Privacy Policy

1. Who we are

The data controller is ReviseTouch ("we", "us"), the operator of Colpan and colpan.app. For privacy matters contact support@colpan.app.

2. What we do NOT collect

• Your documents and their contents — indexing, full-text search, preview, OCR and conversion run locally. Document content is not transmitted to us.
• Your indexes, search queries and previews — stored only on your device.
• Website tracking — colpan.app uses no analytics, no advertising trackers and no tracking cookies. Your browser's localStorage keeps only your theme and language preference. During a Google sign-in for checkout, the tab's sessionStorage briefly keeps the sign-in result and the plan you chose; it is used only to start that checkout and is cleared when you close the tab.
• Payment card data — handled entirely by Paddle (Section 4); we never see it.

3. What we do collect

a) Purchase and subscription data

When you subscribe, Paddle (our merchant of record) processes your order and shares with us the data needed to fulfil it: your e-mail address, subscription/transaction identifiers, plan and subscription status. Paddle is an independent controller for payment processing under its own privacy policy.

b) License records

To operate your subscription we store: your license key, e-mail address, subscription status and plan, device seat records (a random per-install identifier — not a hardware fingerprint — an optional device name such as the computer name, and activation time), an encrypted AI access credential, and aggregate AI usage totals (a spend figure — never the content of your prompts).

c) Google sign-in

When you sign in with Google, on colpan.app before checkout or in the app to activate a subscription, trial or gift code, Google shares your Google account identifier, e-mail address and name with us. We use them only to link your purchase or license to you and to stop the same account from claiming a trial or gift more than once. We do not receive your Google password or any other Google data.

d) Support correspondence

If you e-mail us, we process your address and message to answer you.

4. Managed AI processing

When you use the managed AI feature, the text you choose to send (your prompt and the document excerpts you attach) is transmitted to OpenRouter, Inc. (USA), which routes it to the AI model provider serving your request. Before sending, Colpan's PII guard masks detected personal data on your device, and you can review what will be sent; the guard is a best-effort tool, and you decide what leaves your machine. We do not store your prompts or AI responses on our servers. If you use BYOK or local models instead, your AI traffic does not involve our services at all.

5. Purposes and legal bases

• Providing the Service (license management, activation, seat management, AI allowance) — performance of a contract.
• Sending your license and service e-mails — performance of a contract.
• Preventing fraud and abuse, securing the Service — legitimate interests.
• Compliance (tax, accounting, legal claims) — legal obligations and legitimate interests.

6. Recipients and processors

We do not sell personal data and do not share it with anyone else except where required by law.

7. International transfers

Some providers above process data outside your country, including in the USA. Where GDPR or similar laws apply, transfers rely on appropriate safeguards such as the providers' standard contractual clauses or applicable adequacy frameworks.

8. Retention

• License records — for the life of your subscription and afterwards only as long as needed for tax, accounting and legal-claim purposes.
• Support e-mails — up to 24 months after the matter is closed.
• On a verified deletion request we delete personal data we are not legally required to keep.

9. Security

We apply reasonable technical and organizational measures appropriate to the small data footprint we keep: TLS for data in transit, encryption at rest for AI credentials, least-privilege access, and secrets management. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security; we handle any personal-data incident in accordance with applicable law, including notification duties where they apply. Remember that the most sensitive data — your documents — never leaves your device in the first place.

10. Your rights

Subject to applicable law (including the GDPR and, for users in Türkiye, KVKK — Law No. 6698), you may request access to, correction of, deletion of, or a copy of your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. Write to support@colpan.app; we respond within the statutory time limits. You may also lodge a complaint with your data protection authority.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

12. Changes

We may update this policy; material changes will be announced on this page (and by e-mail where appropriate) with a new effective date.

13. Colpan browser extension

This section covers the "Colpan" browser extension for Chrome and Edge. The extension is the browser side of the Colpan desktop app installed on the same computer and does nothing without it. ReviseTouch ("we") makes Colpan; contact: info@revisetouch.com.

a) Single purpose

To let you chat with Colpan beside the web page you are on and — with your approval for every change — have Colpan read that page and fill or edit it using your own documents.

b) What the extension handles

The extension works only on sites you allowed (Colpan's site list, or "This once" / "Always allow this site" in the side panel) and on a page you send with "Send this page to Colpan".

• Page content: visible text, form field labels, the page's accessibility tree (the roles and names of buttons and fields), and the text of multi-line editors. Values typed into single-line fields are not read, only whether a field is filled; password fields are never read.
• Screenshots: only after you allow them in the side panel (for the model: once, or for that conversation; for another program on your computer that drives Colpan, such as an AI agent: each time); frames from sites not on your list are blacked out.
• The tab's address and title: of the tab Colpan works in. Before you allow a site, they are read only to name the site in the side panel's question; the page itself is not read.
• Your messages in the side panel and your answers (approve, cancel, site answers).

The extension does not collect your browsing history and does not monitor your clicks or keystrokes; it only carries out the actions you approve.

c) Where the data goes

• Extension → Colpan on your computer. The extension's only connection is Chrome's native messaging (app.colpan.browser). The extension sends no requests to the internet; its pages' security policy does not allow it.
• Colpan → the AI provider you chose. When Colpan uses an AI model for a task, personal data detected in the text (names, ID numbers, phone numbers, e-mail addresses and the like) is masked on your computer first. Masking is best effort and cannot guarantee it catches everything; dates are not masked (a page's questions often turn on them). A screenshot cannot be masked, which is why it asks separately. A value to be written into the page is restored on your computer just before it is written.
  • With a local model, nothing leaves your computer.
  • With your own API key (BYOK), data goes directly to that provider, under its terms.
  • With Colpan's managed AI, data goes through OpenRouter, Inc. (USA) to the provider serving the model; ReviseTouch does not store your prompts or the responses on its servers (see Section 4 above).
• Another AI app on your computer. If you connect another app to Colpan over MCP, it can ask for the content of allowed sites; by default that content is masked (mcp.mask_documents). Where that app sends data is governed by its own terms.
• No page content, conversation or address reaches ReviseTouch. Neither the extension nor Colpan has analytics or advertising; with managed AI, only usage totals are counted for billing, never content (Section 3 above).

d) Retention

• The panel's state and the per-tab "this once" / "no" answers live in the browser's session storage and are gone when the browser closes. The one thing the extension keeps is the list of site origins you allowed "this once" (e.g. https://example.com): Chrome keeps that site permission even after the browser closes, and the list exists so the permission is given back even after a crash; an origin leaves the list once it is. No page content, message or setting is stored.
• "Always allow this site" is written to Colpan's settings file on your computer; you can remove it in Colpan.
• Conversations stay in Colpan's chat archive on your computer until you delete them.
• A page sent with "Send this page to Colpan" is kept on your computer for 24 hours, then deleted.

e) Sharing and sale

Data is not sold or rented, not used for advertising or profiling, and not used to determine creditworthiness. It goes only to the AI provider you chose (c above), for the extension's single purpose.

f) You stay in control

The site list and "this once" answers; an approval card for every change; Chrome's "started debugging this browser" bar while Colpan works (it goes when the task ends; closing it stops the task); Stop in the panel; removing the extension. Your organisation may lock the site list.

g) Your rights and contact

You are the controller of the personal data in your documents and on the pages you work with; ReviseTouch has no access to it. Your rights over your account data are set out in Section 10 above. Questions: info@revisetouch.com.

h) Changes

If this section changes, the new version is published at the same address with a new date; material changes are also announced on the extension's store page.