ColibriOS

Privacy Policy

Effective July 28, 2026

ColibriOS ("Colibri", "we") is business-operations software for coaches, retreat hosts, event creators, and educators. This policy explains what we collect, why, and the choices you have. Questions? Email hello@colibrios.com.

Who operates ColibriOS

ColibriOS is run by Stephanie Holbrook of Dragonfly Web Designs LLC.

Dragonfly Web Designs LLC
785 E Apache Street, Silver City, NM 88061
623-910-1711
hello@colibrios.com
https://dragonflywebdesigns.com/

What we collect

  • Account information — your name, email address, business name, and login credentials when you create a Colibri account.
  • Content you add — events, contacts, registrations, invoices, posts, images, and other records your business manages in Colibri. This may include personal information about your customers; you are responsible for having a lawful basis to store it.
  • Payment information — subscription and customer payments are processed by Stripe or PayPal. Card numbers never touch our servers.
  • Usage data — privacy-friendly, cookieless analytics (Plausible) on our public pages, and operational logs needed to run and secure the service.
  • Connected services — if you connect an integration (for example email sending, SMS, shipping, a calendar feed, or a social-media account), we store the tokens and settings needed to provide that feature, and use them only for it.
  • Affiliate tax information — if you apply to the affiliate program, we collect the information on IRS Form W-9 (including your taxpayer identification number) because commission payouts are reportable income. It is stored separately from ordinary account data, is never shown back in full to anyone but the platform operator, and is used only for paying you and for tax reporting (for example, Form 1099-NEC).

How we use it

  • To provide and improve the service — hosting your workspace, sending the emails and messages you ask us to send, processing registrations and payments.
  • To communicate with you about your account.
  • To keep the platform secure and prevent abuse.

We do not sell personal information, and we don't use your business's customer data for advertising.

Text messaging (SMS)

Businesses on Colibri may send text messages only to people who have given them consent, and every message includes the ability to opt out by replying STOP. Phone numbers and SMS opt-in consent are never shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are used solely to deliver the messages you asked for. Message frequency varies; message and data rates may apply. Reply HELP for help or STOP to unsubscribe at any time. The full opt-in workflow is documented at colibrios.com/sms-opt-in.

Social media integrations

If you connect a social-media account (Facebook, Instagram, Threads, or LinkedIn), we store the access token that platform issues and use it solely to publish the posts you compose and schedule, and to show you the result. We do not read your feeds, messages, or contacts. You can disconnect an account at any time, which deletes the token. You may also request deletion of all data related to a connected account by emailing hello@colibrios.com.

Service providers

We rely on a small set of processors to run Colibri: Supabase (database and authentication), Netlify (hosting), Stripe and PayPal (payments), Resend (email delivery), Twilio (SMS, when enabled), EasyShip (shipping, when enabled), Anthropic (AI features), and Plausible (analytics). Each receives only what it needs to provide its function.

Retention & deletion

Your data stays in your workspace for as long as your account is active. If you cancel, one clock runs from that day: you keep full access for 30 days — use it to export your data — and your workspace stays restorable for 90 days total. At 90 days it is permanently deleted. That is the same day we stop offering reactivation: the day you can no longer get it back is the day it's gone. We keep no archive copy.

You can request deletion at any time via hello@colibrios.com. We aim to acknowledge within two business days and to complete deletion within 30 days. Some records outlive a deletion for reasons we don't control — payment history held by Stripe or PayPal under financial record-keeping rules, email delivery logs at our email provider, and disaster-recovery backups until they rotate out. Records of people who unsubscribed are kept deliberately: honouring "never email me again" requires remembering it.

Where we operate

ColibriOS is built for businesses in the United States, and your workspace data — the database and the files you upload — is stored in the United States. We don't offer the service to people in the European Economic Area or the United Kingdom, and it isn't directed at them, so European data-protection rules such as the GDPR don't apply to what we do. Some of the service providers listed above operate internationally in the ordinary course of delivering their part of the service.

If you're a US business using Colibri to serve clients outside the United States, you're the one who decides what to collect from them and why — see "Your rights" below for how the roles split.

Your rights

You may access, correct, export, or delete your personal information. To exercise any of these, email hello@colibrios.com. We won't charge you for it, and we won't treat you differently for asking.

Several US states — California, Colorado, Connecticut, Virginia and others — give residents rights over their personal information. Where those laws apply to you, we honour them: the right to know what we hold, to correct it, to delete it, to get a copy, and not to have it sold. We do not sell personal information and never have, and we don't share it for cross-context behavioural advertising.

Two different relationships, because it changes who to ask. For your own account — your name, email, billing — we decide how the data is used, so come to us. For the client, member, student and guest records inside a business's workspace, that business decides what to collect and why; we only process it on their instructions and don't use it for our own purposes. So if you're a customer of a business that uses Colibri, contact that business first. If they ask us to delete something on your behalf, we do.

Changes

We'll post any changes to this policy here and update the effective date above.