Privacy Policy

Last updated: November 2025

Overview

This Privacy Policy describes how Blackboard ("we", "us", or "our") collects, uses, and shares information when you use Colab Cloud ("the Service"). We are committed to protecting your privacy and being transparent about our data practices.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name
  • Password (stored as a secure hash, never in plaintext)

Usage Data

We automatically collect certain information when you use the Service:

  • Device information (device name, type, operating system)
  • IP address (for security and abuse prevention)
  • Sync activity timestamps
  • Storage usage

Settings Data

When you use settings sync, we store your Co(lab) configuration data including preferences, themes, keybindings, and workspace settings.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and secure your account
  • Sync your settings across devices
  • Send you service-related communications (password resets, security alerts)
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

Data Storage and Security

Your data is stored on Cloudflare's global edge network infrastructure. We implement industry-standard security measures including:

  • TLS encryption for all data in transit
  • Bcrypt password hashing with high work factor
  • Secure token-based authentication
  • Regular security reviews

Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With third parties who help us operate the Service (e.g., Cloudflare for infrastructure, Resend for email delivery)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Your Rights

You have the right to:

  • Access: Request a copy of the data we hold about you
  • Correction: Update or correct your account information
  • Deletion: Delete your account and associated data
  • Portability: Export your settings data

To exercise these rights, please contact us at privacy@blackboard.sh.

Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • Personal information is deleted within 30 days
  • Settings and sync data are deleted immediately
  • Some data may be retained in backups for up to 90 days
  • We may retain anonymized, aggregated data indefinitely

Cookies and Tracking

We use only essential cookies required for the Service to function:

  • Authentication tokens (stored in localStorage)
  • Session management

We do not use tracking cookies or third-party analytics.

Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@blackboard.sh