Privacy Policy
This is a translation of the Serbian policy. Both say the same.
Who processes the data
Kolega is made by Vebiko (Serbia). For any question about your data, write to kolega@vebiko.com.
What stays on your computer
Kolega runs on your company's computer. Files, e-mail, business databases and the conversation history stay on that computer. Kolega reads them only when you give it a task, and only what the task needs.
Passwords and access credentials for e-mail and databases are stored encrypted with Windows data protection and are never sent to Vebiko.
What leaves your computer
- To answer a task: the text of the task and the parts of files or e-mail the task needs are sent encrypted, through the Vebiko server, to our AI service provider. The provider processes them under a data processing agreement, only to produce the answer, does not use them to train models, and deletes them after a short period that applies to security and abuse prevention. The Vebiko server forwards this content and does not store it.
- Voice: a voice recording is sent through the Vebiko server to be converted to text. The recording is not stored.
- For billing and the company overview: the Vebiko server stores the license and company name, the computers Kolega is activated on (computer name and app version), usage per conversation, the conversation title (up to 120 characters of the first task) and an action log (which tool was used, on which file or recipient, a short description, and whether you allowed the action). The content of files and e-mail is not stored.
You connect a mail account (Gmail, Outlook, Zoho or mail at your hosting provider) in Kolega, under Settings → Connectors, with its address and password; for Gmail this is an app password that you create in your Google account. Kolega signs in from your computer directly to the mail server over IMAP and SMTP, like any e-mail program. This is not access through a Google API. The password is stored encrypted, only on your computer, and is never sent to Vebiko.
At your request Kolega reads and searches e-mail, saves attachments to your computer, creates drafts in your Drafts folder and sends e-mail. It sends each message only after you approve that message. It does not delete or move messages. Your e-mail stays on your mail server; what Kolega has read may remain in the conversation history on your computer until you delete it. The part of an e-mail a task needs is handled like any other task content, as described above. The only thing about e-mail that the Vebiko server keeps is the action log entry: that a message was sent or drafted, and the recipients' addresses, without the subject or body.
You disconnect an account in Kolega (Settings → Connectors → Remove), which deletes the password from your computer. You can also delete the app password in your mail account.
Data from your Google account (Google Drive)
Kolega uses a Google account only for the backup of its Invoices (Računi) module in Google Drive, and only after you sign in with "Sign in with Google" under Settings → Modules → Računi. It requests these scopes:
openidandemail: the address of your Google account, so Kolega knows which Drive holds the backups and can show it in Settings.https://www.googleapis.com/auth/drive.file(Google Drive): Kolega sees only the files it created itself, the folder "Kolega rezervne kopije" and the backups in it. It cannot see any other file in your Drive.
Kolega does not request access to Gmail from Google. Gmail connected with an app password is described in the "E-mail" section.
Where it is stored. The access token from Google is stored encrypted with Windows data protection, only on your computer, and is never sent to the Vebiko server. Backups go from your computer straight to your Drive and, when you restore one, from your Drive straight to your computer.
Who receives it. Backups and the address of your Google account are not sent to the Vebiko server or to our AI service provider. We do not share Google user data with anyone.
Why. Only to create and restore a backup when you ask for it. For data received from Google, Kolega:
- uses it only to provide the features you see and request in the app;
- does not sell it, does not use it for advertising, and does not transfer it to data brokers or use it for credit decisions;
- does not let humans read it, except with your explicit consent, when needed for security purposes (such as investigating abuse), or to comply with the law;
- does not use it to develop, improve or train generalized artificial intelligence or machine learning models. Neither Vebiko nor our AI service provider does so.
Kolega's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access and deleting data. You can revoke access in Kolega (Settings → Modules → Računi → Sign out), which deletes the token from your computer, or at myaccount.google.com/permissions. You delete the backups in your Drive. To delete records on the Vebiko server, write to kolega@vebiko.com.
How long data is kept
Data on your computer stays until you delete it or uninstall Kolega. Data on the Vebiko server is kept while the license is active and as long as the law requires for billing, and is then deleted.
Your rights
Under the Serbian Law on Personal Data Protection you can ask to see, correct or delete your data. Write to kolega@vebiko.com. You can also file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.
Changes
When we change this policy, the new date appears at the top of the page.