CollaboSpace processes personal information only to the extent necessary to provide and operate the Service. We do not use personal information for purposes other than those described below unless we take the steps required by applicable law.
We may collect personal information through the app, in-app web views, websites, social sign-in, use of the Service, customer support, and integrations with service providers. As a rule, we do not knowingly collect personal information from children under 14.
Raw payment credentials such as full card numbers or bank account passwords are processed by payment providers through their payment windows or widgets. CollaboSpace does not directly collect or store those raw credentials. We may store payment result information such as payment keys, payment status, approved amount, payment method display name, and receipt URL for order processing, settlement, refunds, and dispute handling.
We may use external services, SDKs, and infrastructure providers to operate the Service. These providers may process personal information necessary to perform their functions, and consent or privacy choice flows may be provided depending on applicable law or console settings.
In-app web view features may use the same account session as the CollaboSpace web service. In that case, authentication status, usage records, and information necessary for orders, community, canvas, and related features may be processed between the app and web service.
We retain personal information for the period consented to at collection or for the period required or permitted by applicable law. When a member deletes their account, information directly linked to the account is deleted or separated from the account. Records needed for orders, payments, delivery, refunds, tax, settlement, disputes, abuse prevention, or legal compliance may be retained for the period required by law or internal policy.
When the purpose of processing is fulfilled or the retention period ends, we delete personal information without undue delay. Electronic files are deleted in a way that makes recovery difficult, and records that must be separately retained are stored with restricted access.
User-generated content such as community posts, comments, public canvases, floor plans, images, and videos may remain after account deletion after being disconnected from identifying account information or anonymized, in order to preserve the service context for other users. Location information in public content may be masked or de-identified as appropriate.
You may request access, correction, deletion, or restriction of processing of your personal information. You may request account deletion and withdrawal of consent through My Page in the app or through the account deletion page below.
We may use advertising, analytics, and diagnostic tools such as Google AdMob, Firebase Analytics, Firebase Crashlytics, Google Analytics, and Microsoft Clarity. Analytics tools may process usage records including pages visited, search terms, and on-screen behavior to improve the Service. Depending on your region, consent status, and device settings, personalized advertising, advertising identifier use, tracking permissions, and privacy choices may be shown. You can manage advertising and tracking choices through the Google User Messaging Platform consent form, in-app privacy options where available, and operating system settings. On iOS, App Tracking Transparency prompts may be shown where applicable.
We may process location or address information to provide maps, nearby space discovery, address search, delivery, and user-registered spaces or floor plans. Locations that users set as public may be displayed after being masked or adjusted to the building complex, neighborhood, or region level according to the user’s public location setting. We generally do not display unit numbers or exact home addresses on public screens.
We apply technical and organizational measures such as access control, encryption in transit, separation of operational permissions, and review of logs and error records. Sensitive operational information such as payment ledgers, account deletion records, and admin functions is limited to necessary personnel and systems.
We designate a privacy contact to oversee personal information processing and respond to privacy-related inquiries and requests.
This Privacy Policy is effective as of July 13, 2026.