Privacy Policy

Last updated: August 2026

This policy describes how Colen ("Colen", "we", "us") collects, uses, and protects your information when you use our website-generation service.

1. Information We Collect

We collect: your email address and name (for account creation via Google sign-in), your phone number (for one-time verification of business ownership), and business information you provide via a Google Maps link or direct input (business name, address, hours, photos, menu, and similar public listing data) used to generate your website.

If phone verification isn't possible, we also collect the name, email, optional phone, reason, and a proof-of-ownership document you upload (for example a utility bill) so we can verify you own the business you're claiming. The proof file is stored privately and deleted within 14 days at the latest — sooner if we approve or reject your request before then.

2. How We Use Your Information

Your information is used to operate, maintain, and improve the Colen service: authenticating your login, verifying you are authorized to claim a business listing, and generating your website's copy and photo selection.

3. Phone Verification (SMS/Voice)

If you verify a business by phone, we send a one-time passcode by SMS or automated voice call. This is used strictly for one-time identity verification — we do not send marketing messages to this number. Message and data rates from your carrier may apply. We do not use this number for any purpose beyond verifying the specific claim request.

4. AI-Assisted Content Generation

We use trusted third-party AI providers to help draft website copy and select photos from your business listing. These providers process data on our behalf and do not use it to train their own models under our terms with them.

5. Third-Party Service Providers

We do not sell your personal data. We share data only with the trusted service providers needed to run Colen — including hosting, authentication, AI content generation, and communications providers — each contractually or by policy bound to safeguard your data and use it only to provide their service to us.

6. Website Analytics

Colen runs its own aggregate analytics for websites generated with Colen. No analytics identifiers are stored in cookies, local storage, or session storage on these public websites. We record pageviews, an estimated anonymous visitor count, traffic source, and use of call, directions, order, and reservation controls. We also use technical request data, including the network address, to estimate country and region/state. The business owner does not see the raw network address or an individual visitor profile. Events are separated by the generated site's internal business identifier. Details are in our Cookie Notice.

7. International Data Transfers

Our service providers may process data outside your country of residence. By using Colen, you consent to this transfer, which is necessary to provide the service.

8. Data Retention

We retain your account and business data for as long as your account is active. If you delete your account, we remove your personal data and generated site content within 30 days, except where we're required to keep records for fraud prevention or legal compliance. If a Pro subscription lapses, your data and site are not deleted for non-payment alone — see our Terms for what happens to your site.

9. Data Security

We implement industry-standard security measures — including encryption in transit, access controls, and secret management — to protect your account and data from unauthorized access. No system is perfectly secure, and we cannot guarantee absolute security.

10. Your Rights

Regardless of where you live, you may request to access, correct, export, or delete your personal data at any time by contacting contact@colen.app. We will respond within 30 days.

If you are in the EU/UK (GDPR): our legal basis for processing is performance of a contract (running your site) and legitimate interest (verification and security). You have the right to access, rectify, erase, restrict, or port your data, to object to processing, and to lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA): we do not sell or share your personal information for cross-context advertising. You have the right to know what personal information we hold, to request deletion, and to non-discrimination for exercising these rights.

11. Changes to This Policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above; continued use of Colen after a change means you accept the revised policy.

12. Contact

Questions about this policy or your data: contact@colen.app.