Privacy Policy

Last updated: September 2026

This policy describes how Colen ("Colen", "we", "us") collects, uses, and protects your information when you use our website-generation service.

1. Information We Collect

We collect: your email address and name (for account creation via Google sign-in), and business information retrieved when you search and select your business (business name, address, hours, photos, reviews, menu, and similar public listing data) used to generate your website.

2. How We Use Your Information

Your information is used to operate, maintain, and improve the Colen service: authenticating your login, and generating your website's copy and photo selection.

3. AI-Assisted Content Generation

We use trusted third-party AI providers to help draft website copy and select photos from your business listing. These providers process data on our behalf and do not use it to train their own models under our terms with them.

4. Third-Party Service Providers

We do not sell your personal data. We share data only with the trusted service providers needed to run Colen — including hosting, authentication, AI content generation, and communications providers — each contractually or by policy bound to safeguard your data and use it only to provide their service to us.

We use Cloudflare Turnstile to protect our forms from automated abuse. Turnstile collects limited technical information from your device (such as browser characteristics and interaction signals) to distinguish humans from bots. See the Cloudflare Turnstile Privacy Addendum for details.

5. Website Analytics

Colen runs its own aggregate analytics for websites generated with Colen. No analytics identifiers are stored in cookies, local storage, or session storage on these public websites. We record pageviews, an estimated anonymous visitor count, traffic source, and use of call, directions, order, and reservation controls. We also use technical request data, including the network address, to estimate country and region/state. The business owner does not see the raw network address or an individual visitor profile. Events are separated by the generated site's internal business identifier. Details are in our Cookie Notice.

6. International Data Transfers

Our service providers may process data outside your country of residence. By using Colen, you consent to this transfer, which is necessary to provide the service.

7. Data Retention

We retain your account and business data for as long as your account is active. If you delete your account, we remove your personal data and generated site content within 30 days, except where we're required to keep records for fraud prevention or legal compliance. If a Pro subscription lapses, your data and site are not deleted for non-payment alone — see our Terms for what happens to your site.

8. Data Security

We implement industry-standard security measures — including encryption in transit, access controls, and secret management — to protect your account and data from unauthorized access. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your Rights

Regardless of where you live, you may request to access, correct, export, or delete your personal data at any time by contacting contact@colen.app. We will respond within 30 days.

If you are in the EU/UK (GDPR): our legal basis for processing is performance of a contract (running your site) and legitimate interest (account authentication, fraud prevention, and service security). You have the right to access, rectify, erase, restrict, or port your data, to object to processing, and to lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA): we do not sell or share your personal information for cross-context advertising. You have the right to know what personal information we hold, to request deletion, and to non-discrimination for exercising these rights.

10. Changes to This Policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above; continued use of Colen after a change means you accept the revised policy.

11. Contact

Questions about this policy or your data: contact@colen.app.