Last Updated: November 21, 2025
1.1. Restriction on Use: We reserve the right to refuse access to the Services if we determine that your use is inconsistent with our commitment to support nature based solutions and nature stewardship. Some examples of usage that contradicts our goals may include, but is not limited to:
Use of data or tools provided by the Service to facilitate extractive or exploitative projects
Misrepresentation of data that adversely affects Indigenous communities or nature stewardship efforts
Use of the Services in a way that impacts other uses negatively, such as overloading of capacity
1.2. As-Is Service: We strive to provide a high-quality experience, but our Services are provided "as is." We do not guarantee that your experience will be completely error-free or uninterrupted. Data loss, corruption, and server downtime may occur, despite Korotu’s efforts to prevent such situations from happening. Korotu is not liable for any resulting damages as a result of these service interruptions.
1.3. Updates and Changes: We are constantly working to improve the Services for all our users. This means we may modify, update, or adjust features from time to time. While we always aim for a smooth and reliable experience, we are unable to guarantee that our Services will be perfectly secure, available, or free of bugs.
By using the Service, you acknowledge that it is provided in its current state and that, like any software, it may contain errors or experience interruptions.
1.4. Data Usage for Improvement: We may collect user-generated or product-generated data to improve our Services. This data may be used in anonymized form to improve our software, system accuracy, and user experience. “Anonymized form” means that personal information in your data is removed or altered so that the data cannot be traced back to you. We do not share personally identifiable information without explicit consent. By using our Services, you acknowledge and consent to the use of your anonymized data for these purposes.
Some examples of this data include, but are not limited to:
GeoJSON files, shapefiles, and other geospatial data related to properties uploaded by users
User-provided metadata, such as custom property names, descriptions, or labels (which may or may not correspond to real-world identifiers)
Data generated by the Services as a result of user input or system processes, such as processed files, analytics outputs, or prediction results
1.5. Consent for Cloud Storage: We will store user-generated data on cloud environments for the purposes of providing our Services. “Cloud environments” refer to remote servers hosted on the Internet, rather than on local devices or on-premises infrastructure, that are used to store, manage, and process data. These environments are managed by Korotu and its trusted third-party service providers which you may refer to in Section 3, and are protected with industry-standard security measures.
Please note that cloud storage is essential to the functionality of our Services. By using our Services, you acknowledge and consent to the storage of your data on cloud environments.
1.6. Prohibited Conduct: You agree not to:
Upload any virus, Trojan horse, worm, software lock, drop dead device, or any other limiting routine or code that may harm our systems
Use our software for illegal activities
Use Korotu’s brand, logos, or copyrighted content without permission
Attempt to reverse engineer, copy, redistribute, or modify any of Korotu’s software, or otherwise seek to obtain or derive the source code, underlying ideas or algorithms
Sell, license, or commercially exploit any data or services provided by the Services without Korotu’s prior written consent and a valid license agreement
1.7. Eligibility and Age Restrictions: You must be at least 13 years old to use our Services. By accessing or using our Services, you confirm that you meet this requirement. If you are between the ages of 13 and the age of majority in your province or territory (usually 18 or 19), you may use the services only with the involvement and consent of a parent or legal guardian.
We do not knowingly collect personal information from children under the age of 13. If we learn that a user under 13 has provided personal information without parental consent, we will take steps to delete such information promptly.
1.8. Account Security: You are responsible for keeping your account credentials secure. If you suspect that your account has been compromised, it is your responsibility to inform us as soon as possible.
1.9. Account Termination: Korotu may suspend or terminate your account without notice for violations of these terms. All raw data associated with the deleted account will be removed and will no longer be used for improving our Services.
2.1. Data Ownership: All users on the Aroa platform are assigned a user tier of standard or premium.
Users on the standard tier grant Korotu a non-exclusive, worldwide, royalty-free license to use, store, and process their data for service-related purposes. Users hold the right to access or modify their data at any time. Upon receiving an account deletion request from a user on the free tier, Korotu will immediately prevent the data associated with the account from being accessed by the public, but keep an archived copy which may be used for the purposes of improving our Services.
Users on the premium tier own any data generated as a result of their interactions with our Services. They may access, modify, or delete their data at any time. Upon receiving an account deletion request from a user on the premium tier, Korotu will immediately prevent the data associated with the account from being accessed by the public and exclude the data from being used for Service improvement purposes. Korotu will also initiate the account deletion process. However, to protect against data loss, we will keep machine backups where the data is still present on the cloud environment. These backups have a retention period of a set amount of time, after which all data pertaining to the deleted account is removed forever.
2.2. Data Access: While an account is active, the individual user can partially access their account data through the Services platform. Such data includes, but is not limited to, the user’s name associated with the account, billing address (if provided), and data generated through the user of the Services.
For a comprehensive export of all data associated with the account, including any information not directly visible through the platform, users may submit a free formal data access request to Korotu. Upon receipt of such a request, we will compile and deliver all account-related data using the contact information currently associated with your user account.
Please note that authorized personnel at Korotu may access user data as reasonably necessary to provide technical support, maintain and improve the Services, or comply with legal obligations. All such access is governed by strict confidentiality and data protection protocols.
2.3. Data Security: We take the security of your data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, loss, misuse, or alteration.
These measures include, but are not limited to:
Encryption of data in transit and at rest using industry-standard protocols
Regular monitoring of our systems for security vulnerabilities
Routine security audits of third-party libraries and dependencies used in our codebase to identify and mitigate potential risks
Role-based access controls to ensure that only authorized personnel can access user data
Secure data storage with trusted third-party providers who are contractually obligated to maintain strong security standards
Ongoing security training for our staff and contractors
Incident response procedures to detect, report, and address data breaches in a timely manner
While we make every effort to safeguard your data, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. In the event of a data breach that affects your personal data, we will immediately notify you through email.
2.4. Product Ownership: Korotu owns all rights, titles and interests, including all worldwide intellectual property rights in Services and the trademarks, service marks and logos contained therein, and the Services are licensed to you directly by Korotu, not sold, irrespective of the use of terms such as “purchase” or “sale”.
3.1. Third Party Services: Korotu may use third party services, software or applications (collectively referred to from now on as “Third Party Content Providers”) to make the Services available for use. In using our Services, you agree to comply with all requirements and restrictions of any Third Party Content Providers for which Korotu provides notice to you. As a convenience to you, certain Third Party Content Providers and their respective terms and conditions are listed below:
Amazon Web Services: AWS Service Terms found at https://aws.amazon.com/service-terms/
MapBox: Terms of Service found at https://www.mapbox.com/legal/tos
Please note that Third Party Content Providers and their terms and conditions may change from time to time. We will notify you by email when we add or remove Third Party Content Providers. However, it is your responsibility to ensure that you agree with any updates to their terms.
4.1. Updates to this Agreement: Korotu reserves the right to modify or update this Agreement at any time, at its sole discretion. When changes are made, we will provide written notice, such as via email, and notify users by updating the date at the top of this document. Continued use of the Services 14 days after any such changes constitutes your acceptance of the revised Agreement.
4.2. Korotu Contact: All notices or questions should be directed by email to support@korotu.com.
4.3. Your Contact: All notices or communications related to this Agreement will be directed to you using the address information Korotu currently has on file for you in your user account.
Governing Law
This Agreement shall be governed by and construed in accordance with the laws of Canada, without regard to its conflict of law principles.
Back to top