Privacy Policy
Last updated 13 September 2026
Colmez, Inc. respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, the choices and rights you have, and how we protect it. We review this policy at least once a year and whenever our practices change.
Who we are and what this policy covers
Colmez, Inc. is a Delaware corporation based in the United States. We build an AI-native, single-tenant software platform for enterprises in the hazardous-waste and environmental-services industry.
This policy applies to personal information we handle as a data controller, meaning information where we decide the purpose and means of processing. That includes visitors to colmez.com, people who contact us or request a demo, sales prospects, and business contacts.
Data processed on behalf of our customers. When a customer uses the Colmez product, any personal information the customer submits into their instance is processed by Colmez as a data processor on that customer's behalf and under their instructions. That information is governed by the agreement and Data Processing Agreement between Colmez and the customer, not by this Privacy Policy. If you are an individual whose data a Colmez customer has placed in the product, please direct privacy requests to that customer, who is the controller of that data.
Personal information we collect and how we use it
We collect a limited amount of personal information, generally in these categories:
Information you provide directly
Our website has a demo request form that asks for your name, work email address, and company. When you submit it, that information is delivered to us by email through our email delivery provider. You can also write to us directly at contact@colmez.com, in which case we receive your email address and anything you choose to include. We use this to respond to you, arrange demos, and communicate about our product.
Business and prospect contact information
In the course of business development we may collect and hold professional contact details such as name, job title, employer name, work email address, and work phone number. We obtain some of this information from publicly available and third-party sources. We use it to contact prospective customers and partners and to communicate about our product and services.
Information collected automatically
Like most websites, colmez.com and its hosting provider automatically record standard server log information when you visit, which may include your internet protocol (IP) address, general location, browser type, operating system, referring pages, and the pages you view. We use this information to operate, secure, and maintain the website, to diagnose problems, and to understand general usage.
We collect identifiers, usage analytics, and diagnostic information. We retain chats and related context. We use this information to evaluate and improve the product, diagnose problems, and provide support. We do not sell this information or provide it to competitors for their own use.
Legal bases (where applicable)
Where the European Union General Data Protection Regulation (GDPR) or similar laws apply, we rely on the following legal bases: our legitimate interests in operating and securing our website and in business-to-business outreach; your consent, where we ask for it; performance of a contract, for our customers; and compliance with legal obligations.
Where your information is processed
Colmez is based in the United States, and the information we collect is processed and stored in the United States. If you access our website from outside the United States, you understand that your information will be processed in the United States. Where required for visitors in the European Economic Area or the United Kingdom, we apply appropriate safeguards for such transfers.
How long we keep your information
We keep personal information only for as long as it is needed for the purposes described in this policy. Inquiry and business-contact information is retained while it has business value and while we are in contact with you, and prospect information is removed once it no longer has business value. Server log information is kept for a limited period for security and operational purposes. We delete or de-identify personal information when it is no longer needed, and we honor valid deletion requests as described below.
How we protect your information
We maintain administrative, technical, and organizational safeguards designed to protect personal information. These include encryption of data in transit and at rest, access controls on a least-privilege basis, network and infrastructure monitoring, and due diligence over the vendors we use. Colmez is undergoing a SOC 2 examination of its security controls. No method of transmission or storage is completely secure, but we work to protect your information and to review our safeguards over time.
Your privacy rights and choices
Depending on where you live, you may have some or all of the following rights over your personal information:
- the right to know what personal information we hold about you and to access a copy of it;
- the right to correct inaccurate personal information;
- the right to request deletion of your personal information;
- the right to data portability;
- the right to object to or restrict certain processing;
- the right to opt out of the sale or sharing of personal information (we do not sell or share personal information);
- the right not to receive discriminatory treatment for exercising these rights.
Residents of California have these rights under the California Consumer Privacy Act (CCPA), and residents of the European Economic Area and the United Kingdom have these rights under the GDPR and related laws. To exercise any of these rights, email us at contact@colmez.com. We will verify your request and respond within the timeframe required by applicable law. There is no charge for a reasonable request. You may also authorize an agent to act on your behalf. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.
Children's privacy
Colmez is a business product and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us personal information, please contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Reviewed” date at the top of the policy, and significant changes will be reflected on this page. We encourage you to review this policy periodically.
Contact us
If you have questions, concerns, or complaints about this policy or our handling of your personal information, or if you would like to exercise your privacy rights, please contact us at:
Colmez, Inc., United States, contact@colmez.com