Privacy Policy

Who we are

Colabrix Technologies (“Colabrix”, “we”, “us”) provides a project management tool at colabrix.in. We are based in Bengaluru, India. For any privacy question, write to info@colabrix.in.

What we collect

• Account data — your email, password (stored only as a hash), name, and username. If you sign in with Google, we receive your name, email address and profile picture from Google. Optionally you can add a profile photo, links (LinkedIn, GitHub, X), a short quote, a presence status, and a phone number.
• Workspace content — organizations, memberships and roles, invitations, projects, issues and sub-issues, stories, sprints, milestones, comments, attachments, and the activity log your team generates.
• Brixi — the messages you send to Brixi, its replies, anything you ask it to remember, and usage counts (how many messages, and which model handled them).
• Support — the tickets and messages you send to our support team, and the answers we give.
• Billing data — your organization's plan, billing cycle, seat count, coupon redemptions and activation records. We never store card details. When card payments open, they will be handled by a payment processor.
• Technical data — IP address, user agent, and session metadata, used to secure your account and let you manage signed-in devices.
• Website data — when you visit colabrix.in we record the page, the referring site, campaign tags in the link, a random visitor ID kept in your browser, a hashed version of your IP address, your approximate location (country, region, city) and your browser. We use it to understand how the site is used.
• Waitlist and contact forms — the email, name and message you submit.

Your phone number is private by default

A phone number you add is never returned in any API response or shown to other members. Another member can request access; you approve or decline. Until you approve, it stays hidden.

How we use it

• To run the product — authentication, workspaces, sprints, and the features you use.
• To send email — verification links, a welcome message, invitations, assignment and mention notifications, digests, and replies to support. You can turn assignment and mention emails off in your notification settings.
• To secure accounts — detecting refresh-token reuse, rate limiting, and abuse prevention.
• To operate billing and enforce plan limits.
• To answer support requests, and to improve our support answers from past replies.

We do not sell your data, and we do not use your workspace content to train models.

AI features and your data

Brixi and our other AI features work by sending your message, and the workspace details needed to answer it (for example issue titles, descriptions and comments), to an AI provider. By default this is Groq, with OpenAI as a backup. If your organization adds its own OpenAI key, requests use that key instead, and the key is stored encrypted. Support search uses Google's embedding service on ticket text. These providers process the text only to return a result. Do not put information in Colabrix that you are not willing to have processed this way.

Processors we rely on

• Hosting for PostgreSQL & Redis — primary data storage and caching.
• Resend — email delivery.
• ImageKit — storage and delivery of images you upload (avatars, organization logos, issue attachments).
• Groq and OpenAI — AI features such as Brixi.
• Google — sign-in with Google, and embeddings for support search.
• A payment processor — card payments, once they are available.

Cookies and browser storage

Signing in sets one essential cookie that keeps you signed in and cannot be read by scripts — this one is required for the product to work and is not optional. We also keep preferences such as your theme and view choices in your browser. On the public website (colabrix.in, not the signed-in app), a banner asks for your consent before we set the random visitor ID described above or record any page view — decline and we don't track your visit. You can change your choice any time by clearing your browser's site data for colabrix.in. We do not use advertising cookies or trackers.

If you are under 18

Colabrix is a workplace tool and is not directed at, or knowingly offered to, anyone under 18. If you believe a child has created an account, contact us using the details below and we will remove it.

Retention

Workspace content, Brixi conversations and support tickets are kept while your organization is active. Deleting a record soft-deletes it; the activity log and billing records are append-only and retained for audit, since they exist to prove what happened, not to describe you. Delete your account from Account → Danger zone in the app, any time, with no waiting period — your profile is anonymized immediately (name, photo, links, phone, bio all cleared; your email is replaced so no one can reuse it). Organizations you own are deleted along with the account unless you transfer ownership first. Records we must keep to meet a legal obligation (for example billing records) are the one exception and are kept only as long as that obligation requires.

Your rights

You can access, correct, download a copy of, or erase your personal data, and withdraw any consent you've given (such as the website cookie banner) at any time. Deleting your account yourself (Account → Danger zone) is the fastest way to exercise the right to erasure. For anything else — access, correction, a copy of your data, or a question about how we're handling a request — email info@colabrix.in and we will respond as soon as we reasonably can.

Grievance Officer

If you have a complaint about how we've handled your personal data and aren't satisfied with our response, you can write to our Grievance Officer at info@colabrix.in. If you remain unsatisfied, you have the right to file a complaint with the Data Protection Board of India.

Changes

If we make a material change we will notify account owners by email and update the date at the top of this page.

Contact

Bengaluru, Karnataka, India. Email info@colabrix.in.