What we hold, and what we do with it
Last updated 18 August 2026
Collecta is a place to put your thinking. That only works if you know exactly where it goes. This page is the whole story, in plain language.
The short version
- Your content is yours. We do not sell it, we do not advertise against it, and we do not use it to train any AI model.
- To turn what you capture into a note, we send it to AI providers who process it and hand back a result. They act on our instructions.
- You can export everything at any time, and delete everything at any time — from inside the app, in about ten seconds.
What we collect
Your account.Email address, and a display name if you set one. If you sign in with Google or Apple, we receive the email address that provider releases to us — with Apple’s private relay, that is a forwarding address, not your real one.
What you capture. Everything you put into Collecta: typed notes, links you share, uploaded files, images, PDFs, screenshots, voice notes, meeting recordings, and pasted conversation history. Plus what the system derives from it — the formatted note, summary, key points, tags, transcript, and the numerical embeddings that make search work.
How you set it up.Your buckets, your formatting and tone preferences, and the “about me” context you write during onboarding, which is included in prompts so notes come back in your terms.
Operational records. Counts of captures, recording minutes, dictation and research runs, so we can apply plan limits; and short-lived rate-limit records that stop one account from overwhelming the service. These record that something happened and when — not what it said.
We do not run advertising or third-party analytics trackers, and there is no advertising identifier in the product.
Recordings, and other people in them
Meeting recording captures whoever is audible, not just you. You are responsible for having whatever permission your situation and local law require before you record — recording laws vary a great deal by country and by state, and consent rules are stricter than most people assume.
On our side: the audio is uploaded to storage, transcribed, and used to produce your note. The audio file itself is deleted 30 days after the recording. The transcript and the note stay until you delete them. Recordings are never shared with other users unless you deliberately share the note.
Who else processes it
Collecta is built on other companies’ infrastructure. These are all of them that touch your data, and what each one is for:
Database, authentication and file storage. Holds your account, your notes and everything you upload.
Reads what you capture to produce notes, transcripts, embeddings and grounded research.
Processes text-only captures and meeting synthesis. Never receives audio, images or PDFs.
Hosts the application and serves every request.
Runs the background jobs that turn a capture into a note. Carries content in transit.
Fetches transcripts for YouTube links you share.
Sends account email — confirmation, password reset. Receives your email address only.
Manages subscriptions and entitlements. Receives your account identifier, never your content.
The AI providers process your content to answer the request and do not use it to train their models. They are bound by their agreements with us, not free to do as they like with what passes through.
How long we keep it
- Notes, buckets, transcripts: until you delete them or delete your account.
- Meeting audio: 30 days, then the file is automatically erased. The transcript survives.
- Trash: deleted notes and buckets are recoverable for 30 days, then permanently removed.
- Your account: until you delete it. Deletion is immediate and there is no grace period.
Getting it back, or getting rid of it
Export.Settings → Export builds a complete archive of your notes and buckets in JSON and Markdown. It is yours to keep, in formats other tools can read.
Deletion.Settings → Delete account erases your account, every note, bucket, recording, transcript and research report, and every file you uploaded. It runs immediately and cannot be reversed. If you cannot sign in, use the deletion request page.
Depending on where you live you may also have the right to correct your data, object to processing, or ask for a copy in a portable format. Export covers the last one directly; for anything else, write to us and we will act on it.
Security
Access is enforced at the database level — every table carries row-level security policies that scope reads and writes to the account that owns the row, so a bug in application code cannot hand your notes to someone else. Uploaded files sit in private storage reachable only through short-lived signed links. Traffic is encrypted in transit.
No system is perfect. If you find a security problem, please tell us at support@collecta.app before disclosing it publicly, and we will work with you.
Children
Collecta is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.
Changes, and how to reach us
If this policy changes in a way that materially affects you, we will say so in the app rather than quietly editing the page. Questions, requests, or complaints: support@collecta.app.