Privacy Statement
Collab builds private spaces where we develop work with our clients. Confidentiality is part of how we work. This statement explains what information we hold, how we protect it, who helps us run the service, and what happens if something goes wrong.
Who we are
Collab ("Collab," "we," "us") is an integrated innovation and execution studio at 309 Starr Street, Brooklyn, NY 11237. This statement covers collab.build, the project spaces it opens, and the simulations and previews we share there (together, "the Service").
What we collect
- Account details: your name, email address, company and role, provided by you or by the person who invited you.
- Project content: comments, answers, questions, documents and files you share in a project space.
- Sign-in and security records: when you sign in, your IP address and browser type, and the actions you take, so we can protect accounts and investigate problems.
- Simulation data: names and choices entered while trying a simulation, such as a demo guest check-in. Guest details in simulations are deleted the day after the simulated visit.
- Cookies: we use only the cookies needed to keep you signed in and remember your preferences. We use no advertising or third-party tracking cookies.
How we use it
We use your information to run your project space, share work with you, respond to your messages, send the notifications you choose, keep the Service secure, and improve how we work together. We do not sell personal information, and we do not use it for advertising.
Confidentiality
Each project lives in its own private space, opened by invitation. Only the people invited to a project, and the Collab team members working on it, can see its contents. When we have a signed agreement or NDA with your organization, its confidentiality terms apply and take priority over this statement.
Who helps us run the Service
We rely on a small number of established providers, each bound by its own security and privacy commitments:
- Vercel hosts the websites and simulations.
- Supabase stores accounts, project records and documents, encrypted at rest.
- Resend delivers our emails, such as invitations and notifications.
- Google holds a backup copy of project documents in a restricted Collab drive that only Collab owners can access.
These providers process information on our behalf. They are not permitted to use it for their own purposes.
How we protect it
- Encryption in transit (HTTPS) and at rest.
- Access by invitation only, with separate access for each project.
- Document downloads through links that expire within a minute.
- Limits on repeated sign-in attempts, and records of who accessed what.
- Access for Collab team members only where their work requires it.
No online service can be made completely secure. We work to prevent problems, and we are prepared to respond quickly and openly if one happens.
If something goes wrong
If we learn of a security incident that affects your information, including an incident at one of the providers listed above, we will investigate, take steps to contain it, and notify affected clients without undue delay and as the law requires. We will tell you what happened, what information was involved, and what we are doing about it.
How long we keep it
We keep project information for as long as the project is active and for a reasonable period afterward for records and follow-up work, unless your agreement with us says otherwise. You can ask us to delete your information at any time. Backup copies are replaced on a rolling schedule.
Your choices
You can ask to see, correct, export or delete your information, and you can turn notifications on or off at any time. Write to info@collab.nyc and we will respond promptly.
Children
The Service is for professional use and is not intended for anyone under 16.
Changes
When we update this statement, we change the date at the top. If a change is significant, we let active clients know.
Contact
Collab, 309 Starr Street, Brooklyn, NY 11237 ยท info@collab.nyc