Privacy policy

Last updated: October 29, 2026

Collet is made by 11111110, Inc. ("we", "us"). This policy covers two things: this website, meetcollet.io, and the Collet product. Collet isn't open yet. The product sections describe how it will handle data when it opens, and we'll update this page before then if anything changes.

This website

The website collects as little as a website can.

No cookies of any kind, and nothing stored in your browser.
No scripts. The pages are plain HTML and CSS.
No third parties. No analytics, advertising, or social media tools. Every page, font, and image is served from meetcollet.io.
No forms. There is nothing to fill in.

Like every website, our hosting (Amazon CloudFront) writes an access log entry for each request. The entry holds the time, your IP address, your browser's user agent, the page you asked for, the page that linked to it, and the country the request came from. We use these logs only to count visits and see which links bring people here, in aggregate reports. We delete them after 90 days.

The Collet product

Your account

When you sign up, we collect your name, your work email address, and your company's name. We use them to sign you in and to send you messages about your account.

Data from Google Workspace

When an administrator connects your company's Google Workspace, Collet reads, through Google's APIs:

Your user directory (admin.directory.user.readonly): names, email addresses, organizational units, and whether each account is active or suspended.
Third-party app authorizations (admin.directory.user.security): which apps each person has signed into with Google, and the permissions they granted. Google has no read-only version of this permission. Collet only reads with it and never changes or revokes anything.
Audit reports (admin.reports.audit.readonly): sign-in and app authorization activity, including the time, the user, the app, and the IP address Google recorded.

We use this data only to build your company's app inventory, show who uses each app, check whether people who left have lost access, and grade each app against the standard you set.

Data from Slack

When an administrator installs Collet in Slack, Collet reads member names, email addresses, and account status, plus seat data and app install history. We use it to match people across your apps and to check offboarding and seat counts.

Data you give us

This includes member lists you upload (for example, from Claude), and what you enter about your apps: each app's DRI (directly responsible individual), purpose, support method, renewal date, and cost, and the results of checks you record by hand.

What Collet doesn't collect

Email or message content, files, or documents
Passwords for any of your systems
Analytics or tracking data inside the product
Advertising identifiers or profiles
Data from data brokers or enrichment services

Google user data

Collet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We use Google user data only to provide and improve the features of Collet described above.
We don't transfer it to anyone else, except as needed to run Collet (see Subprocessors), to comply with the law, or as part of a merger or acquisition with notice to you.
We don't use it for advertising, and we don't sell it.
People at Collet don't read it, except with your permission, to investigate a security problem or abuse, to comply with the law, or when it has been aggregated and anonymized for operating the service.
We don't use it to train AI or machine learning models.

When we share data

Our subprocessors process data only as needed to run Collet. We don't sell your data, use it for advertising, or give it to anyone for their own purposes.

We may disclose data when the law requires it, such as a subpoena. Where we're allowed to, we will tell you first.

If 11111110, Inc. or Collet is acquired, we will tell you before your data is transferred or becomes subject to a different privacy policy.

Subprocessors

Amazon Web Services: hosting, storage, encryption, and email delivery. Data is stored in the United States.

We'll list any other subprocessor here before it receives your data.

How we protect data

Data is encrypted in transit and at rest. Connection credentials (the tokens Google and Slack give Collet) are encrypted with a dedicated key, used only by the background sync process, and never written to logs. Each customer's data is kept separate at the storage layer. Production runs in its own AWS account that holds no other company's or product's systems. See the security page for more.

How long we keep it

We keep product data while your account is open. If you disconnect Google Workspace or Slack, we stop reading from it right away. When you close your account, we keep your data for 30 days so you can export it, then delete it. Website access logs are deleted after 90 days.

Your rights

We give these rights to everyone, wherever you live.

Know what we collect about you and how we use it.
Access your data in the product at any time.
Correct your account information.
Delete your personal data. We do it within 30 days of your request, unless the law requires us to keep it.
Export your data, with no fee.
Object to how we process your data.
Complain to the data protection authority where you live.

To use any of these, email privacy@meetcollet.io. You can also revoke Collet's access to Google Workspace at any time from your Google Admin console.

Where data is stored

Collet is run from the United States, and all data is stored in AWS regions in the United States. If you're outside the US, your data is transferred to and processed in the US.

Changes to this policy

We'll email account holders at least 30 days before any significant change takes effect. We may fix wording or formatting without notice.

Contact

Questions about this policy: privacy@meetcollet.io.

11111110, Inc., 1522 Western Ave STE 68044, Seattle, WA 98101. Adapted from the Basecamp open-source policies, CC BY 4.0.