Privacy Policy
Draft — content is in preparation and requires legal review before publishing.
1. Controller
The data controller is the provider of the Kolio service. For privacy questions contact us via the Contact page.
2. What data
We process account data (email, name), usage data, call content (transcripts, summaries) and the contacts you enter.
3. Purpose
We use data to operate the service, answer calls, run the CRM and bill. We do not use content to train AI models.
4. Storage and retention
Transcripts and logs are kept per the retention policy; you can export or delete data any time (GDPR).
5. Processors
We use trusted processors (hosting, speech, AI, email, payments) under appropriate data processing agreements.
6. Your rights
You have the right to access, rectification, erasure and portability. Manage requests in the app or via contact.
7. Cookies
Kolio uses only essential cookies needed for sign-in, language selection and site functionality; these do not require consent. We currently set no analytics or marketing cookies — if we introduce them, they will load only after your consent in the cookie banner. You can change your choice any time via the "Cookie settings" link in the page footer. The web chat on this site stores nothing in your browser.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| authjs.session-token, authjs.csrf-token, authjs.callback-url | Essential | Sign-in and sign-in protection (NextAuth) — signed-in users only. | Session / 30 days |
| NEXT_LOCALE | Essential | Selected interface language (Slovenian / English). | 1 year |
| kolio.tenant | Essential | Last selected account (tenant) — signed-in users with several accounts only. | 1 year |
| kolio_cc | Essential | Your choice in the cookie banner. | 6 months |
| _ga, _ga_*, _gid | Analytics | Google Analytics — traffic measurement. Not in use; loads only after consent. | Up to 2 years |
| _gcl_* | Marketing | Google Ads — ad performance measurement. Not in use; loads only after consent. | 90 days |