Legal

Privacy Policy

Last updated: September 9, 2026

1. Introduction

Colossal Capital Company ("CC", "we", "us") operates Wovin and related Colossal Capital services (the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Services.

2. Information We Collect

Account data — name, email, display name, and related profile fields.
Contact & reachability — email addresses, phone numbers (E.164), mailing addresses, and self-reported social handles you choose to add.
Authentication data — OAuth tokens (Google, GitHub, Microsoft, Apple, LinkedIn), session tokens, and login events.
Usage & security — API metadata, feature usage, and abuse-prevention signals.
Payment data — billing information processed via Stripe; we do not store full card numbers.

3. How We Use Your Information

Provide, operate, and secure the Services.
Authenticate you and verify your identity via OAuth providers or SMS one-time passcodes.
Send transactional service messages (account security, verification codes, product updates).
Process payments and manage subscriptions.
Comply with legal obligations and prevent fraud/abuse.

4. OAuth & Third-Party Data

When you sign in or verify your identity using third-party providers (Google, GitHub, Microsoft, Apple, LinkedIn), we receive the profile data those providers share (name, email, profile URL). We use this data for authentication and identity verification only. We do not post to your accounts or access data beyond what is needed for verification.

5. Data Sharing & Disclosure

We do not sell personal data. We may share information with service providers who process data for us (e.g. cloud hosting, email, SMS, payment processing), when required by law, or in connection with a business transfer.

6. Data Retention

We retain account and contact data while your account is active, and verification logs as needed for security and compliance. You may request deletion via privacy@colossalcapital.co.

7. Your Rights

Depending on your jurisdiction (GDPR, CCPA, and others), you may request access, correction, deletion, or portability of your personal data, and withdraw consent for optional processing.

8. Cookies & Analytics

We use privacy-first analytics (Plausible) that does not use cookies or collect personal data. We do not use advertising trackers.

9. Security

We employ industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

The Services are not directed to children under 18. We do not knowingly collect data from children under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page.

12. Contact

Colossal Capital Company
Email: privacy@colossalcapital.co
Web: wovin.colossalcapital.co