This Notice describes how Coley, Inc. collects, uses, and protects information from visitors to getcoley.ai. It applies to this website only. It does not govern how any Coley product processes information within a licensee's deployment — that is addressed separately in each licensee's Data Processing Agreement.
This Notice covers information that Coley, Inc. ("Coley," "we," "us") collects from visitors to getcoley.ai (the "Site") and from people who contact us through the Site or by email. It does not cover:
Coley builds compliance intelligence for operators whose residents depend on the building being maintained. We hold ourselves to a standard that matches what we ask our licensees to uphold. On this Site:
We do not deploy third-party analytics, tracking pixels, advertising networks, or session-replay tools. We do not sell, rent, or share personal information with marketing partners. We collect the minimum information needed to respond to your inquiry. We retain it only as long as necessary. We do not profile visitors. We do not build shadow profiles.
These are not aspirations. They are the current operating state of this Site as of the Effective Date above.
When you contact us by email or another communication channel, we collect the information you choose to provide, typically:
When you access the Site, our hosting infrastructure automatically records standard server log information, including:
This log information is collected for operational security, abuse prevention, and legal compliance. It is not combined with commercial profiles or sold to any third party.
We do not knowingly collect:
If you choose to include any of the above in a message to us, we ask that you don't. If you already have, let us know and we will delete it.
We use the information we collect for the following purposes:
We do not use information we collect from the Site to train, fine-tune, or ground any machine-learning or artificial-intelligence model, except to the extent the content was manifestly intended for that purpose (for example, a technical paper you explicitly submit for public discussion).
If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing your information under the General Data Protection Regulation or UK GDPR are:
We share the information we collect only with:
We do not sell, rent, or share personal information with advertising networks, data brokers, or marketing partners. We do not disclose the content of your communications with us except as described above.
As of the Effective Date of this Notice, the Site does not use tracking cookies, analytics cookies, advertising cookies, session-replay tools, or third-party tracking pixels.
The Site may set strictly necessary cookies required for basic technical functions such as preserving your viewport preference or session state. Strictly necessary cookies do not track you across sites and are not used for advertising.
If we add analytics or other cookies in the future, we will update this Notice, provide notice on the Site, and where required by applicable law, obtain your consent before setting non-essential cookies.
Coley does not sell personal information for monetary or other valuable consideration and does not share personal information with third parties for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act. We have not sold or shared personal information in the preceding twelve (12) months and do not intend to do so.
We retain information only as long as necessary for the purposes for which it was collected, or as required by law. Typical retention periods:
| Category | Typical Retention |
|---|---|
| Contact form inquiries (no commercial follow-through) | 24 months |
| Commercial prospect communications (active pipeline) | Duration of active pipeline + 36 months |
| Executed Commercial Agreements and supporting records | Duration of the agreement + 7 years |
| Server log information | 90 days |
| Security incident investigation records | 7 years |
| Records required for tax, legal, or regulatory compliance | As required by applicable law |
At the end of the retention period, we delete or anonymize the information, unless a legal obligation requires continued retention.
We maintain administrative, technical, and physical safeguards designed to protect information we collect, including access controls, encryption of data in transit, and secure credential management. We will notify affected individuals and regulators of any personal data breach as required by applicable law.
No system is perfectly secure. By using the Site, you acknowledge that you transmit information over the internet at your own risk.
Depending on where you reside, you may have the following rights with respect to personal information we hold about you:
To exercise a right, email privacy@getcoley.ai with a description of your request and enough information for us to verify your identity. We will respond within the timeframes required by applicable law.
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the rights described in Section 11. California residents are also entitled to the following specific disclosures:
In the preceding twelve (12) months, we have collected the following categories of personal information, as defined by the CCPA/CPRA:
We collect personal information from: (a) you, directly, when you contact us; (b) your device, automatically, when you access the Site; (c) your organization, when we communicate with colleagues of yours.
The purposes described in Section 4.
The recipients described in Section 6.
We do not collect sensitive personal information as that term is defined under CCPA/CPRA, and therefore the right to limit the use of sensitive personal information does not apply.
You may designate an authorized agent to make a request on your behalf. The agent must provide written authorization from you, and we may require you to verify your identity directly.
California Civil Code § 1798.83 allows California residents to request information about the disclosure of personal information to third parties for those third parties' direct marketing purposes. We do not disclose personal information for third-party direct marketing purposes.
If you are a resident of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or any other U.S. state with a comprehensive consumer privacy law, you have the rights described in Section 11 to the extent applicable under your state's law. The exact scope, exceptions, verification requirements, and response deadlines vary by state; we apply the rights standard of your state of residence.
Email privacy@getcoley.ai to submit a request.
If you are in the EEA, UK, or Switzerland, the processing of your personal information is subject to the General Data Protection Regulation, UK GDPR, or the Swiss Federal Act on Data Protection, as applicable. We describe our legal bases in Section 5, and your rights apply as described in Section 11. In addition:
Coley operates from the United States. Information we collect through the Site is processed and stored in the United States. If you access the Site from outside the United States, you acknowledge that your information will be transferred to, processed in, and stored in the United States, which may have data protection laws different from those in your country.
For transfers of personal information from the EEA, UK, or Switzerland to the United States, we rely on the following transfer mechanisms as applicable: (a) Standard Contractual Clauses approved by the European Commission; (b) the UK International Data Transfer Addendum; (c) the Swiss-U.S. Data Privacy Framework where certified; (d) your explicit consent, where appropriate. Copies of transfer mechanisms are available on request.
The Site is not directed to children under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us at privacy@getcoley.ai and we will delete it promptly.
This Notice covers the Site only. When a Coley licensee deploys one of our products inside the licensee's systems, any personal information processed by that product within the licensee's deployment is handled under a separate Data Processing Agreement between Coley and the licensee, and under the licensee's own privacy policies and applicable laws. Coley's role in a licensee deployment is typically that of a processor or service provider; the licensee is the controller or business responsible for end-user disclosures and rights.
If you interact with a system operated by a Coley licensee (for example, as a tenant or resident of a building whose operator uses a Coley product), your rights are exercised against that licensee, not against Coley directly. Contact the licensee first. If the licensee directs you to Coley for a specific request, we will coordinate with the licensee to fulfill it.
The Site does not currently respond to "Do Not Track" signals because the Site does not engage in cross-site tracking or any other form of behavioral tracking that would be subject to a Do Not Track preference. If this changes, we will update this Notice.
We may update this Notice from time to time. When we make material changes, we will revise the "Last Updated" date above and post the revised Notice on the Site at least thirty (30) days before it takes effect. For non-material changes, revised terms are effective upon posting. We encourage you to review this Notice periodically.
Questions, concerns, or privacy rights requests can be directed to:
Coley, Inc.
Attn: Privacy
Los Angeles, CA
privacy@getcoley.ai
Commercial counterparties seeking a copy of Coley's Data Processing Agreement or Standard Contractual Clauses may contact legal@getcoley.ai.