Privacy Policy

Account data

When you register for an account, we collect your name, email address, company name, and billing information.

Usage data

We collect information about how you use the platform, including pages visited, features used, and actions taken within the CRM.

Payment data

Payments are processed by Stripe. We do not store your full card details. Stripe's privacy policy applies to payment processing.

Contact and CRM data

Data you enter into the platform (contacts, companies, deals, invoices, etc.) is stored securely and is owned by you.

Technical data

We collect IP addresses, browser type, device information, and cookies to operate and improve the service.

We use your data to:

• Provide and operate the COLABR8 TECH platform
• Process payments and manage your subscription
• Send transactional emails (account setup, invoices, notifications)
• Provide customer support
• Improve and develop our services
• Comply with legal obligations

We do not sell your personal data to third parties.

We process your data under the following lawful bases under UK GDPR:

• Contract — to provide the services you have subscribed to
• Legitimate interests — to operate, secure, and improve our platform
• Legal obligation — to comply with applicable laws
• Consent — for marketing communications (where applicable)

We share data only with:

• Stripe — for payment processing
• Vercel — for hosting and infrastructure
• Supabase — for database storage
• Email service providers — to deliver transactional emails

All third-party providers are bound by data processing agreements and are GDPR-compliant.

We retain your account data for as long as your subscription is active, and for up to 12 months after termination to allow for account recovery and legal compliance. CRM data you enter is retained until you delete it or close your account.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at support@colabr8.tech.

We use essential cookies to operate the platform. We do not use advertising or tracking cookies. You can manage cookie preferences in your browser settings.

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. However, no system is entirely secure and we cannot guarantee absolute security.

Our infrastructure providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.