Privacy Policy

Last updated: 10/6/2025

1. Introduction

Welcome to Colleague. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI workflow automation service.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email address, password)
  • Profile information
  • Workflow and agent configurations
  • Integration credentials and API keys (encrypted)
  • AI-generated content and orchestration data

2.2 Information Collected Automatically

  • Usage data and analytics
  • Device information
  • Log data from workflow executions
  • Cookies and similar technologies
  • AI model interaction data

2.3 Analytics and Session Recording

We use Amplitude, a third-party analytics service, to collect and analyze user behavior data to improve our service. This includes:

  • Page views and navigation patterns
  • Feature usage and interaction data
  • Session recordings (100% of sessions are recorded)
  • User interface interactions (clicks, scrolls, form inputs)
  • Performance metrics and error tracking
  • Device and browser information

Session Recordings: We record 100% of user sessions to understand how users interact with our platform and identify areas for improvement. These recordings may capture your interactions with the interface, including clicks, scrolling, and form inputs. We do not record sensitive information such as passwords or API keys. You can opt out of session recording by contacting us.

Amplitude Data Processing: Amplitude processes data in the European Union and is compliant with GDPR. You can learn more about Amplitude's privacy practices at https://amplitude.com/privacy.

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain our service
  • Process your transactions
  • Send administrative information
  • Improve our services
  • Enforce our terms and policies
  • Protect against fraudulent or illegal activity
  • Analyze user behavior and optimize user experience
  • Identify and fix technical issues and bugs
  • Develop new features based on usage patterns

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following situations:

  • With your consent
  • To comply with legal obligations
  • To protect our rights and safety
  • With service providers who assist in our operations
  • In connection with a business transaction

4.1 Third-Party Services

We use the following third-party services that may process your data:

  • Amplitude: For analytics and session recording. Data is processed in the EU and is GDPR compliant.
  • AWS (Amazon Web Services): For hosting and infrastructure services.
  • OpenAI: For AI model processing and workflow execution.
  • Other integration services: Based on the apps you connect to your workflows.

All third-party services are bound by data processing agreements and are required to protect your data in accordance with applicable privacy laws.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Secure development practices

6. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Request deletion of your data
  • Object to data processing
  • Data portability
  • Withdraw consent

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When data is no longer needed, we securely delete or anonymize it.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

9. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

  • Email: privacy@colleague.ninja
  • Address: Silent Orchestra AB (559540-0515), Göteborg, Sweden