Security & Privacy

Your data is your data

This is a plain-language overview of how Colloqia handles security and privacy. It is not a formal Privacy Policy. Additional details are provided during beta configuration.

Your data is your data

We do not sell customer data or share it with advertisers. Limited data may be processed by service providers used to operate Colloqia, subject to applicable safeguards and agreements.

Minimal collection

We collect what we need to provide the service — no more. We document what we collect, why we collect it, and how long we keep it.

Human review by default

Colloqia never publishes anything on your behalf. Every response requires human review before it goes live.

Responsible AI use

AI assists with discovery, analysis, and drafting. People decide whether and how to participate. We do not build autonomous engagement tools.

Security practices

—API communications are encrypted in transit

—OAuth tokens are stored securely and not exposed to the frontend

—Row-level security restricts data access to authorized users

—Admin-only operations verify permissions on every request

—Connected sources may require customer-authorized access

—Individual records can be deleted at any time

Data retention

Retention and deletion practices depend on the type of data and the services required to operate the workspace. Additional details are provided during beta configuration.

Discussion data and response drafts

Retained to support your workspace during the life of your account. You can delete individual records at any time.

OAuth tokens

Stored securely and retained until you revoke access or delete your account.

Analytics events

Retained to provide the service and understand product usage.

Responsible disclosure

If you discover a security vulnerability, we want to hear from you. Please do not publicly disclose vulnerabilities until we have had an opportunity to investigate and remediate.

Your data is your data