Privacy Policy

Colin connects engineering students with working engineers for short video conversations. To do that we need some information about you. This page says what we collect, why, who else handles it, and how to have it deleted. We don't sell your information, and we don't use it for advertising.

What we collect

• Your name, email address, and password (stored only as a secure hash, never readable by us).
• Whether you're a student or an engineer, and your field of engineering.
• Your timezone. For students, your LinkedIn profile link, and your school and graduation year if you add them.
• For engineers, the public profile you fill in: headline, company, years of experience, bio, topics, and LinkedIn link.
• The times you say you're available.
• Which version of our Terms, this Privacy Policy, and (for engineers) the Engineer Acknowledgment you agreed to, and when.
• Your sessions: who they're with, when, their status, and any note a student adds to a request.
• When you press Join and "I've left the call" on a session, so we can settle questions about who showed up. We don't record the call itself.
• Payment records: the amount, whether it was paid or refunded, and Stripe's reference numbers. Your card details go straight to Stripe and never touch our servers.

Security records

• To stop people guessing passwords or flooding someone's inbox, we count attempts to sign up, log in, and reset a password. We store a scrambled, one-way code made from your email address or IP address, not the address itself, and delete it after 24 hours.
• When you choose a password, we check it against a public list of passwords exposed in data breaches. Only the first five characters of a one-way code made from your password leave our server, never the password.

Who sees what

• Students can see an active engineer's public profile and open times. They can't see an engineer's email address.
• An engineer can see a student's name, field, and school only once that student has requested a session with them, and from then on they can also see that student's LinkedIn link.
• The founder can see account and session details to match people, run sessions, and handle problems, and gets an email with your name, email, field, and role when you sign up.

Services that handle your data for us

• Supabase stores your account and profile.
• Stripe processes payments and refunds.
• Resend delivers our emails and keeps a log of what was sent to whom.
• Vercel hosts the site and measures page visits without cookies or personal identifiers.

Each one handles your data only to provide its service to us.

Cookies

We use cookies only to keep you signed in. We don't use advertising or tracking cookies.

Your choices

• You can see and change your profile and availability any time from your dashboard.
• You can delete your account from Settings. That permanently removes your profile, availability, sessions, and agreement records from Colin. Stripe keeps its own records of past payments, as the law requires, and past emails stay in our email provider's logs.
• For a copy of your information, or anything else about your data, email support@colinchats.com.

Who can use Colin

Colin is for people 18 and over.

Changes

If we change this policy in a way that matters, we'll change the date at the top and ask you to agree to the new version the next time you log in.