Privacy Policy

This Privacy Policy describes how Collabai (“Collabai”, “we”) processes personal data of users, visitors, and customers of the Collabai ecosystem (including, as available, Board, Recruit, Incubator, Community, Blog, Human, Product, Work, and collabai.ar).

Collabai provides Decision Intelligence systems: decision support, not autonomous decision authority. Product addenda detail specific processing.

This policy is informational and contractual as applicable. It is not legal advice.

• Trade name: Collabai
• Controller: Collabai
• Tax ID: Tax identification available upon request via the privacy channel
• Address: Argentina (registered address available upon request)
• Primary operating country: Argentina
• Privacy / rights: hola@collabai.ar
• Data protection contact: hola@collabai.ar

Depending on the product and contract, Collabai may act as controller or as processor for enterprise customers. In those cases, the DPA and contract prevail regarding role.

• Account and identity: name, email, credentials, profile.
• Customer content: ideas, decks, documents, notes, projects, and business data you upload.
• Recruit (when you use the product): CV, interview answers, transcripts, audio metadata, support scores, and evaluations.
• Community (when you use the product): posts, comments, peer-group memberships.
• Technical usage: logs, IP, device, cookies/identifiers subject to consent where required.
• Payments: billing data and transaction status via payment processors (we do not store full PANs).

Do not unnecessarily upload third-party passwords, secrets, card data, government IDs, medical records, or other highly sensitive third-party information.

• Provide and improve the Service (contract performance / operational legitimate interest).
• Security, abuse prevention, and legal compliance.
• Product analytics subject to cookie consent where required by law.
• Transactional communications and, where applicable, marketing on an appropriate legal basis.
• AI processing for decision support, summaries, support scoring, and recommendations — with human review for material decisions.

Collabai may analyze, summarize, compare, score, identify risks, and generate recommendations. Outputs may contain errors and do not guarantee outcomes. They do not replace professional judgment and are not legal, financial, or medical advice. They are not, by themselves, binding hiring, investment, or other decisions.

Governing principle: Collabai provides decision-support systems, not autonomous decision authority. See the AI Policy.

You retain rights in ideas, decks, documents, CVs, business data, and research you upload. Collabai retains rights in software, methodologies, workflows, scoring systems, UI, proprietary models, and templates. You receive a right to use outputs generated for you in the Service.

We may use data only in anonymized and aggregated, non-reidentifiable form for metrics and Service improvement. We do not use broad “use all customer data to train models” wording.

We treat non-public business information you provide (strategy, pricing, decks, financials, research, unpublished products, roadmap) as confidential, subject to exceptions: necessary subprocessors, legal compliance, explicit share links you enable, or consent.

We use providers for infrastructure, AI, payments, email, and analytics. The public list lives at /legal/subprocessors and is updated when active providers change.

Data may be processed in regions outside your country (e.g. the U.S.) by cloud and AI providers. We apply reasonable contractual and organizational safeguards as appropriate.

See the Cookie Policy. Non-essential analytics require consent where applicable (Consent Mode v2). Ecosystem analytics consent key: collabai_analytics_consent_v1.

We retain data as needed for purposes, legal requirements, and security. In Recruit, interviews/applications have documented retention (~24 months) and technical TTL where implemented. After deletion, backup copies may remain for limited periods.

We apply reasonable controls (TLS in transit, access controls, secrets, field encryption where implemented). See /legal/security. We do not claim certifications (SOC 2, ISO 27001) that do not exist.

You may request access, correction, deletion, objection, and where applicable portability or review of automated decisions. Channel: see /legal/data-rights and the configured privacy email.

The Service is directed to individuals 18+. We do not knowingly collect children’s data.

Data subjects may exercise the right of access free of charge at intervals of no less than six months, unless a legitimate interest is shown, pursuant to Article 14(3) of Argentine Law No. 25.326.

The AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the supervisory authority under Law No. 25.326, may handle complaints regarding non-compliance with personal data protection rules.

Schedules apply for Argentina, Brazil, Mexico, Colombia, and California/USA where relevant, using “where applicable” wording for unverified thresholds. Details in /legal/data-rights and internal compliance docs.

We may update this policy. The current version and date are published on the Legal Hub. Material changes will be communicated by reasonable means when appropriate.