Legal
Privacy Policy
Last updated 28 August 2026. This explains what Colabrix collects, why, and what you can do about it.
Who we are
Colabrix Technologies (“Colabrix”, “we”, “us”) provides a sprint delivery tool at colabrix.in. We are based in Bengaluru, India. For any privacy question, write to privacy@colabrix.in.
What we collect
- Account data — your email, password (hashed), name, and username. Optionally a profile photo, links (LinkedIn, GitHub, X), a short quote, presence status, and a phone number.
- Workspace content — organizations, memberships and roles, invitations, sprints, stories, tasks, comments, time logs, attachments, and the activity log your team generates.
- Billing data — your plan, billing cycle, and activation records. Card details are handled by our payment processor and are never stored by us.
- Technical data — IP address, user agent, and session metadata, used to secure your account and let you manage signed-in devices.
Your phone number is private by default
A phone number you add is never returned in any API response or shown to other members. Another member can request access; you approve or decline. Until you approve, it stays hidden.
How we use it
- To run the product — authentication, workspaces, sprints, and the features you use.
- To send transactional email — verification links, invitations, assignment and mention notifications, and sprint updates.
- To secure accounts — detecting refresh-token reuse, rate limiting, and abuse prevention.
- To operate billing and enforce plan limits.
We do not sell your data, and we do not use your workspace content to train models.
Processors we rely on
- PostgreSQL & Redis hosting — primary data storage and caching.
- Resend — transactional email delivery.
- ImageKit — storage and delivery of images you upload (avatars, org logos, task attachments).
- Stripe — payment processing.
Retention
Workspace content is kept while your organization is active. Deleting a record soft-deletes it; the activity log and billing records are append-only and retained for audit. Closing your account removes your personal profile data within 30 days, except where we must keep records to meet a legal obligation.
Your rights
You can access, correct, export, or delete your personal data. Email privacy@colabrix.in and we will respond within 30 days.
Changes
If we make a material change we will notify account owners by email and update the date at the top of this page.
Contact
Colabrix Technologies, Indiranagar, Bengaluru, Karnataka 560038, India. Email privacy@colabrix.in.