Privacy Policy
Last updated: September 30, 2026
Colzy is operated by Mike Manzyrev, trading as Colzy, from the United Kingdom. We are the controller of the personal data described in this policy, and you can reach us at mike@getcolzy.com.
The short version
Colzy scores your sales calls to show you the mistakes that cost you deals. In the web app you upload a recording of your own call; no bot joins a call. The audio is stored encrypted for up to 30 days, transcribed once by our speech-to-text provider with a label for who said each word, and then deleted automatically. The transcript and the scores are kept until you delete them, and you can delete anything, any time. In the Mac app, which coaches live, call audio is turned into text in the moment and is never saved as audio. We never sell your data, we never use your calls to train AI models, and we keep no voiceprint: a speaker label tells two voices apart inside one recording and identifies nobody. You can ask us to delete your data at any time, and so can the people you were on a call with.
This policy explains what Colzy ("we", "us") collects, how we use it, and the choices you have. It covers the Colzy website at getcolzy.com, the Colzy web app at app.getcolzy.com (which has its own fuller page at app.getcolzy.com/privacy), the Colzy desktop app, and related services. It works together with our Terms of Service. If you have a question that isn't answered here, email mike@getcolzy.com.
What we collect
Account and contact information
- Your email address, when you join early access, create an account, or contact us. We use it to set up access, sign you in, sync your data across your machines, send onboarding and important updates, and reply to you.
- Your answers when you apply for the founding list: what you sell, your offer's price range, who takes your sales calls, and your Instagram handle if you give it. We use them to tell who Colzy fits and to reach you about your seat. They are deleted with your list entry.
- Older signup answers, if you joined before October 2026: how many sales calls you take a week, and whether you are on a Mac or on Windows.
- Payment information, if and when you pay for a plan. Payments are handled by our payment platform. We never see or store your full card details.
- Anything you send us directly, by email or message, including feedback.
Call data, plainly
This is the part that matters most, so here it is step by step.
- In the web app (the Lost Deal Scan), you upload a recording of a call you made and had consent to record; you confirm that consent with a checkbox before the first upload. The file is stored encrypted in our storage (Cloudflare) and read once by our speech-to-text provider (Deepgram), which returns the words with a label for who said each one. The audio is deleted automatically 30 days after upload; only the audio track of a video is ever kept, the rest is discarded at once.
- In the Mac app, which coaches live, Colzy listens to your call audio on your Mac, streams it to the same speech-to-text provider and turns it into text in real time. There the audio itself is not saved, not by us and not as a recording anywhere in Colzy. Some hard-to-classify phrases are also sent, as text only, to an AI inference provider that helps identify which objection was raised, in the moment, and are not written to storage by us or, under our agreements, by the provider.
- We keep no voiceprints and no biometric identifiers. The Mac app separates who is speaking by audio source (your microphone versus the call audio), never by anyone's voice. In the web app the speech-to-text provider labels the speakers inside the one recording you uploaded, so Colzy can ask you which speaker is you; that label is a position in that transcript, it is not stored as a voice profile and identifies nobody across recordings. Colzy reads the words, not the voice: mistakes and objections are detected from the text of what was said, and no one's tone, stress or emotion is ever analysed.
- Transcripts. In the web app the transcript of a call you uploaded (the words, who said them, when), the mistakes found and the scores are stored in your account until you delete them, so your progress over 30 days can be shown. In the Mac app full transcripts exist only in session files on your own Mac; during early access you can choose to share those diagnostic files with us to help improve detection, and sharing is manual and entirely up to you.
- Call analytics are stored to power your own dashboards: things like call length, your talk ratio, which objection types came up, which coaching cards were shown, deal outcomes you record, and the tips you were given. These are summaries, not recordings.
- If you fill in personalization details (such as what you sell and who you sell to), we store those to tailor your coaching.
- The suggested lines you see come from a fixed library of sales techniques, or from your own script if you add one. Your conversations are never used to train any AI model, by us or, under our agreements, by our providers.
Your sales script
You can give Colzy your own sales script, so the lines on your screen are the ones you already use. This is optional.
- When you add it, the text of your script is sent to our AI provider to build your grade and your personal card set, as text, for that request only, and is not written to storage by the provider under our agreements.
- The Mac app does not store your script on our servers; it lives on your Mac. The web app stores it in your account, because the drills and the scoring read it every day; you can delete it there at any time.
- Your script trains nothing. It is never used to train any AI model, by us or by our providers.
- The card set built from it lives on your Mac, together with your script. Where Colzy wrote a line in your style because your script had none, the app marks it and it only shows on a call after you approve it.
- You can delete your script and its cards at any time from the app, in My Progress, under Your script.
Automatic updates and setup milestones
Colzy keeps itself up to date, so you are always on the current version. Here is exactly what that involves.
- While the app is running, it asks our own update server every few hours whether a newer version exists, and tells you when there is one so you can install it.
- That request carries what any web request carries: the app's name and version, your macOS version, and your IP address. Nothing else is sent. No hardware profile, no usage data, no personal data, and nothing about your calls.
- We do not log or count update checks or update downloads. Unlike the download counter on our website, these leave no record on our side.
- Setup milestones. When you first set up Colzy, the app sends us a handful of one-off milestones, such as first launch and first sign-in. Each carries a random install code the app generates for itself, plus the app version. That code is not linked to your name or email and is not used to track you. We use it only to count how many people get through setup, so we can see where people get stuck.
- Your IP address reaches our backend with every request the app makes, as with any internet service. We use it in the moment to limit abuse, such as too many sign-in attempts. It is not stored with your account.
- Cloudflare, which hosts our backend, sees the connection the way it sees any request to a website.
- Agreeing to our Terms of Service and this policy when you first set up Colzy covers automatic updating, so the app does not ask you again separately. How updates install is described in section 6 of the Terms.
Website data
- Privacy-friendly analytics via Umami, which is cookieless and does not track you across other sites. It counts page views and which parts of the page get used, such as a button tap or a form being started, with nothing that identifies you and never your email.
- Basic traffic analytics via Cloudflare Web Analytics, which is also cookieless, does not fingerprint you, and does not track you across other sites.
- The website sets no advertising or tracking cookies.
- Our pages load their fonts from Google Fonts. Google receives your IP address when that happens, so it can serve the font files. Nothing else is sent, and Google sets no cookies through our site.
- When you click a download button, we count the click and note which page or link it came from, with no personal details attached.
If you were on a call with a Colzy user
Colzy is used by the person who ran the call. If you spoke with someone who uses Colzy, here is what that means for you:
- What is processed. Your speech on that call is turned into text in the moment so the seller's app can spot a likely objection. Short, hard-to-classify phrases also pass through an AI provider for a moment, as text only.
- Where it came from. We received it from the Colzy user who ran the call, as part of the call audio on their computer.
- What is kept. No voiceprint, ever. If the seller used the live Mac app: no audio, and no transcript on our servers (a full transcript may sit in a file on the seller's own computer, which is theirs, not ours). If the seller uploaded a recording of the call to the web app: the audio for up to 30 days, then deleted automatically, and a transcript with the seller's scores, kept until the seller deletes it. In both cases we never learn your name or email from the call.
- Why we are allowed to. We rely on our legitimate interest, and the seller's, in running a coaching tool that keeps no recording of you. We consider this low impact because nothing that identifies you is stored on our side.
- Why this notice lives here. We usually cannot contact you directly, because we never learn your name or your email.
- Your rights. You can ask us for a copy of anything we hold that relates to you, ask us to correct or delete it, or object to the processing. Email mike@getcolzy.com with the approximate date of the call and who you spoke with, and we will handle it. You can also complain to the ICO at ico.org.uk, or to the data protection authority in your own country.
Colzy users are responsible for telling you the call is being processed where the law requires it, and our terms oblige them to do so.
How we use information
- To provide the Service: live coaching, your analytics, account access, and sync.
- To improve detection and coaching quality during early access.
- To send onboarding, service updates, and replies to your messages.
- To keep the Service secure, prevent abuse, and enforce our terms.
- To understand, at a high level, how the website and product are used.
Where UK and EU data protection law applies, our legal bases are: performing our contract with you (providing the Service), our legitimate interests (keeping the Service running, keeping it secure, understanding how it is used, and improving detection quality, in ways you would reasonably expect), consent where we ask for it, and legal obligations where we must.
Who is responsible for what
For your account, your billing details and your own call analytics, we are the controller. That means we decide how that data is used, and this policy explains it.
For the call itself, the person running the call decides to use Colzy and decides what to say. They are the controller for that call. We process the call on their behalf and only to give them coaching in the moment. If you use Colzy for an employer or a client, that organisation is the controller and you should make sure they know you are using it.
If you are a business customer and you need a written data processing agreement, email us and we will send one.
Who we share it with
We do not sell personal data, and we do not share it for advertising. We use a small set of providers to run the Service, and each gets only what it needs to do its job. They currently include:
| Provider type | What they do for us | What they receive |
|---|---|---|
| Speech-to-text (Deepgram) | Live transcription during your calls | Streamed call audio, processed in real time |
| AI inference (Cerebras and Groq) | Classifying hard-to-detect objections, building your card set and playbook from your script, reviewing a recorded call you choose to review, preparing a call brief, suggesting a better script line in your weekly review, drafting your 3- and 6-month check-in messages, and playing the prospect in your role-play practice | Short text snippets of call speech; the text transcript of a recording you drop in (never the audio); your sales script and setup answers (only if you choose to add them); a prospect's application answers you paste; for your weekly review, one script line with the words prospects used at the hard points of your lost calls; for a check-in message, a prospect's first name and the goal they told you; for role-play practice, the objection and your answers, and for a full practice call the thread of that call and, when a booked prospect's application answers are used to play them, those answers, all as text (never the audio), with nothing stored. Each is processed for that one request |
| Voice (ElevenLabs, with OpenAI as backup) | Reading your script lines and practice objections aloud in practice | The text of those lines only, never audio |
| Cloud database (Supabase) | Storing accounts and summary call analytics | Account details and call analytics |
| Backend infrastructure (Cloudflare) | Securing and routing app requests | Account identifiers and request data |
| Hosting and forms (Netlify) | Running the website and signup form | Your email and signup answers |
| Analytics (Umami) | Cookieless website statistics | Anonymous page-view and interaction data |
| Payments (Whop) | Processing payments | Payment and billing details |
| Email (Resend) | Sending onboarding and updates | Your email address |
| Call scoring and drills (Fly) | Running the engine that scores an uploaded call and runs the web drills | Your transcript and your drill audio while a session runs; nothing kept between sessions |
| Error monitoring (Sentry) | Telling us when something breaks | An error report: the page or request that failed and your account id, never a transcript, a recording or a script |
Call text, the transcript of a recording you review, any script you paste, a prospect's application answers, the script line and prospect quotes in your weekly review, and the objection and your answers in role-play practice (for a full practice call, its thread and, when a booked prospect's application answers are used to play them, those answers) are processed by our AI providers (Cerebras and Groq) to produce your coaching, your call review, your brief, your weekly script suggestion, your check-in messages, the follow-up draft, the script grade and the prospect's lines in role-play, with no retention on their side. With the live Mac app, recordings and audio never leave your Mac; with the web app, the one recording you upload goes to our storage and to the speech-to-text provider as described above, to no one else, and is deleted after 30 days.
Under our agreements with these providers, they may process data only to provide their service to us, and not to train their models or for their own purposes. If we change providers, the categories above will still describe what is shared.
Most of our providers are in the United States. When personal data leaves the UK, we rely on one of two things: a UK adequacy decision, which for US companies means the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses in our contract with that provider. For EU and EEA users, the equivalent is the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. Email us and we will tell you which applies to a given provider and send you a copy of the safeguard. We may also disclose information if the law requires it, or in connection with a sale or reorganization of the business, in which case this policy will continue to apply to your data.
How long we keep it
- Your email and account: for as long as you use Colzy or stay in touch, and removed when you ask.
- Diagnostic session files you choose to share with us: only as long as needed to improve detection, deleted on request at any time.
- A recording you upload to the web app: 30 days, then deleted automatically; deleting the call in the app removes it at once.
- Transcripts, scores and your script in the web app: until you delete them, or your account.
- Call analytics: for as long as your account is active, so your trends stay useful to you. Deleted with your account.
- Waitlist and founding-list emails and answers: until you're onboarded or ask to be removed.
Security
Data moves between the app, our backend, and our providers over encrypted connections, access to stored data is restricted, and secrets are kept out of the app itself. No system is perfectly secure, and we cannot guarantee absolute security, but if a breach ever affects your personal data we will notify you and the relevant authorities as the law requires.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, restrict or object to its processing, or export it, and you can opt out of our emails at any time. Email mike@getcolzy.com and we will handle it within a month.
Where we rely on your consent, you can withdraw it at any time, and that does not undo anything we did before you withdrew it. Where we rely on our legitimate interests, you can object and we will stop unless we have compelling grounds not to. We make no decision about you by purely automated means that has a legal or similarly significant effect. If you want to complain to us, email us with "Complaint" in the subject line. We will acknowledge it within 30 days, look into it, and tell you the outcome.
- UK: these rights come from the UK GDPR and the Data Protection Act 2018. If you're unhappy with how we've handled something, you can complain to us as described above, and you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to fix it first.
- EU and EEA: these rights come from the EU GDPR. You can complain to the data protection authority in the country where you live or work.
- California: you have equivalent rights under the CCPA/CPRA, including the right to know, delete, and correct. We do not sell or share personal information as those terms are defined in California law, and we do not use sensitive personal information beyond providing the Service. We are currently below every size threshold that makes a company a "business" under California law, but we apply these rights anyway. Our website does not track you across other websites, and no third party collects information about your activity across other sites through it. If your browser sends a Do Not Track or Global Privacy Control signal, our website analytics do not load at all. We will never treat you differently for exercising your rights.
- Canada and Australia: if you are in Canada, PIPEDA may apply to us, and you can complain to the Office of the Privacy Commissioner of Canada. If you are in Australia, the Australian Privacy Principles may apply. You can ask us to access or correct your information, and you can complain to the OAIC at oaic.gov.au. Our providers are located in the United States, and this page is our privacy policy for both countries.
- Everyone else: the same email works. We apply the same standard regardless of where you live.
Cookies
The website uses no advertising or tracking cookies, and our analytics are cookieless. After you sign up, the website keeps a note of the email you used in your own browser so the form is not sent twice; it never leaves your device, and clearing site data removes it. The Mac app stores your settings and login locally on your Mac. The web app keeps you signed in with two cookies on app.getcolzy.com that hold only your session, and remembers your appearance choice in a third; none of them track you.
You can turn our analytics off. Our website analytics are first-party, cookieless and used only to improve Colzy, which is why we do not show a consent banner. You still have the right to say no. Turn on Do Not Track or Global Privacy Control in your browser and our analytics scripts will not load, or email us and we will honour it. If anything essential ever changes here, we will say so on this page.
Children
Colzy is built for professionals running a business. It is not intended for anyone under 18, and we do not knowingly collect data from them. If you believe a minor has given us data, email us and we will delete it.
Changes to this policy
If we change how we handle your data, we will update this page and the date at the top. If the change is significant, such as new categories of data or new uses, we will tell you directly before it takes effect.
Contact
Colzy is operated from the United Kingdom. Questions about your privacy, or anything in this policy, go to mike@getcolzy.com.