Privacy

When you sign in with Google or Microsoft, Collie keeps your name, email address and time zone, and your firm's name and domain. When you link Slack or WhatsApp, it keeps your Slack account or phone number. The access Google or Microsoft grants is stored encrypted (AES-256-GCM) and used only as described below.

Collie reads your calendar to find times that work, notice clashes, and book or move meetings as you or your firm's rules allow. It keeps a copy of your next two days and of the meetings it books. When your firm links with a client's firm on Collie, the two share only when people are busy and their working hours, never what the meetings are.

Collie searches your email for receipts from the past week and reads each match once. For a receipt it keeps the merchant, amount, date and category, and for a ride where it started and ended. When you say so, or your firm's rules allow it, it forwards the receipt from your mailbox to your firm's expense inbox. For a message that is not a receipt it keeps only a note that it looked, not the message.

Collie sends email from your mailbox only to forward a receipt, send an invite you ask for, or send a note for one of your errands. A note to anyone outside your firm always waits for your approval.

Collie keeps your messages to it in the app, Slack or WhatsApp, the errands it works on and each step it takes, and your answers to its questions. Your firm's admins see what Collie did, asked and sent for each person in the activity log. They do not see your inbox or the rest of your calendar.

Your context contains connected pages about people, projects and topics, with evidence from the files, notes and links you add. When Learn from conversations is on, Collie also uses your conversations to update these pages. It maintains a short overview that it reads for your tasks, then opens relevant pages as needed. Your context is private to you and your Collie. Other people's Collies cannot read it, and admins cannot open your context, overview or sources in the firm console.

You can inspect your context and its sources under What Collie knows. Turn Learn from conversations off in Settings to stop automatic updates, including queued learning. Existing context and conversation history stay saved, and you can still add, edit or remove supplied sources. Turning it on again starts with new conversations; it does not learn from conversations during the opted-out period. Collie does not scan sent email or your calendar to build this context.

Everyone in your firm and their Collies can read organization context. Admins construct it from the documents, notes and links they explicitly supply. Conversations and personal context never automatically become organization context. Linked pages do not grant access to private information. A supplied link is a saved snapshot; an admin can refresh it when the page changes. Supplying a document does not change the firm's approval policies.

The hosted app runs on Vercel with a Neon database. The deployment's configured model receives requests, the relevant context for tasks, receipt text and supplied source text needed for indexing. It can use Anthropic's Claude, Claude through OpenRouter when your firm connects it, or an OpenAI-compatible model server. The provider and its data handling terms depend on the deployment and your firm's connection. Collie calls Google, Microsoft, Slack and Meta (for WhatsApp) for the accounts you or your firm connect. We do not sell your data or use it for advertising.

Collie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Collie keeps this data while your firm uses it. You can stop it reading your calendar and email at any time by removing its access in your Google or Microsoft account. Your firm's admin can turn your seat off, and we delete your data on request.

Removing a context source removes information supported only by that source and rebuilds the affected pages and overview. The same fact can remain if another source supports it. Source deletion does not erase the original conversation, errand or action history. Future runs stop replaying context retrieved under the old graph revision.