Privacy Policy

1. Who We Are

Colekte is a multi-tenant content management platform. The data controller for the platform is JRiSpace. You can reach us at privacy@jrispace.com or via https://jrispace.com.

2. Information We Collect

Account information. When you create an account — including via Google sign-in — we collect your name, email address, profile picture (if provided by Google), and authentication identifiers.

Content you create. Pages, posts, media, products, menus, and other content you publish through the platform.

Usage information. Log data such as IP address, browser type, device information, pages visited, and interactions with the Service.

Transaction information. When you sell through your site, we process order and payment information through our payment partners. Full payment card numbers are handled by our payment processors and are never stored on our servers.

Communications. Emails, support requests, and feedback you send us.

3. How We Use Your Information

• To provide, operate, and maintain the platform (hosting your site, serving visitors);
• To authenticate you and secure your account;
• To process transactions and billing;
• To respond to support requests;
• To improve the Service and develop new features;
• To send transactional communications (billing, security, service updates);
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use your content to train third-party models.

4. Google OAuth & API Data

Colekte offers "Sign in with Google" as a convenience. When you authenticate with Google, we request access to your basic profile information: your name, email address, and profile picture (Google OAuth scopes: openid, email, profile).

• We use this information solely to create and secure your Colekte account and to identify you when you sign in.
• We do not read, store, or process your Gmail, Drive, or other Google service data.
• We do not sell Google user data, and we do not use Google user data for advertising purposes.
• We do not share Google user data with third parties except as necessary to provide the Service (see Section 6).
• You can revoke Colekte's access at any time from your Google Account security settings. You can also unlink Google from your Colekte account in your account settings.

Colekte's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. Cookies & Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. Authentication cookies are necessary for the Service to function. You can control cookies through your browser settings, though disabling them may affect the Service.

6. How We Share Information

We share personal information only with service providers who help us operate the platform, under contracts that limit their use of your data:

• Supabase — database, authentication, and storage infrastructure;
• Stripe — payment processing;
• Cloudflare — DNS, CDN, and DDoS protection;
• Render — application hosting.

We may also disclose information when required by law, to protect our rights, or in connection with a merger or acquisition. We do not sell personal information.

7. Data Retention

We retain account and content data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 90 days, except where retention is required by law or necessary for legitimate business purposes (such as fraud prevention or tax records).

8. Your Rights & Choices

• Access & correction: you can view and update your account information at any time.
• Deletion: you can delete your account and content from your settings.
• Data portability: you can export your content using the platform's export tools.
• Marketing communications: you can opt out of non-transactional emails at any time.
• Google access: you can revoke Colekte's access from your Google Account settings.

Depending on your jurisdiction, you may have additional rights (e.g., under GDPR or similar laws). To exercise any right, contact us at privacy@jrispace.com.

9. Security

We protect your data with encryption in transit (TLS), encryption at rest, and strict access controls. Tenant data is isolated at the database level with row-level security, so no customer can access another customer's data. No method of transmission or storage is 100% secure, but we work continuously to protect your information.

10. Children's Privacy

Colekte is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

11. International Transfers

Our infrastructure is hosted in data centers operated by our service providers, which may be located outside your country. Where applicable, we rely on standard contractual clauses and other legal mechanisms to ensure your data receives adequate protection.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on our website or by email at least 14 days before they take effect. The "Last updated" date above reflects the most recent revision.

13. Contact Us

For privacy questions or requests, contact our team at privacy@jrispace.com or via JRiSpace — https://jrispace.com.