Privacy

Privacy policy.

Last updated 13 October 2026.

This policy explains what personal information Colab AI collects through thecolab.ai, claudetraining.co.nz, chatgpttraining.co.nz, copilottraining.co.nz and Colab Talent, why we collect it, who we share it with, and how you can see or correct it. We follow the New Zealand Privacy Act 2020 and its 14 information privacy principles (IPPs).

"Colab AI", "we" and "us" mean COLAB.AI LIMITED, trading as Colab AI (New Zealand company number 9346581, NZBN 9429052882227). We run these websites, Colab Community, Colab Talent (talent.thecolab.ai) and Colab For Good, and we hold the personal information described here.

Contact us by email at si@thecolab.ai. Registered office: see our entry on the NZ Companies Register.

The short version

  • We collect what you type into our forms, what you give Colab Talent (including a CV or LinkedIn PDF), and what you tell us when we talk.
  • Colab Talent uses AI (Anthropic's API) to read CVs and LinkedIn PDFs and write profile summaries and assessments.
  • Training enquiry and interest form submissions are stored in our database and sent to our CRM, HubSpot. Forms on thecolab.ai send submissions straight to HubSpot. Colab Talent data is stored with Cloudflare. These providers are overseas.
  • We use Google Analytics and Microsoft Clarity to understand visits and interactions. They use cookies. Clarity runs on thecolab.ai and the training sites' marketing pages, not course lessons, and masks what you type into form fields. Words you type into the candidate search appear in the page address, which Google Analytics and Clarity record, so don't put anything sensitive in a search. Microsoft may use Clarity data for advertising. HubSpot uses cookies to measure visits to the training sites' marketing pages. It doesn't link those visits to the details you send in a form.
  • We never sell your information. A practitioner's name and contact details go to an employer only after the practitioner agrees to an introduction.
  • You can ask to see, correct or delete your information at any time.

What we collect

We collect most personal information directly from you (IPPs 1 to 4). We only ask for what we need, and fields marked optional really are optional.

  • Contact form (/contact/): first name and email (both required), and optionally last name, company, phone number and your message. We also record which page you sent it from and any topic you arrived with (for example "Advisory").
  • Training enquiry and interest forms: the contact details and course interests you give us, and any message you send. Submissions are stored in our database and sent to HubSpot so we can respond and manage your enquiry.
  • Introduction requests and hiring briefs (candidate search): your name, email, and optionally your organisation and what you are hiring for, along with the search you ran (the brief and filters) and the anonymised profile IDs you picked, if any.
  • Search alerts ("Keep me posted" on candidate search): your email and the search you ran.
  • Colab Talent and community profiles (talent.thecolab.ai): the details you give when you register, such as your name, contact details, job title, region, skills, experience, work history, availability and salary expectations, and any CV or LinkedIn PDF you upload.
  • Information we create about practitioners in Colab Talent: AI-written profile summaries, skill and experience assessments, and results of any assessments you take.
  • Emails and messages you send us, and what you tell us when we talk, including by video call, by phone, through a booking link or in our community WhatsApp groups.

Information from other sources (IPP 3A)

Sometimes we collect information about you from somewhere other than you. For example, we may look at your public LinkedIn profile or your work online when you join Colab Talent or when we think you could fit a role, and an employer or community member may tell us about you. When we do this, we will tell you that we have your information, where it came from and why, unless the law says we don't need to (for example, because you already know).

You don't have to give us any of this. Without an email address we can't reply, and without a Colab Talent profile we can't put you forward for roles.

Why we collect it and how we use it

  • To reply to your enquiry and follow it up.
  • To act on an introduction request or hiring brief: we contact the practitioners concerned and ask whether they want to be introduced, and we get back to you about people who could fit the role.
  • To get in touch when new practitioners match a search you asked us to watch. This is done by a person, not an automatic mailing list.
  • For practitioners, to build your profile (including AI-written summaries and assessments), match it with roles and, if you choose, show an anonymised version of it in candidate search.
  • To keep records of our work together, for example invoices when a placement goes ahead.

We don't use your information for any other purpose unless you agree to it, or the law allows it (IPP 10).

Colab Talent (talent.thecolab.ai)

If you join Colab Talent as a practitioner:

  • Your CV and LinkedIn PDF, if you upload them, are processed with Anthropic's API (AI) to create your profile summary and assessments of your skills and experience. You can see and correct your profile in Colab Talent.
  • Your files and data are stored with Cloudflare (Cloudflare R2 for files, Cloudflare D1 for the database).
  • Anthropic and Cloudflare are both overseas (see "Storage outside New Zealand" below, IPP 12).

Candidate search, in plain words

  • A practitioner's profile appears only if they opt in, and they can switch it off at any time. It is an anonymised card: a random ID, a general job title, seniority, work type (remote, hybrid or on-site), availability, a band of years of experience, skills and a few strengths. No names, employers, schools, towns or cities, photos, contact details, links or pay. Search pages are public, so anyone visiting the site can see these cards, not only employers.
  • Anyone can ask for an introduction by giving their name and email. Doing so does not create an account. Colab contacts the practitioner about each request, and nothing identifying is passed on until they say yes.
  • When a practitioner accepts, we share their name, contact details, employer and salary expectations with that employer only. If the employer is outside New Zealand, we share them only with the practitioner's agreement to that overseas employer (IPP 12).

Who we share it with

We share personal information only where it is part of why we collected it, or where you agree (IPP 11):

  • HubSpot, our customer relationship manager (CRM). We store enquiry details in HubSpot so we can reply and manage your enquiry. Training enquiry and interest submissions are also stored in our database. HubSpot also measures visits to the training sites' marketing pages. See HubSpot's privacy policy and the tracking details below.
  • Google: Google Workspace for our email, and Google Analytics for website visits and interactions (see below).
  • Microsoft, which processes website usage data from Clarity (see below).
  • Anthropic, whose AI (through its API) reads CVs and LinkedIn PDFs uploaded to Colab Talent and writes profile summaries and assessments. We use Anthropic's commercial API terms, under which Anthropic does not train its models on what we send.
  • Cloudflare, which runs Colab Talent and stores its files and data (Cloudflare R2 for uploaded files, Cloudflare D1 for the database). It also hosts the training sites and provides Turnstile spam protection and Web Analytics (see below).
  • Calendly, Zoom and WhatsApp, when you book a call with us, meet us online or join our community WhatsApp groups (other members of a group can see your name and phone number).
  • Employers, only for a practitioner who has accepted an introduction to them.
  • Netlify, which hosts this website (see below).
  • Anyone the law requires us to share it with.

We do not sell or rent personal information, and we do not use it for our own advertising. Microsoft may use Clarity data for advertising as explained below.

Storage outside New Zealand

HubSpot, Google, Microsoft, Anthropic, Cloudflare, Netlify, Calendly, Zoom and WhatsApp (Meta) are overseas companies, so your information is stored or processed outside New Zealand. HubSpot keeps our CRM and the training sites' visit data in its Asia-Pacific data region, in Australia. Anthropic processes CVs and LinkedIn PDFs in the United States. Cloudflare stores Colab Talent files and data on its global network. Staff and subcontractors of these providers in other countries, including the United States, may be able to reach it. We use these providers under contractual privacy and security terms (IPP 12). Analytics providers also process website usage data under the privacy policies linked below.

Our websites: hosting, cookies and video

  • thecolab.ai is hosted on Netlify, and the training sites are hosted on Cloudflare. Like any web host, their servers process standard request details (your IP address, browser, the page asked for and the time) to deliver pages and keep the service secure. We don't use those logs to identify visitors.
  • We use Google Analytics 4 to understand how our sites are used: which pages are visited, how people arrive, and interactions such as form steps, button clicks, course progress, video plays, searches and form submissions. It sets first-party cookies (_ga and _ga_*) to tell visits apart. Google receives your IP address and browser details and processes this data overseas, including in the United States (IPP 12), under Google's privacy policy. We never send Google Analytics what you type into form fields, such as names, email addresses, phone numbers or message text. Words you type into the candidate search do appear in the page address, which Google Analytics and Microsoft Clarity record, so don't put anything sensitive in a search. We don't use Google Analytics for advertising or remarketing. You can opt out with Google's opt-out browser add-on.
  • We use Microsoft Clarity and Google Analytics to understand how visitors use our sites and improve them, using first- and third-party cookies and similar technologies. Clarity collects behavioural data such as clicks, scrolls, mouse movement and page views for heatmaps and session replays. Text you type into form fields is masked and not sent to Clarity, but the page address is recorded, including any words you type into the candidate search. Microsoft collects this data and may use it as described in the Microsoft Privacy Statement, including to provide Microsoft Advertising. Clarity runs on thecolab.ai and the training sites' marketing pages, not course lessons. You can control cookies in your browser settings; see below for ways to opt out or block tracking.
  • The marketing pages of claudetraining.co.nz, chatgpttraining.co.nz and copilottraining.co.nz use HubSpot's tracking code to measure visits. It doesn't run on the free online course or on thecolab.ai. It records the pages you visit, the page you came from, page titles, times, and your browser and device. HubSpot also receives your IP address, as any web service does. It sets these cookies: __hstc (tracks your visits, about 6 months), hubspotutk (a random visitor ID, about 6 months), __hssc (tracks the current visit, 30 minutes) and __hssrc (notes when your browser restarts, deleted when you close it). If HubSpot's cookie consent settings apply, it may also set cookies that remember your choice. These visits are not linked to our forms. Training enquiries go to our own server, which then adds your details to HubSpot as our CRM, so your page visits stay separate from your contact record. See HubSpot's privacy policy.
  • The training sites use Cloudflare Turnstile to protect forms from spam. Cloudflare processes technical details, such as your IP address and browser information, to check that you are a real visitor. Cloudflare Web Analytics measures visits and page performance without analytics cookies. See Cloudflare's privacy policy.
  • You can block or delete cookies through your browser settings to limit cookie-based tracking by Google Analytics, Clarity and HubSpot. Blocking cookies may affect some site features and does not stop all data collection by these services. To stop Clarity collection, use a browser tracking blocker that blocks requests to clarity.ms. To stop HubSpot tracking, block cookies and requests from HubSpot's domains (hs-scripts.com, hs-analytics.net, hs-banner.com and hubspot.com) with a tracking blocker or your browser settings. Our training forms still work if you do. For Google Analytics, use the opt-out add-on linked above.
  • We run no advertising on these sites. Fonts and images on thecolab.ai are served from our own site.
  • The candidate-search shortlist is kept in your browser's session storage, on your own device, and is cleared when you close the tab. It is never sent to us unless you ask for introductions.
  • Videos use YouTube's privacy-enhanced mode (youtube-nocookie.com) and load only when you press play. At that point YouTube (Google) receives your IP address and browser details under Google's privacy policy.
  • Links to Luma, LinkedIn, YouTube and other sites take you to services with their own privacy policies. Colab Talent, Calendly, Zoom and WhatsApp are covered above.

How we keep it safe

We keep access to personal information to the people at Colab AI who need it, use providers with strong security, and send everything over encrypted connections (IPP 5). If a privacy breach is likely to cause serious harm, we will tell the people affected and the Privacy Commissioner, as the law requires.

How long we keep it

  • Enquiries, introduction requests, hiring briefs and search alerts: for as long as we are working with you, then up to two years after our last contact, after which we delete them. Ask us to stop a search alert at any time.
  • Colab Talent profiles, uploaded CVs and LinkedIn PDFs, and the summaries and assessments made from them: until you delete your account or ask us to. After that we keep only what we need for records of placements and invoices, for as long as tax law requires (currently seven years).

We don't keep personal information for longer than we need it (IPP 9).

Seeing and correcting your information

Under the New Zealand Privacy Act 2020, you can ask for a copy of the personal information we hold about you, and ask us to correct it (IPPs 6 and 7). You can also ask us to delete it. Email si@thecolab.ai. We will reply as soon as we can, and within 20 working days, and it costs you nothing. Practitioners can also update most of their profile themselves in Colab Talent. We take reasonable steps to keep information accurate before we use it (IPP 8).

We don't assign you any government identifier. The IDs on anonymised profiles (such as C-1042) are our own and mean nothing outside Colab Talent (IPP 13).

Complaints

If you are unhappy with how we have handled your information, please tell us first at si@thecolab.ai and we will try to put it right. If you are still not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

Changes to this policy

We will update this page when what we collect or how we use it changes, and change the date at the top.