Privacy Policy

1. Who we are

Kollabit is a software studio operating from Toronto, Ontario, Canada.

Our Privacy Officer is Stainley Frank, reachable at the address above.

2. What we collect

Information you give us directly

• Name, email address, phone number and company name when you submit a form, book a call, or email us
• Your website URL and details about your business when you request a demo
• Project requirements, files and content you share with us during a project
• Billing information when you pay us — see section 4; we never see your full card number

Information we collect automatically

• IP address, browser type, device type, and operating system in infrastructure and security logs
• Pages visited, page-performance data, and referring website in aggregate analytics
• Strictly necessary security technologies and cookie-free analytics — see section 6

Information we encounter inside your systems

If you hire us and give us access to your existing website, CRM, email or hosting, we may encounter personal information belonging to your clients.

We treat that data as yours, not ours. We access only what the work requires, we do not copy it out of your systems, and we delete any local copies when the project ends.

3. Where your data is stored

Some of the services we use store or process data on servers outside Canada, including in the United States. Your information may therefore be subject to the laws of those countries, including lawful access requests by foreign courts and government agencies.

We are telling you this plainly because you should know before you fill in a form.

If you need your project data kept in Canada, tell us before the project starts. We can usually accommodate it.

4. Payments

Payments are processed by Stripe. Kollabit does not collect, see or store your full credit card number. Stripe handles that directly and is PCI-DSS compliant.

We receive only a confirmation, the amount, the last four digits of your card, and your billing name and email.

Read Stripe's privacy policy.

5. Why we collect it

We use your personal information to:

• Respond to your enquiry and prepare a proposal or demo
• Deliver the work you hired us to do
• Invoice you and process payment
• Send you project updates and, where permitted, occasional relevant emails about our services
• Improve our website and understand which pages are useful
• Meet our legal, tax and accounting obligations

We do not sell your personal information. We do not rent it, trade it, or share it with data brokers. There is no version of our business where that happens.

6. Cookies and analytics

Kollabit does not use cookies or local storage to track people for analytics. We useCloudflare Web Analytics to understand aggregate traffic and page performance. Cloudflare states that this service does not collect or use visitors' personal data, track individuals across websites, or use cookies, local storage, or fingerprinting for analytics.

You can block or delete cookies in your browser settings. Blocking a strictly necessary security cookie may prevent part of the site from working.

7. Cold email and CASL

If you received an email from us and never gave us your address, here is exactly how that happened and what your rights are.

Canada's Anti-Spam Legislation (CASL) permits commercial email where a business email address is conspicuously published — for example on your public business website — the publication is not accompanied by a statement that you do not wish to receive commercial messages, and the message is relevant to your business role.

We only contact businesses on that basis. Every email we send includes our identity, a physical mailing address, and a working unsubscribe link.

To stop hearing from us: click unsubscribe in any email, or write toprivacy@kollabit.ca. We action removals within 10 business days, usually the same day. We do not require a reason and we will not email you to ask why.

8. AI tools

We build using commercial AI development tools from Anthropic andOpenAI. Being straight with you about what that means:

• We may process project content — your copy, your requirements, your specifications — through these tools while building
• We use commercial, business, enterprise, or API services that do not use customer inputs and outputs to train their models by default; we do not opt in to model training
• We do not put your clients' confidential information, personally identifying case data, or privileged material into these tools
• If your project involves confidential or regulated data, tell us at kickoff and we will scope the work so that data never enters a third-party AI tool

If you would prefer we use no AI tooling on your project at all, say so. It will cost more and take longer, and we will quote it honestly.

9. Who else touches your data

We use third-party providers to run our business. Each receives only what it needs.

We may also disclose information where required by law, court order, or lawful government request, or to protect our legal rights.

10. How long we keep it

11. Your rights

Under PIPEDA you can:

• Access the personal information we hold about you
• Correct anything inaccurate or incomplete
• Withdraw consent to our use of your information, subject to legal and contractual limits
• Ask us to delete your information where we are not legally required to keep it
• Complain to us — and if we do not resolve it, to the Office of the Privacy Commissioner of Canada

Email privacy@kollabit.ca. We respond within30 days, subject to extensions permitted by PIPEDA. There is no fee.

We may ask you to verify your identity before releasing information. That protection is for you, not us.

12. Security

We use HTTPS, encrypted storage, access controls, two-factor authentication on business accounts, and least-privilege access to client systems.

No system is perfectly secure and we will not pretend otherwise. If a breach occurs that creates a real risk of significant harm, we will notify affected individuals and report it to the Privacy Commissioner as PIPEDA requires.

13. Children

Our services are for businesses. We do not knowingly collect personal information from anyone under 16. If you believe we have, email us and we will delete it.

14. Changes

We may update this policy. The “last updated” date at the top always reflects the current version.

Material changes affecting active clients will be emailed directly, not quietly published.

15. Contact

Questions about this page? Email us — we answer within two business days.