1. Data controller
The controller of personal data is:
Filippo Parisini
Gargnano (BS), Italy
Email: colgoapp@gmail.com
2. Data collected
Colgo collects only the following categories of data:
a) Browsing and statistical data
Through Google Analytics 4 we collect anonymous, aggregated data about the use of the site and the application, including:
- Country or geographic area of origin (country-level geolocation, not precise)
- Type of device and browser used
- Pages visited and session duration
- Traffic source
This data is anonymous and does not allow individual users to be identified.
b) Data provided at registration
When you create an account at app.colgo.app/registrati to start the 30-day free trial, we collect:
- Email address and password (handled by the Supabase authentication system; the password is never readable by Colgo)
- Business name and type of activity (hotel, restaurant or shop)
- A staff access code, generated automatically and stored only in encrypted form (hash), never in plain text
- Approximate country and city, derived from the IP address at the time of registration (no external geolocation service)
A demo mode is also available (app.colgo.app/demo) which does not require a real email address: an internal technical identifier is generated, and aggregated data about the source (traffic source, country, device) is collected for statistical purposes.
c) Data within the application
The application app.colgo.app does not require end users (guests) to register. We collect only:
- A nickname freely chosen by the guest (not verified, it can be any name)
- The room or unit number (room, table, window) linked to the session
- The messages sent to reception or to the venue staff
- The orders placed through the application
This data is temporary, managed by the business that subscribed to Colgo, and is deleted automatically when the session expires. Colgo acts as data processor on behalf of the business, which is the controller towards its own guests.
3. Purposes of processing
Data is processed for the following purposes:
- Providing the service: allowing guests to communicate with the business and send requests/orders
- Usage statistics: understanding how users interact with the site and the application, using anonymous and aggregated data
- Free trial: creating and activating the business account for the 30-day trial period
- Service improvement: optimising the features of the application
4. Legal basis for processing
- Performance of a contract (Art. 6(1)(b) GDPR): for registration and session data in the application, needed to activate the free trial and provide the service requested by the business
- Consent (Art. 6(1)(a) GDPR): for analytics cookies only
- Legitimate interest (Art. 6(1)(f) GDPR): for anonymous statistics on the use of the service
5. Cookies
Colgo uses the following types of cookies:
- Technical cookies: necessary for the site and the application to work. They do not require consent.
- Analytics cookies (Google Analytics 4): used to collect anonymous statistical data on usage. They require your consent.
You can manage your cookie preferences through the banner shown on your first visit, or change them at any time in your browser settings.
6. Third parties
Colgo relies on the following third-party services:
- Google Analytics 4 (Google LLC) — traffic analysis. Privacy Policy: policies.google.com/privacy
- Resend — sending transactional emails (e.g. internal notification of a new registration)
- Stripe — payment handling for the Pro subscription. Card details are entered directly on a page hosted by Stripe and never pass through Colgo servers. Privacy Policy: stripe.com/privacy
- Supabase — database and authentication for the application. Data is stored in European data centres.
- Vercel — hosting of the web application
- Netlify — hosting of the marketing site
- Anthropic (Claude API) — automatic translation of catalogue content. Catalogue texts are processed anonymously, without guests' personal data.
7. Data retention
- Analytics data: kept for 14 months (Google Analytics 4 default setting)
- Business and account data: kept for as long as the service is used (free trial or active subscription), deletable on request by writing to colgoapp@gmail.com
- Application session data (nickname, room, messages, orders): deleted automatically when the session expires or at the request of the business
8. Rights of the data subject
Under the GDPR, you have the right to:
- Access: obtain confirmation of processing and a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data (the "right to be forgotten")
- Restriction: request restriction of processing
- Portability: receive your data in a structured format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: withdraw your consent at any time
To exercise your rights, write to: colgoapp@gmail.com
You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
9. Data transfers outside the EU
Some providers (Google, Vercel, Netlify, Anthropic) may transfer data outside the European Economic Area. Such transfers take place under the safeguards provided by the GDPR (adequacy decisions, Standard Contractual Clauses).
10. Changes to this Privacy Policy
Colgo reserves the right to update this Privacy Policy. Substantial changes will be announced by notice on the site. The date of the last update is shown at the top of this page.
11. Contact
For any question about this Privacy Policy:
Email: colgoapp@gmail.com
Website: colgo.app