Skip to content

Privacy policy

What this site collects, why, who processes it, how long we keep it, and how to ask us to delete it.

Under attorney review

This policy describes what the site does today and is in force as written. An attorney is reviewing it in parallel (Jesus, 2026-10-25); if the review changes the wording, the date at the top changes with it.

Who we are

27colab.com is run by 27 Colab LLC, Weston, Florida. Questions about this policy or your information: hello@27colab.com.

What we collect, and when

Nothing that tracks you loads until you allow it, with "Allow all" or by picking a category under "Choose". If you choose "Only necessary", no analytics, advertising-measurement or session-recording script runs.

  • Your privacy choice. A cookie called 27c_consent stores whether you allowed analytics and advertising measurement, for six months, so we don't ask on every page. It's strictly necessary and contains nothing else.
  • Analytics, only with your permission.
    • Google Analytics 4 (Google): pages you visit, how you arrived (for example a search or a link), device and browser type, approximate location from your IP address, and page-speed measurements. Ad personalization is off.
    • Microsoft Clarity (Microsoft): how pages are used, including heatmaps and session recordings. We set Clarity to mask the text you type into forms and your conversation with our assistant.
    • Our own visit log: the pages you visit on this site and where your visit came from (the referring site, campaign tags, and whether it came from an ad), under the random ID described below, kept in our own database. If you later send us your email, we connect that history to your message so we know what you read before writing to us.
  • Advertising measurement, only with your permission. When we run ads, we want to know which ones lead to a conversation or a booked call. If you allow advertising measurement, Google Ads (through Google Analytics) may set cookies that record whether your visit started from one of our ads and whether it led to a message or a call, and we keep the ad's click ID (for example gclid) with your visit, so we can later tell Google Ads which visits became clients. We don't use it to show you ads: ad personalization stays off, and we don't build audiences or follow you with ads on other sites.
  • Experiments, only with your permission. We sometimes test two versions of a page to learn which works better (with Statsig). A random ID in a cookie called 27c_uid keeps your version the same between visits, and we record which version you saw, whether you clicked its main button and which steps you took with our assistant (starting a conversation, seeing a rough range, leaving your email, booking a call). The ID isn't linked to your name or email unless you send us your email, and the cookie is deleted if you withdraw permission.
  • Site Snapshot. If you run our free Site Snapshot, we store the address you checked and the report for 12 months, so the report has a link you can share. Google's PageSpeed Insights loads that address to measure it. If you ask us to email the report, we keep your email to reply to you. If you also ask us to re-check the site in 30 days, we run the check once more then and email you what changed; the link in the first email cancels it. The email also has a link to the full check, which runs only if you start it: we read up to 10 pages of the site (following its robots.txt), open up to 3 of them in a browser we run to test accessibility, and send the pages' text to Anthropic's Claude to summarize what the business does. We keep the result with the report for 12 months, not the pages' text.
  • Spam protection. When you start a conversation with our assistant, join the Andii waitlist or send a form, Cloudflare Turnstile checks that you're a person. It loads only once you start the form, looks at signals from your browser, and doesn't use cookies to track you or show you a puzzle unless it has to.
  • Error reports. When something breaks, the site sends a technical report (the error, the page and browser type) to Sentry, through our own server. We've turned off the collection of personal details: no user information, cookies, request headers, IP-derived user data, query strings or form contents.
  • What you send us. If you email us or use a form on the site, we receive what you send, such as your name, email, company, message and, if you give it, your mobile number. Leads from the forms are also kept in Andii, the receptionist software we make, so one of us can reply from wherever you reached us. The form for booking a call also asks, optionally, how you heard about us. The Andii waitlist asks for your email and, optionally, your name and type of business, and we use it only to tell you about Andii. If you talk to our assistant on "Start a project", we store the conversation and the steps in it (for example that a rough range was shown), and an AI model (Claude, by Anthropic) writes the replies and keeps short notes on the conversation: what you need, how far along you are, the kind of project, and whether it looks like a real project, so we can reply to the most urgent first. Those notes are about what you write, never about who you are. Elizabeth and Jesus read every conversation that leaves an email.

Mobile information and text messages (SMS)

Published ahead of the attorney pass

Carriers require this section to be public before they let a business send text messages (A2P 10DLC registration), so it is published as soon as Jesus and Elizabeth approve it, without waiting for the attorney's review of the rest of this policy.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be sold, rented, or shared with any third parties or lead generators. We share mobile numbers only with the subprocessors that operate the messaging service (Twilio, and Andii, the receptionist software we make), solely to deliver these messages.

  • How you opt in. Only in one of these ways, and never by default: by ticking the separate, unchecked text-message box on the contact form of this site and giving us your mobile number; by agreeing to text messages during a phone call with Andii, our AI receptionist; or by replying YES to a message from us by text or Instagram.
  • What we send. Replies about your request, confirmations and reminders for calls you booked, and follow-ups on work we're discussing with you. Message frequency varies with your request.
  • Costs. Message and data rates may apply, charged by your carrier. Consent is not a condition of purchase.
  • Opting out and help. Reply STOP at any time to stop receiving texts; you'll get one message confirming it. Reply HELP for help, or email hello@27colab.com.
  • What we keep. Your number, whether you agreed to texts, the exact consent text you saw and when you agreed, with your message, for as long as the message itself (see below). Our texting is run through Andii, where the same record is kept.

Why we use it

To understand which pages help people and which don't, to find and fix errors, to reply when you contact us, and, with your permission, to learn which of our ads lead to calls. We don't sell or rent personal information, and we don't use it to target you with ads.

Who processes it for us

ServiceWhat for
RailwayHosting the site and its database
Google Analytics 4Analytics (only with your permission)
Google AdsMeasuring whether our ads lead to calls (only with your permission)
Microsoft ClarityHeatmaps and session recordings (only with your permission)
SentryError reports
CloudflareTurnstile: checking that forms are sent by people
Google PageSpeed InsightsMeasuring a site when you run Site Snapshot
StatsigPage experiments and the steps visitors take (only with your permission)
AnthropicOur assistant's replies, its notes on the conversation, and Site Snapshot's full-check summary
Google WorkspaceEmail
ResendSending confirmation emails, such as for the Andii waitlist
AndiiOur own receptionist software: it keeps the leads from this site and sends our text messages
TwilioDelivering text messages, when you've agreed to receive them

We'll add any new service to this list before it receives personal information.

How long we keep it

  • Your privacy choice: six months.
  • Analytics and advertising measurement: kept by Google and Microsoft according to the retention settings in our accounts.
  • Messages and form submissions: for as long as we're in conversation or working together, and deleted on request.
  • Answers given to our tools and the results they produce: deleted automatically after 12 months.
  • Conversations with our assistant, their steps and our visit log: deleted automatically after 12 months.

Your choices

  • Change your mind at any time with "Privacy choices" at the bottom of every page. Withdrawing permission stops analytics and advertising measurement and deletes their cookies on this site.
  • See or delete what we hold about you: email hello@27colab.com from the address you used with us. We'll delete what we hold about that address.

Children

This site is for businesses and isn't directed at children under 13. We don't knowingly collect their information.

Changes

When this policy changes, we'll update the date at the top of this page.

We’d like to measure how people use this site with Google Analytics, Microsoft Clarity, and our own visit log, and whether our ads lead to calls. Nothing loads unless you allow it. Privacy policy