Data protection
Your data is encrypted in transit using TLS. Access to production systems is restricted, logged, and follows least-privilege principles.
No third-party tracking
Cana does not embed third-party analytics, advertising, or tracking SDKs. We collect only what we need to operate the service — see our Privacy Policy.
Infrastructure
Cana runs on established cloud infrastructure providers. We rely on their physical and network security controls and limit each provider’s access to what is needed to run the service.
Access & authentication
Accounts are protected by authentication, and you are responsible for keeping your credentials secure. We recommend a strong, unique password and signing out of shared devices.
Your content
Your messages, files, and AI prompts are stored to provide the service to you and your team. You can request deletion of your account and associated content at any time — see Support.
Report a vulnerability
Found a security issue? Please email connect@colate.io with details and steps to reproduce. We appreciate responsible disclosure and will respond promptly.