Privacy Policy

Last updated: January 27, 2026

1. Introduction

Cola ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Product Owner service.

2. Information We Collect

We collect information that you provide directly to us, including:

  • Account Information: Email address, name, and organization details when you sign up
  • Integration Data: Data from connected services (Slack, GitHub, Jira, Linear) necessary to provide our service
  • Usage Data: How you interact with Cola, including tasks created, conversations, and feature usage
  • Codebase Metadata: Structure and organization information (NOT source code content) when GitHub integration is enabled

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process and manage your tasks and backlog
  • Communicate with you about your account and our services
  • Analyze usage patterns to improve the product
  • Detect and prevent fraud or abuse

4. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You can request deletion of your data at any time by contacting us at privacy@cola.rocks.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS) and at rest (AES-256)
  • Regular security audits and penetration testing
  • Access controls and authentication requirements
  • SOC 2 Type II compliance (in progress)

6. Third-Party Services

We integrate with third-party services (Slack, GitHub, Jira, Linear) to provide our functionality. Your use of these integrations is subject to their respective privacy policies. We only access data necessary for Cola's features.

7. AI and Machine Learning

Cola uses AI to analyze requirements and prioritize tasks. We do not train our models on your data. Your conversations and tasks are used only to provide you service, not to improve our general AI capabilities.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to processing of your data

9. International Data Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses. EU data residency is available upon request.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@cola.rocks
Address: AMMO Solutions, Netherlands