Privacy Policy

Colleague is built around a simple promise: your conversations are yours. This policy explains what we collect, why, and what we never do with it. We've kept it short and in plain language on purpose.

What we collect

When you use Colleague, we store:

• Your name and email address (so you can sign in)
• Your password, salted and hashed (we cannot see it in plain text)
• The profile fields you choose to share (job title, industry, hobbies, etc. — all optional)
• The personas you create and the conversations you have with them
• Your mood ("Vibe") entries when you record them
• Voice notes you record, for the purpose of transcription only — the audio is processed and discarded
• Payment metadata from Stripe (we never see your card number)

What we DO NOT do

• We do not sell your data. Ever. To anyone.
• We do not use your conversations to train AI models.
• We do not share your data with advertisers or data brokers.
• We do not read your conversations except as required for technical support, and only when you ask us to.
• We do not show your data to your employer, ever — Colleague is yours, not theirs.

Who processes your data

Colleague relies on a small set of trusted infrastructure providers to operate. Each is bound by their own privacy and security commitments:

• Anthropic (via Emergent) — processes your messages to generate persona replies. Anthropic does not retain or train on these messages.
• OpenAI (via Emergent) — transcribes voice notes (Whisper). Audio is not retained.
• Google Gemini (via Emergent) — generates AI avatars when you ask for one.
• Stripe — processes payments and stores your billing info. Stripe is PCI-DSS certified.
• Giphy — sources cute animal clips. Giphy may set cookies on the images served.
• Resend — sends transactional emails (trial reminders, account updates).
• MongoDB Atlas — stores your account and conversation data, encrypted in transit and at rest.

Cookies and tracking

We use a single session cookie to keep you signed in. We don't use third-party analytics or advertising cookies on Colleague itself.

Your rights

You can, at any time:

• Export your conversations (one click in any conversation view)
• Update or remove your profile fields
• Delete your account (email us — see Contact)
• Request a copy of all data we hold about you

We comply with GDPR and CCPA principles by default. If you're in the EU or California and want a formal data request, email us at the address on the Contact page.

Data retention

Your conversations stay in your account until you delete them. If you cancel your subscription, we keep your data so you can come back. If you delete your account, we permanently remove your conversations and profile within 30 days, except where law requires us to keep payment records longer.

Children

Colleague is built for working adults. We do not knowingly collect information from anyone under 16. If you believe a minor has registered, email us and we'll delete the account.

Changes to this policy

If we make material changes, we'll email you and post a note in the app at least 14 days before they take effect.

Contact

Questions or concerns? Email us at hello@meetacolleague.com and we'll respond within 3 business days.