which pages and features are used, along with browser and device type and approximate region. It does not use third-party advertising cookies or track you across sites.
• Website visitor identification (marketing site): On our marketing site (trychorus.ai) we use RB2B, a third-party service that helps us recognize the businesses and professionals who visit, by matching site activity against RB2B's own data. This can include a visitor's name, business email, company, and LinkedIn profile, which we use to follow up with interested companies. RB2B runs only on the marketing site, never inside the Chorus app. You can accept or decline it using the consent banner on the site, and where local law requires it (for example in the EEA and UK) it does not run unless you opt in. We also honor Global Privacy Control signals.
• Cookies and similar technologies: In the app we use only the cookies needed to keep you signed in and to remember preferences such as dark mode. On our marketing site, the RB2B tool described above and our privacy-friendly analytics may set cookies or similar identifiers. We do not use cookies for advertising or to build advertising profiles.

3. How we use your information

• To provide the Service: create your workspace, adapt posts with AI, and deliver drafts to your team via Slack DM.
• To send service communications such as sign-in links, reminders, and account notices.
• To improve the product, using aggregate usage patterns.
• To keep the Service secure and prevent abuse.
• To provide support when you contact us.

4. AI processing

To adapt content, we send relevant content (such as the source post and the poster's voice profile) to Anthropic's Claude models through Anthropic's API. Anthropic does not use content submitted through its API to train its models by default, and we do not use your content to train models either. Chorus does not make automated decisions about you that have legal or similarly significant effects.

5. How we share information

We share personal data only with the subprocessors we need to run the Service:

• Vercel: application hosting and privacy-friendly analytics
• Supabase: Postgres database and file storage
• Auth0 (Okta): authentication
• Anthropic: AI content processing
• Slack: workspace integration and draft delivery
• Inngest: background job processing
• Resend: transactional email
• Google: single sign-on, if you choose it
• RB2B: website visitor identification on our marketing site

We do not sell or rent personal data, and we do not share it for advertising. We may disclose information if required by law or to protect rights, safety, or property, and in connection with a merger, acquisition, or sale of assets, in which case this Policy continues to apply to your data.

6. Data retention

We keep your information for as long as your account or workspace is active. When you delete your account, your workspace is terminated, or you ask us to delete your data, we delete it within 30 days, except where the law requires longer retention. Copies in encrypted backups are purged on a rolling basis shortly after.

7. Security

We protect your data with encryption in transit (TLS) and at rest, role-based access controls, least-privilege access for our team, and scoped OAuth tokens for integrations. No system is completely secure, so please keep your credentials safe and tell us at robert@marmentum.com if you suspect a problem.

8. Your rights

You can ask us to access, correct, delete, or export your personal data, or object to or restrict certain processing, by emailing robert@marmentum.com. We will verify your request and respond within the time required by law. If your data belongs to a company workspace, we may route your request through that workspace's admin.

California residents: under the CCPA you have the right to know what personal information we collect and how it is used, to request deletion, to request correction, and to not be discriminated against for exercising these rights. We do not sell personal information, and we do not share it for cross-context behavioral advertising. You can opt out of our website visitor-identification tool at any time using the consent banner on our marketing site, and we honor Global Privacy Control browser signals.

EEA and UK users: we process personal data under these legal bases: performance of a contract (providing the Service you or your employer signed up for), legitimate interests (securing and improving the Service), consent (where we ask for it), and legal obligation. You also have the right to lodge a complaint with your local supervisory authority.

9. International transfers

Chorus is operated from the United States, and your data is processed and stored in the U.S. If you use the Service from outside the U.S., you understand your data will be transferred there. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Children

The Service is not directed to anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new date, and if a change is material we will notify you by email or in the product before it takes effect.

12. Contact

Privacy questions or requests? Email robert@marmentum.com. Chorus is operated by Marmentum LLC, San Francisco, California, USA.