Get Started

Privacy Policy

Last updated: January 27, 2025

Our Approach to Privacy

Collabraverse helps people create meaningful group gifts by collecting memories from friends and family and synthesizing them into personalized poems using AI. We take the trust you place in us seriously.

Here are a few things we believe:

  • We only collect information we actually need to provide the service.
  • Your stories and memories belong to you. We don't sell them or use them for advertising.
  • We use AI to create poems, not to profile you.
  • Each organization's data is physically isolated in its own database.
  • We aim for transparency. If you have questions, ask us.

Who We Are

Collabraverse is an AI-powered group gift platform. You can reach us at privacy@collabraverse.com for any privacy-related questions.

Information We Collect

Information You Provide

  • Account information: When you sign in, we receive your name and email address from our authentication provider (Kinde). We don't store passwords.
  • Organization details: When you create an organization, we store the organization name, code, and your selected timezone.
  • Celebration details: Gift title, recipient name and email, delivery date, selected poem style, and any custom prompts you provide.
  • Contributor information: Names and email addresses of people you invite to contribute memories.
  • Contributions (stories/memories): The text that contributors share via email in response to your invitations.
  • Feedback: If you submit feedback through our in-app feedback tool, we collect the content of your feedback, the page you were on, and basic device information (browser type, screen size) to help us understand and reproduce issues.

Information Collected Automatically

  • Authentication cookies: We use a single HTTP-only cookie to keep you signed in. We do not use tracking cookies, advertising cookies, or analytics cookies.
  • Server logs: Our infrastructure provider (Cloudflare) automatically logs request metadata such as IP addresses, timestamps, and request paths. These logs are retained for 7 days.

Information We Do Not Collect

We do not collect payment information (the service is free), location data beyond your chosen timezone, device identifiers, or biometric data. We do not use any third-party analytics services, advertising pixels, or session recording tools.

How We Use Your Information

We use the information we collect to:

  • Provide the service: Create celebrations, send invitation emails to contributors, collect memories, generate poems, and deliver the final gift.
  • Generate poems using AI: Contributor stories, the recipient's name, and your selected poem style are sent to our AI provider to synthesize a personalized poem. See the AI Processing section below for details.
  • Send transactional emails: Invitation emails to contributors, reminder emails, and the final poem delivery email.
  • Improve the service: Feedback you submit helps us identify bugs and improve the platform.
  • Maintain security: Detect abuse, prevent unauthorized access, and ensure service reliability.

We do not use your information for advertising, user profiling, or behavioral targeting. We do not sell your information to anyone.

AI Processing

Collabraverse uses AI (powered by Anthropic's Claude) to perform two functions:

  1. Email cleaning: When a contributor replies with their story via email, AI is used to strip quoted email history, signatures, and disclaimers, extracting only the meaningful content.
  2. Poem generation: Approved contributor stories are sent to the AI along with the recipient's first name and your selected poem style to synthesize a personalized poem.

The AI processes this information in real time and does not retain it for model training. We use Anthropic's API, which is governed by their privacy policy and API data usage policy. Anthropic's API terms state that data sent via the API is not used to train their models.

We log truncated versions of AI requests (limited to 500 characters) for debugging purposes. These logs are retained for 7 days.

How We Share Your Information

We share information only with the service providers necessary to operate Collabraverse:

  • Kinde (authentication) — Manages user accounts, sign-in, and organization membership. Receives your name and email. Kinde Privacy Policy.
  • Cloudflare (infrastructure) — Hosts our application, databases, email processing, and file storage. All data passes through and is stored on Cloudflare infrastructure. Cloudflare Privacy Policy.
  • Anthropic (AI processing) — Receives contributor stories and recipient names for poem generation. See AI Processing above.

We do not sell, rent, or trade your personal information. We may disclose information if required by law or to protect the rights, safety, or property of our users or the public.

Data Storage and Security

Multi-Tenant Isolation

Each organization on Collabraverse gets its own physically separate database and file storage. Your organization's celebrations, contributions, and poems are not accessible by other organizations.

Security Measures

  • All data is transmitted over HTTPS/TLS encryption.
  • Data at rest is encrypted by Cloudflare's infrastructure (D1 and R2).
  • Authentication tokens are stored in HTTP-only cookies, inaccessible to JavaScript.
  • API rate limiting prevents abuse (100 requests/minute general, 10/minute for AI operations).
  • Email reply tokens are randomized 12-character identifiers that contain no personal information.

Where Data is Stored

Data is stored on Cloudflare's global infrastructure. Depending on Cloudflare's routing, your data may be processed in various locations worldwide. Anthropic processes AI requests on their infrastructure in the United States. By using Collabraverse, you consent to this cross-border transfer of data.

Data Retention

  • Celebrations and associated data (contributors, contributions, poems, emails): Retained until you delete the celebration. Deleting a celebration permanently removes all associated data, including generated poems and PDFs.
  • Organization data: Retained for the lifetime of the organization.
  • Account data: Managed by Kinde. You can delete your account through Kinde's account management.
  • Feedback: Retained indefinitely for platform improvement unless you request deletion.
  • Infrastructure logs: Retained for 7 days, then automatically deleted.
  • AI processing logs: Truncated prompt/response logs are retained for 7 days, then automatically deleted.

Your Rights

Depending on where you live, you may have specific rights regarding your personal data. These may include:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate information.
  • Deletion: Request deletion of your personal data. You can delete your celebrations and all associated data at any time through the application. For account deletion, contact us or manage it through Kinde.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing of your personal data in certain circumstances.
  • Restriction: Request that we limit how we use your data.

To exercise any of these rights, contact us at privacy@collabraverse.com. We will respond within 30 days.

Contributors and Non-Users

When someone invites you to contribute a memory, we receive your name and email address from the person organizing the gift. We use this information solely to send you an invitation email and to associate your contribution with the celebration.

As a contributor, you can contact us at privacy@collabraverse.com to request access to or deletion of your information. The organizer can also remove you from a celebration at any time.

Children's Privacy

Collabraverse is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@collabraverse.com and we will delete it.

Cookies

We use a single essential cookie (access_token) to maintain your authenticated session. This cookie is:

  • HTTP-only (not accessible to JavaScript)
  • Secure (only sent over HTTPS)
  • Strictly necessary for the service to function

We do not use any analytics cookies, advertising cookies, or third-party tracking cookies. Because we only use strictly necessary cookies, no cookie consent banner is required.

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page with a revised "Last updated" date. Your continued use of Collabraverse after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

privacy@collabraverse.com