Privacy Policy

Collio is an all-in-one workspace for creators and solo businesses — for planning tasks, keeping notes, managing clients and brands, sending invoices and tracking income and expenses. This policy explains what personal data Collio collects, why, how it is protected and what rights you have.

If you have any questions about this policy or your data, you can reach us at Collioworkspace@hotmail.com.

When you create an account and use Collio, we process the following data:

• Account information — your name, email address and a unique user ID created when you sign up.
• Business and financial data you enter — income, expenses and invoices (including client details, amounts, VAT and payment details you add yourself).
• User-generated content — your notes, tasks, clients, brands and collaborations.
• Images you upload — moodboard photos in the Content Library and profile or company logo images.
• Preferences — settings such as theme, date format, language and notification choices.

Collio does not use advertising, tracking, analytics SDKs, or sell your data to anyone.

• To create and manage your account and keep it secure.
• To provide the Collio features you use — tasks, notes, clients, invoices, finances, content library and workspaces.
• To let you share selected tasks with members of a workspace you create, while everything else stays private to you.
• To send essential service emails, such as email verification and password resets, and the notifications you opt into.

We process this data to perform our contract with you (providing the service), based on our legitimate interest in keeping the service secure, and to comply with legal obligations such as bookkeeping requirements that may apply to data you choose to store in Collio.

Your data is stored in a hosted cloud backend provided by Lovable Cloud (hosted on Supabase infrastructure) — a managed database, authentication and file storage service.

• All traffic between you and Collio is encrypted in transit (HTTPS/TLS), and data is encrypted at rest in the database and storage.
• Access to your data is protected by row-level security rules: you can only read and change your own data. The only exception is tasks you explicitly add to a shared workspace, which its members can see.
• Uploaded images (moodboards and profile/logo images) are stored in private storage; they are only accessible through signed, expiring links tied to your account.
• Collio staff access to production data is limited and used only to operate and support the service.

Collio does not share your data with advertisers or data brokers. We rely on a small number of service providers to run the service:

• Lovable Cloud (Supabase) — hosting, database, authentication and file storage for all app data.
• Google — only if you choose "Continue with Google" (see below).

If you export an invoice as a PDF, that file is generated in your browser — it is not sent to any third-party printing or document service.

Collio offers sign-in with Google as an optional alternative to email and password. If you use it, Google shares your basic profile information with Collio — your name, email address and Google account ID — so we can create and identify your account. We never receive your Google password, and we do not post to or read anything else from your Google account. You can always switch to signing in with your email address instead.

Your data is kept for as long as your account is active. You can delete individual items (notes, invoices, tasks, images and so on) from within the app at any time.

If you want to delete your entire account and all associated data, email us at Collioworkspace@hotmail.com and we will permanently delete your account, database records and uploaded files. Some data may be retained briefly in encrypted backups before being fully removed.

Depending on where you live, you have rights under data protection laws (such as the GDPR if you are in the EU/EEA), including the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (you can edit most of your data directly in Collio).
• Export or receive a copy of your data.
• Delete your account and data.
• Withdraw consent or object to processing in certain situations.

To exercise any of these rights, contact us at Collioworkspace@hotmail.com. If you are in the EU/EEA, you also have the right to complain to your local data protection authority.

Collio is intended for creators and businesses and is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will remove it.

We may update this policy as Collio evolves. If we make significant changes, we will notify you in the app or by email. The date at the top of this page always shows when it was last updated.

Questions about privacy or this policy? Email us at Collioworkspace@hotmail.com or reach us on Instagram @collioworkspace.