Collatero

Privacy policy

Last updated: 22 October 2026

The short version

  • We collect only what we need to reply to you and to run Collatero for your team.
  • We never sell your data, and this website uses no advertising or tracking cookies.
  • Your brand material and your people’s details stay yours. We use them only to make your collateral.
  • You can ask to see, correct or delete your data at any time: hello@collatero.com.

1. Who we are

Collatero is a brand collateral automation service run by Team Ingenious, based in Jeddah, Saudi Arabia (“Collatero”, “we”, “us”). This policy explains what personal data we collect, why we collect it and the choices you have. We follow Saudi Arabia’s Personal Data Protection Law (PDPL) and its regulations.

2. What this policy covers

  • Visitors to collatero.com.
  • People who contact us or book a demo.
  • Team members of our customers who use Collatero, including through WhatsApp.
  • People whose details appear in collateral our customers make, for example an employee named on a certificate or a guest on an invitation.

3. What we collect

When you contact us

The details you type into our form: your name, work email, company, phone or WhatsApp number, what you need Collatero for, which teams it’s for, how and when you’d like us to reach you, and your message. We also keep anything you tell us later by email, phone or WhatsApp.

When you visit this website

Our hosting provider automatically records technical details such as your IP address, browser type and the pages requested. These are used to deliver the site and protect it from abuse. We don’t use analytics, advertising or tracking cookies, and we don’t build profiles of visitors. The site’s fonts and videos are served from our own hosting, not from third-party networks.

When your organisation uses Collatero

  • Account details for each user: name, work email, role, and phone number if you use WhatsApp.
  • Brand material you give us: logos, guidelines, fonts, images and templates.
  • Data you import or connect to make collateral, such as names, job titles, photos, event details or customer details from a spreadsheet, CRM or HR system.
  • The collateral you generate, and a record of who generated what and when.
  • Messages and voice notes you send to Collatero on WhatsApp, and the text we transcribe from them.
  • Conversations with our support and design team.

4. How we use it

  • To reply to your enquiry and arrange your demo, by the method and at the time you chose.
  • To send you a quote and, if you become a customer, to manage your account and invoices.
  • To set up your dashboard and automations, and to generate the collateral your team asks for.
  • To understand requests sent by WhatsApp message or voice note.
  • To support you, fix problems and keep Collatero secure.
  • To meet our legal, accounting and tax obligations.

We don’t use your data for advertising, and we never use one customer’s content to make collateral for anyone else. We send marketing emails only if you’ve agreed to receive them, and every one lets you unsubscribe.

5. Our legal basis

Under the PDPL, we process personal data when:

  • you have given your consent, for example by sending us our contact form;
  • it’s needed to provide a service you or your organisation asked for under an agreement with us;
  • it’s needed to meet a legal obligation; or
  • we have a legitimate interest that doesn’t override your rights, such as keeping our systems secure.

You can withdraw your consent at any time. This doesn’t affect anything we did with your data before you withdrew it.

6. Who we share it with

We share personal data only with service providers who help us run Collatero. They are bound by contracts that require them to protect it and to use it only on our instructions. They include:

  • website hosting and form handling (Netlify);
  • cloud hosting and storage for the Collatero platform;
  • WhatsApp messaging (WhatsApp is operated by Meta);
  • email, speech-to-text and customer support tools.

We may also disclose data when the law or a competent authority requires it, or to protect our rights. If Collatero or Team Ingenious is reorganised or sold, the data may pass to the new owner, who must keep to this policy. We never sell personal data.

7. Where your data is stored

Some of our service providers store or process data outside Saudi Arabia. We transfer data outside the Kingdom only as the PDPL and its transfer regulations allow, and with the safeguards they require.

8. How long we keep it

  • Enquiries from people who don’t become customers: up to 24 months after our last contact, then deleted.
  • Customer accounts and content: for as long as your agreement runs. After it ends, we return or delete your content within 30 days, unless the law requires us to keep it longer.
  • Invoices and accounting records: for as long as Saudi law requires.
  • Website logs: kept by our hosting provider for a short period, for security.

9. How we protect it

All data travels over encrypted (HTTPS) connections. Access is limited to the people who need it to do their work, and we choose providers with strong security practices. No system is perfectly secure, so if a breach affects your data, we’ll notify you and the authorities as the law requires.

10. Your rights

Under the PDPL, you have the right to:

  • be told how your data is collected and used (this policy does that);
  • access your data and get a copy in a clear, readable format;
  • ask us to correct, complete or update it;
  • ask us to delete it when it’s no longer needed;
  • withdraw your consent.

To use any of these rights, email hello@collatero.com. We’ll reply within 30 days and may first need to confirm your identity. If you’re unhappy with our response, you can complain to the Saudi Data & AI Authority (SDAIA).

If your details are in a customer’s collateral, for example your employer’s, that organisation controls your data and decides how it’s used, and we process it on their behalf. Please contact them first; we’ll help them respond.

11. Children

Collatero is a business service and isn’t directed at children. We don’t knowingly collect data from anyone under 18 through this website. Customers who include children’s details in their collateral, such as schools making student certificates, are responsible for getting consent from a parent or guardian.

12. Changes to this policy

We’ll update this policy when our services or the law change, and update the date at the top. If a change is significant, we’ll tell customers by email before it takes effect.

13. Contact us

Collatero, a Team Ingenious company
Jeddah, Saudi Arabia
hello@collatero.com