Collabird

Privacy Policy

Working draft – this English text is a translation for convenience and is still under review before broad use. It is not legal advice, and the German version is the authoritative one and prevails in case of any discrepancy.

1. Data controller

Collabird is a project portfolio with audio references, operated as a sole proprietorship based in Switzerland. The party responsible for processing personal data is:
⟨ Name / sole proprietorship — fill in ⟩, ⟨ Address — fill in ⟩, Switzerland
Email: ⟨ Email address — fill in ⟩

The Swiss Federal Act on Data Protection (revDSG) applies. For users in the EU/EEA, the GDPR (DSGVO) may also apply.

2. What data we process

  • Account: email address and password (via our service provider Supabase; password encrypted).
  • Profile (optional): display name, role, short description, location, profile picture, focus areas and profile links (e.g. LinkedIn).
  • Project content: the text and images you enter for your projects. If you create a project in conversation, we also store the conversation history (your answers and the questions) so you can continue an unfinished conversation – even on another device – and to improve the interview questions.

Profile and project content only becomes publicly visible once you publish a project and share the link. Be mindful of which personal data you put into text and images.

3. Audio references from third parties

You can ask people you have worked with for a short voice reference. They do not need an account. You create a request (with a name and the type of collaboration) and send the generated recording link yourself; it is valid for 14 days and can be used only once.

During recording, the following are processed: the voice recording (max. 60 sec.), the displayed name, optionally a voluntary LinkedIn confirmation, and technical details (duration, waveform). Once the project is published, the recording appears on the public project page and can be heard by anyone with the link; the audio files are held in non-public storage and are served only via short-lived signed links (around one hour).

The basis is the consent of the person recording, given by making the recording. The requesting person can remove the recording at any time; reference givers can request deletion via the requesting person or directly from us (Contact).

4. Processing by AI and transcription

To help with wording, we transmit text you have written yourself (interview answers, notes to be revised, information about skills, published project content) to the interface of Anthropic (Claude, servers in the USA).

Audio references are automatically converted to text (transcription) so they are readable, quotable, accessible and searchable. For this, the recording is transmitted to OpenAI (transcription), servers in the USA; the subsequent clean-up and the selection of a quote are handled by Anthropic (see above). Alongside the cleaned-up version, an unaltered raw transcript is also stored. The content itself is not changed.

5. Service providers and disclosure to third parties

We share personal data with service providers that process it on our behalf (processors, Art. 9 revDSG):

  • Supabase – database, storage, sign-in. Region: ⟨ Region — fill in ⟩.
  • Vercel – hosting. Region: ⟨ Region — fill in ⟩.
  • Anthropic – AI text features (USA).
  • OpenAI – transcription of the audio references (USA).

When disclosing data to the USA, we ensure an adequate level of protection through appropriate safeguards: ⟨ Safeguards — fill in ⟩.

We do not sell your data and do not pass it on to third parties – other than the service providers named above. However, we reserve the right to disclose personal data to third parties in future or to transfer it to a successor as part of a business transfer. Where consent is required for this – in particular for the voice recordings of reference givers – we obtain it beforehand.

6. Cookies and statistics

We use only technically necessary cookies for sign-in – no tracking or marketing cookies. For basic reach measurement we record how often a link is opened and a recording is played (referrer and rough device class). In doing so we store no IP address and no full browser identifier.

7. Storage and your rights

We store personal data for as long as it is needed for the purpose – as a rule until you delete it or your account. Recording links expire after 14 days; signed audio links are valid for around one hour. We store a project’s conversation history for as long as the project exists. You can delete it at any time in the project’s editor; it is also deleted from our database together with the project or your account.

Under the revDSG you have the right to access, rectification and erasure, and to obtain/transfer your data; you can withdraw consent and lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC). You can delete your account and all its data yourself in your profile (confirm with «DELETE»).

8. Changes

We update this policy when our processing changes. Last updated: ⟨ Date — fill in ⟩.