Privacy Policy

1. Information We Collect

Personal Information

• Account Information: Name, email address, profile image, and authentication data when you create an account
• Authentication Data: We use Google OAuth and email/password authentication to secure your account
• Profile Information: Any additional information you choose to add to your profile

Usage Information

• Project Data: Information about projects, folders, tasks, milestones, and collaboration activities
• File Data: Files you upload, share, or store on our platform
• Communication Data: Messages within project rooms (encrypted end-to-end)
• Technical Data: IP address, browser type, device information, and usage patterns

AI Feature Data

When you use our AI project suggestion feature, we share limited project structure data (folder names, task titles, milestone names, and associated user names/IDs) with OpenAI to generate suggestions. This data is processed according to OpenAI's privacy practices.

Cookies and Tracking

We use essential cookies to maintain your session and improve platform functionality. We do not use third-party analytics or tracking services.

2. How We Use Your Information

We use the collected data to:

• Provide, operate, and maintain our collaboration platform
• Process payments and manage subscriptions through Stripe
• Enable file sharing, project management, and team collaboration features
• Provide customer support and respond to your inquiries
• Generate AI-powered project suggestions (when enabled)
• Improve our services and develop new features
• Send service-related communications and updates
• Ensure platform security and prevent fraud

3. Third-Party Services

We use the following trusted third-party services:

• Stripe: Secure payment processing (they may store payment information according to their privacy policy)
• Google Cloud Storage: Secure file storage and management
• Google OAuth: Authentication services
• OpenAI: AI project suggestions (limited project structure data only)

4. Data Security

• Encryption: All messages and communications are protected with end-to-end encryption
• Secure Storage: Files are securely stored using Google Cloud Storage infrastructure
• Access Controls: Strict access controls limit who can view your data
• Regular Updates: We regularly update our security measures

5. Data Retention and Deletion

• Your data is retained while your account is active and for operational purposes
• When you delete your account, your data is marked for deletion immediately
• Complete Deletion: All your data is permanently deleted from our systems within 7 days of account deletion
• Some anonymized usage data may be retained for analytical purposes after deletion

6. Your Rights (GDPR & Spanish Law)

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request limitation of processing your data
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent for data processing at any time

7. International Data Transfers

Your data may be processed in countries outside Spain/EU through our service providers (Google Cloud, Stripe, OpenAI). We ensure adequate protection through appropriate safeguards and compliance with applicable data protection laws.

8. Children's Privacy

Collabricate is intended for users aged 16 and above. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes via email or through the platform. Your continued use after changes constitutes acceptance of the updated policy.