Privacy Policy
Clear about the information behind the work.
This policy explains current data processing and controller and processor roles.
1. Who operates Coleoid
Coleoid is operated by Eurosis Consulting. For privacy questions, contact hello@coleoid.systems.
2. Controller and processor roles
Coleoid is controller for account, authentication, security, sales, support, and analytics activities; customers control workspace information.
A data processing agreement governs processor activity where required.
3. Information we process and why
| Category | Information | Purpose | Legal basis |
|---|---|---|---|
| Account and profile | Name, email, and optional image | Create and administer accounts | Contract and legitimate interests |
| Authentication and security | Session, IP, user-agent, tokens, and verification records | Authenticate users and protect the service | Legitimate interests and legal obligations |
| Workspace access | Memberships and invitation emails | Provide scoped collaboration | Contract performance |
| Customer workspace content | Roles, processes, relationships, decision rights, metadata, and history | Operate the workspace on customer instructions | Processor activity under agreement or DPA |
| Contact and commercial enquiries | Name, email, optional organization, reason, and message sent to contact channels | Respond and discuss the service | Pre-contract steps, consent, or legitimate interests |
| Product analytics | Defined, property-filtered events | Understand and improve the product | Consent for identified analytics and recording |
4. Sources, recipients, and transfers
We receive information from users, customer administrators, sign-in flows, the contact form transmitted through Resend, and direct email; we disclose it only as necessary or legally required.
Request current subprocessor, hosting-region, and transfer details from hello@coleoid.systems.
5. Retention and security
We retain information only as long as necessary for the service, security, legal duties, disputes, or customer instructions.
We use organization-scoped access, authenticated sessions, and monitoring. See Security & Data.
6. Your rights and requests
Depending on law, you may request access, correction, export, deletion, restriction, objection, or withdrawal of consent. Contact hello@coleoid.systems; we may verify identity and generally aim to respond within one month where applicable.
7. Cookies, analytics, children, and updates
- Coleoid does not use unrestricted product autocapture.
- Identified analytics and recording require consent; sensitive text and inputs are masked.
- Coleoid is not intended for children.
- We update this policy when practices or legal obligations materially change.