Privacy Policy

Scope

This Privacy Policy applies to all users of Collaya’s service, including those on beta, trial, free, or subscription plans. It covers the handling of personal information and user-uploaded content submitted through collaya.com or any affiliated domains or software.

Information We Collect

User-Provided Information

• Audio files uploaded to the Service
• Text inputs used for recommendations, annotations, or chatbot interactions
• Account information (e.g., name, email, login credentials)
• Support messages, feedback, and survey responses

Automatically Collected Information

• Log data (e.g., IP address, browser type, access times)
• Usage metrics (e.g., feature interaction, frequency, session length)
• Cookies or similar technologies (for essential site functionality only)

We do not collect sensitive personal information unless explicitly provided by you (e.g., in a message or prompt).

How We Use Your Data

We use the information we collect to:

• Provide and personalize the Service
• Deliver audio-based recommendations using machine learning
• Improve model fidelity for your profile
• Troubleshoot issues and enhance platform performance
• Respond to support requests and user feedback
• Conduct internal analytics to understand feature usage

We do not use your audio to train global models, power other users’ experiences, or generate third-party commercial outputs.

Audio Content and Ownership

You retain full ownership of all audio content you upload. Collaya uses this content exclusively to provide real-time suggestions and to improve personalized recommendations within your account. Audio content is never sold, repurposed, or shared beyond your individual user experience. Audio recommendations are account-specific. No uploaded content is used to train any generalized or multi-user AI models.

Chat Interactions and Third-Party Services

Collaya includes a text-based chat assistant powered by third-party AI providers (e.g., OpenAI’s API, Gemini). When using the chatbot, we may process textual information you provide, including notes, tags, or descriptions related to your audio.

Important Clarifications:

• We do not send your audio files to any external provider
• We do not send personally identifiable information (PII) unless you include it in a prompt
• Chatbot interactions are processed under the third-party’s own privacy policy (e.g., OpenAI Privacy Policy)

Cookies and Analytics

We use only the cookies and analytics necessary to keep the service running and to understand how it’s used, and we never track you for advertising or profiling. These cookies include first-party cookies for essential functionality (for example, secure sign-in authentication) and privacy-focused analytics tools such as Google Analytics. Google Analytics uses first-party cookies to generate reports on website activity and user behavior. If you block cookies with advanced plug-ins, some core features may not work properly.

Third-Party Authentication (Google Sign-In)

If you choose to sign in to the Service using your Google account, we receive limited personal information from Google in order to create and manage your account. This information may include your full name, email address, profile picture, and a unique Google account identifier. We do not receive your Google password or access your Google account beyond what is necessary for authentication.

Data Sharing

We do not share your personal information, audio content, or usage data with third parties for marketing, resale, or external training purposes. Limited subprocessors may be used to support infrastructure or analytics (e.g., cloud storage, performance tracking), all of whom are contractually bound to handle your data securely and in accordance with their policies.

Security

We use industry-standard security practices to protect your data, including:

• Encryption of audio content during transit
• Secure storage via vetted cloud providers (e.g. AWS, Cloudflair)
• Role-based access controls
• Regular audits of internal systems

No system is infallible, but we take data protection seriously and respond promptly to any known vulnerabilities or breaches.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access or request a copy of your data
• Request deletion or correction of your personal information
• Object certain types of data processing
• File a complaint with your local data protection authority

To exercise any of these rights, email us at legal@collaya.com.

Children’s Privacy

Collaya is not intended for use by individuals under the age of 18, unless otherwise approved by parent, guardian, or other supervisory role. We do not knowingly collect personal data from children. If we discover we have received data from a minor in error, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or technologies. If we make material changes, we will notify you via email or in-app notice. Continued use of the Service after such changes constitutes your acceptance of the updated policy.