Privacy policy.

Introduction

Welcome to Recollect (recollect.so), a comprehensive bookmark, image, and document management platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

Information We Collect

Account Information

• Email Address: Required for account creation and authentication
• Password: Encrypted and securely stored for account access
• Display Name: Optional display name for your profile
• Username: Unique username for your account
• Profile Information: Any additional profile details you choose to provide

Content You Create

• Bookmarks: URLs, titles, descriptions, and metadata of saved bookmarks
• Files: Images, videos, documents, and other files you upload
• Categories: Custom categories and collections you create
• Tags: Custom tags you create and apply to content
• Notes and Descriptions: Any notes or descriptions you add to your content

Usage Information

• Activity Data: How you interact with the platform (searches, views, edits)
• Device Information: Browser type, operating system, device identifiers
• IP Address: For security and analytics purposes
• Session Data: Login sessions and authentication tokens

AI-Generated Content

• Image Captions: AI-generated descriptions of your images
• OCR Text: Text extracted from images using AI
• Content Analysis: AI analysis of your bookmarks and files
• Search Embeddings: Vector representations of your content for AI search

How We Use Your Information

Core Service Functionality

• Content Management: Store, organize, and manage your bookmarks and files
• Search and Discovery: Provide search functionality and content recommendations
• Collaboration: Enable sharing and collaboration features
• Synchronization: Keep your data synchronized across devices

AI and Automation Features

• Content Analysis: Use AI to analyze and categorize your content
• Image Processing: Generate captions and extract text from images
• Semantic Search: Provide AI-powered search capabilities
• Smart Organization: Suggest categories and tags for your content

Service Improvement

• Analytics: Understand how the service is used to improve functionality
• Performance Monitoring: Monitor service performance and reliability
• Error Tracking: Identify and fix technical issues
• Feature Development: Develop new features based on usage patterns

Communication

• Service Updates: Send important service notifications
• Collaboration Invites: Send invitations for shared categories
• Account Security: Notify you of security-related events

Information Sharing and Disclosure

Third-Party Service Providers

We use the following third-party services to provide our platform:

Supabase (Database and Authentication)

• Purpose: User authentication, data storage, and database management
• Data Shared: Account information, content data, usage analytics
• Location: Data stored in secure cloud infrastructure

Google Gemini AI

• Purpose: AI-powered features including image analysis, OCR, and semantic search
• Data Shared: Images, text content, and metadata for AI processing
• Processing: AI analysis is performed by Google's servers

Vercel (Hosting)

• Purpose: Application hosting and content delivery
• Data Shared: Application data, user interactions, performance metrics
• Location: Global content delivery network

Cloudflare (Storage and CDN)

• Purpose: File storage, image optimization, and content delivery
• Data Shared: Uploaded files, images, and content metadata
• Features: Image transformations and optimization

Framer (Website)

• Purpose: Marketing website and landing pages
• Data Shared: Website analytics and user interactions

Collaboration Features

• Shared Categories: Content in shared categories is visible to collaborators
• Public Categories: Content in public categories is accessible to anyone with the link
• Collaboration Invites: Email addresses are used to send collaboration invitations

Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Ensure user safety
• Respond to valid legal requests

Data Security

Security Measures

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Strict access controls and authentication
• Regular Audits: Security audits and vulnerability assessments
• Secure Infrastructure: Industry-standard security practices

Data Retention

• Account Data: Retained while your account is active
• Deleted Content: Permanently deleted from our systems
• Backup Data: Securely deleted according to our retention schedule
• Analytics Data: Anonymized and retained for service improvement

Your Rights and Choices

Access and Control

• View Your Data: Access all your stored information
• Edit Your Data: Modify your content and profile information
• Delete Your Data: Remove specific content or your entire account
• Export Your Data: Download your data in a portable format

Privacy Settings

• Public/Private Categories: Control visibility of your categories
• Sharing Controls: Manage who can access your shared content
• Collaboration Permissions: Control edit/view access for collaborators
• Account Deletion: Complete removal of your account and data

Communication Preferences

• Email Notifications: Control which emails you receive
• Collaboration Invites: Manage collaboration invitation settings
• Service Updates: Opt in/out of service update notifications

AI and Machine Learning

AI Processing

Your content may be processed by AI for features like:

• Image caption generation
• Text extraction from images (OCR)
• Semantic search and recommendations
• Content categorization suggestions

Data Used for AI

• Images: Processed to generate captions and extract text
• Text Content: Analyzed for semantic search and recommendations
• Metadata: Used to improve AI accuracy and relevance

AI Privacy

• Processing: AI processing is performed by Google Gemini
• Data Retention: AI processing data is handled according to Google's policies
• Opt-out: You can disable AI features in your account settings

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses
• Adequacy decisions
• Appropriate technical and organizational measures

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications for significant changes
• Providing notice through the application interface

Data Processing Lawful Basis (GDPR)

For users in the European Union, we process your personal data based on:

• Consent: For optional features and communications
• Contract Performance: To provide the services you've requested
• Legitimate Interest: For service improvement and security
• Legal Obligation: To comply with applicable laws

California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect
• Know whether we sell or disclose personal information
• Say no to the sale of personal information
• Access your personal information
• Request deletion of personal information
• Equal service and price

Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: hello@timeless.co
• Website: https://recollect.so/
• Address: Timeless Ventures Private Limited, Chennai, India

Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at: hello@timeless.co