Cobay Privacy Policy
This is a practical pre-launch privacy notice. It explains what Cobay needs to collect, why we use it, where it is stored, and how you can request access, correction, export, deletion, or account closure.
Service provider
Cobay is currently operated by the Cobay project team. You can contact us at official@cobay.tech for privacy, data, account deletion, or account closure requests. We will update this policy after the company entity registration is complete.
Information we collect
We collect only what is needed to provide the service, including phone number, public username, password sign-in credentials, optional email, avatar, city, school, role, skills, availability, profile bio, links, team and application records, projects and evidence materials, private messages and conversation records, uploaded files, and IP address, device, browser, Cookie, log, and operation records used for login, security, rate limiting, and troubleshooting.
How we use information
We use this information for account sign-in and identity, teammate matching, team collaboration, messaging, event and content display, uploads and private file access, account safety, abuse prevention, support, operations, and necessary admin review. We do not sell personal information or use it for advertising tracking.
Storage location
Cobay production data is stored on cloud database, object storage, and application services in Hong Kong, China. We use access control, permission boundaries, backups, and audit logs according to service needs.
Necessary service providers
To operate Cobay, we may use cloud servers, cloud databases, object storage, SMS verification, email, and security operations services. We use these services only as necessary for account, communication, upload, safety, or operations purposes.
Retention
Account, profile, team, project, message, and uploaded material records are usually kept while your account exists, unless you delete them, close your account, or Cobay needs to retain limited data for safety, compliance, or dispute handling. Operations and security logs are usually kept for 7 to 30 days; backups rotate according to the production backup policy.
Your data rights
You can request access, correction, export, deletion, or account closure by emailing official@cobay.tech. We will verify account identity before processing and usually respond within 15 business days. If a request is complex, we will explain why and provide an estimated timeline.
Cookies and local storage
We use Cookies or local storage to remember language preference, sign-in state, and Cookie choices. We do not currently use this information for advertising tracking.
Minors
Cobay is designed for developer and founder communities and is not intentionally directed to children under 14. If you believe a minor has provided personal information to Cobay, contact us at official@cobay.tech.
Policy updates
We will update this policy when the company entity, launch region, product features, or data processing practices change. Material changes will be shown on the website in a reasonable way.