We take security seriously


The security of your data is our highest priority. While no system can be guaranteed to be 100% secure, we do everything we can to ensure that only you can access your data.

At Collected, we employ industry- standard security practices. This is why we have an A rating from Qualys Labs independent security tests. We continuously monitor and update our systems to keep them inoculated from new and emerging threats. Some of the methods we employ to keep your data secure include:

  • Transport Layer Security (TLS) and AES-256 bit encryption for data transfer
  • Industry-standard OAuth protocol to grant access to your linked accounts without exposing your credentials
  • Amazon Web Services (AWS) data centers that employ electronic surveillance, multi-factor access control, and are staffed 24x7 by security guards

Accessing your content

No one else can see your content in Collected unless you allow it through your linked cloud storage accounts. For example, if you share a Dropbox folder with a colleague who also uses Collected, they will receive suggestions from files in that shared folder. To remove their access, simply remove their shared privileges through the Dropbox website. This change will shortly be reflected in Collected. In addition, we don’t share or sell your data with anyone. For more information on privacy, view our privacy policy.

File Storage

Your files are stored on our servers only briefly for processing and delivery to you. They are deleted very shortly after this is complete. File metadata, extracted content, snippets of text, and small thumbnails of files and slides are stored in our content-suggestion engine, which is isolated from all servers but our own, in order to provide our service. These data are not accessible to others.

Linked Cloud Storage Accounts

We use the industry-standard OAuth protocol to grant access to your linked accounts without exposing your credentials to our servers. We don't store your passwords. You can easily manage Collected's access to these accounts through your Box, Dropbox, Google Drive, and OneDrive account settings. When you delete a linked account from Collected, all data is removed from our servers. Files and data in the linked account are not affected.

Protecting your Account

One of the best things you can do to protect your account is to use a strong, unique password. We require a minimum of 8 characters. In addition, make sure to sign out of Collected on shared computers.

Activity Tracking

Our service delivers content suggestions using contextual information, such as the current paragraph you’re working on as well as other information from your active document. For your privacy, we do not store this contextual information on our servers. Collected logs when suggestions are sent to measure usage levels, but no data concerning the actual suggestions are stored.