What we collect

These help us count visits and fix problems. There are no cookies and no identity, and the count changes every day so it cannot follow you.

• Which kinds of pages are visited, such as the home page or the sign-in page. Never the name of your organization.
• Which buttons are clicked.
• Steps in sign-up and in the contact form.
• The site you came from (the domain only) and campaign tags in the link.
• How fast pages load.
• Errors.

You can stop all of this at any time:

Only if you choose Allow. One switch covers all of it.

• Your account ID, and whether the account is our team's, a consultant's or a customer's. Never your name or email.
• Your organization as a number and size ranges, such as 11 to 50 roles.
• How you use features.
• Where you click, shown as heatmaps.
• Recordings of how screens are used, with all text and everything you type hidden. Recording never runs on People Operations pages, the People directory or person pages.

Organization owners can turn recordings off for their whole organization, whatever each person chose.

• We never show ads or sell data.
• The names and content of your organization never reach analytics: no role names, person names, notes or titles.

Analytics and recordings are kept in the EU, in Frankfurt; page speed measurements are processed by Vercel and may be outside the EU.

• Events: 1 year.
• Recordings: 30 days.
• Survey answers: 12 months.

Only the Coleoid team can see analytics and recordings, through named accounts with two-factor sign-in, and we use them only to improve the product. We never use them to judge, rank or report on a person, and we never share them with a customer's managers. Recordings are watched only inside our analytics tool, quotes are used without names, and recordings are deleted after 30 days. An AI assistant helps us read aggregate results; we instruct it to work only with aggregate numbers and do not use it to view recordings or individual people.

You can change your mind at any time, as easily as you decided. For everything else we do with personal data, read the privacy notice.

Open privacy settingsPrivacy notice

Effective date: 20 October 2026

This text asks for your permission so that Eurosis Danışmanlık A.Ş. (Eurosis Consulting) can run detailed analytics in Coleoid. The privacy notice explains how your personal data is processed in general. This text covers only the one topic below.

You do not have to agree. If you decline, you use Coleoid exactly the same way; no feature is switched off.

1. What you agree to

To see in detail how Coleoid is used and improve the product, you agree that the following is collected from this device:

• Identity link: your permanent account ID, the organization ID of the organization you are using, and whether your account belongs to our team, our consultants or a customer (worked out from your email domain). Your name and email are not sent.
• Feature use: which pages you open (a page template, such as "organization chart", instead of the address) and what you do (for example, you created a proposal). Counts are kept as ranges (for example, "2-5 changes").
• Clicks and heatmaps: clicks on buttons, links and form controls, rapid repeated clicks and clicks that do nothing, and the points clicked on a page. The control's text, link address and ID are not collected.
• Masked session recordings: a video-like record of how the screen is used. All text on screen and everything you type is hidden. Which server address was called and how long it took is visible; the content of the request is not.
• Surveys: if you are shown a survey and choose to answer, your answer. A survey answer may contain free text you write; it is the only free text collected.

After you allow, the measurement service stores an identifier in your browser to recognize this device.

2. What is never collected

• Your name, email, your organization's name, role and person names, notes, comments and titles.
• Text on screen and what you type into forms (hidden in recordings).
• The browser console, and the headers and content of network requests.
• People Operations pages (personnel files, performance, job descriptions), the people directory and person pages: recording stops on these pages.
• Organization owners can turn recordings off entirely for their organization.

The data is never used for advertising and never sold.

3. Where the data is kept and for how long

The data is kept in PostHog Inc.'s EU cloud in Germany (Frankfurt). Analytics events (feature use, clicks, heatmaps): 1 year. Masked session recordings: 30 days. Survey answers: 12 months. The data is deleted when the period ends.

4. Transfer abroad

PostHog is a US-based company and the data is kept outside Türkiye. We have not yet signed the standard contract announced by the Board under KVKK Art. 9 with PostHog; we are working to conclude it and aim to complete this soon. This consent is not the basis for the transfer. Details are in section 6 of the privacy notice.

When we review aggregate results we use an AI assistant (Anthropic, USA). We instruct it to work only with aggregate numbers and do not use it to view recordings or individual people.

5. How to withdraw

You can withdraw at any time, as easily as you agreed: from Privacy settings in the account menu, the Privacy settings link at the bottom of our public pages, or the privacy page. As soon as you withdraw, recording stops, no detailed analytics is sent from this device and the link to your account is removed. Withdrawal does not affect processing before it. You can also ask us to delete what was collected before: write to hello@coleoid.systems from the email address registered in your account, and we delete the analytics data linked to your account. Your choice applies to this device. Another device asks separately.

6. Statement

By choosing "Allow", I give my explicit consent, informed and freely, to the collection and processing of the data described above for the purpose described above.