Effective Date: August 11, 2026 | Last Updated: August 11, 2026
This document is a working draft prepared for legal review before publication — see the note at the bottom of this page.
Colony ("Colony," "we," "us," or "our") is a product of eOTP, LLC, a United States limited liability company, operating the website colonys.io and the Colony CRM platform. We serve business customers ("Customer," "you") located anywhere in the world. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have.
Colony is a business-to-business (B2B) service. It is not directed at, and we do not knowingly collect personal data from, individual consumers acting outside a business capacity, or from children.
Certain Colony features (for example, AI-generated pages and AI-assisted content editing) send relevant content to third-party AI providers — currently Anthropic (Claude) and, for select features, OpenAI — solely to generate the response you requested.
We do not use your data, or your customers' data, to train AI models — ours or any third party's. Data sent to an AI provider is used only to produce your requested output and is handled under that provider's business/API terms, not their consumer product terms.
We do not sell or rent your data, or your customers' data, to anyone, for any purpose. We share information only as needed to run the service, with the following categories of service providers ("sub-processors"), each bound by contract to protect your data and use it only to provide their service to us:
| Provider | Purpose |
|---|---|
| Anthropic | AI content generation (Claude) |
| OpenAI | AI content generation (select features) |
| Meta Platforms, Inc. (WhatsApp Business Platform) | Sending/receiving WhatsApp messages on your behalf |
| LogicSMS | SMS and voice call delivery |
| Mailgun | Transactional and (opt-in) marketing email delivery |
| Hetzner | Application hosting and data storage |
We may also disclose information if required by law, legal process, or to protect the rights, property, or safety of Colony, our customers, or others.
As between you and Colony, you own the business data you input into the platform (your leads, customers, tickets, and related records). We process it on your behalf, as a data processor/service provider, to operate the service for you — not as our own asset to use, share, or sell independently of providing the service.
Where you connect a WhatsApp Business number through Colony, the following apply in addition to the rest of this policy:
SMS and voice call features in Colony are provided through LogicSMS. Use of these features is also governed by LogicSMS's own Terms of Service and Privacy Policy, which take precedence for the handling of SMS/voice content and telephony data specifically. You are responsible for obtaining valid consent from your recipients before sending SMS or making calls to them, including compliance with TCPA and equivalent rules wherever your recipients are located.
Colony currently sets only strictly-necessary cookies required for the service to function: authentication, session state, and CSRF protection. These do not require opt-in consent under GDPR/ePrivacy-style rules, since they are essential to providing the service you requested.
We may in the future add an analytics/marketing tag (such as Google Tag) for our own marketing purposes. If and when we do, this policy will be updated first and, where required, you will be asked for consent before any non-essential cookie is set.
We retain your account and business data for as long as your account is active. If you cancel or delete your account, we retain the data for up to 30 days to allow for recovery in case of accidental deletion, after which it is permanently deleted from our production systems (backups age out separately on their own retention schedule). You may request earlier deletion — see Section 12.
Colony is hosted with Hetzner. As a US company serving customers globally, your data may be processed and stored in a different country than the one you or your customers are located in. We take reasonable steps to protect data regardless of location, consistent with this policy.
Depending on where you're located, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the email below.
We will only send you marketing or product-update emails if you opt in. You can opt out at any time using the unsubscribe link in any such email, or by contacting us directly. Service, security, and billing communications are not marketing and cannot be opted out of while you have an active account.
Colony is a B2B service not directed at children, and we do not knowingly collect personal data from anyone under 18.
We may update this Privacy Policy from time to time. We'll update the "Last Updated" date above, and for material changes we'll make reasonable efforts to notify active account holders directly.
Questions about this policy or your data: info@colonys.io
Drafting note: this policy reflects Colony's practices as described to date and has not yet had a legal review. Known open items before publication: (1) eOTP, LLC is a placeholder entity pending registration of Colony's own LLC — update the entity name here once that's final; (2) the retention period (30 days) and any state-specific disclosures (e.g. CCPA/CPRA for California users) should be confirmed with counsel; (3) this page should be linked from Sign Up / footer once approved.