This policy explains what personal data kollabic ("we") collects when you use kollabic, why we collect it, and the choices you have. It applies to brands, creators and visitors to our website.
What we collect
- Account details: your name, email address and password (stored only as a secure hash), and your role as a brand or creator.
- Brand details: company name, website, industry and VAT number or other tax ID, used for campaigns and invoices.
- Creator profile: handle, bio, category, city, languages and rate per post.
- Social media data: if you connect Instagram, YouTube or TikTok, we receive your public profile, follower count, recent posts and their performance (views, likes, comments, shares and, where the platform provides them, reach, saves and watch time), and, where the platform allows it, audience demographics (age, gender, top cities or countries). For other platforms we store the profile link and numbers you enter.
- Payout details: if you get paid through Stripe, Stripe collects your identity and bank details directly and we only store your Stripe account ID and whether it can receive payouts. If you give us bank details for a manual transfer (account number or IBAN, and routing number, sort code or SWIFT/BIC), the account number is encrypted before it is stored.
- Payments: card payments are processed by Stripe. We receive the payment status and reference; we never see or store your full card number.
- Campaign activity: applications, messages between brands and creators, submitted content links and their performance.
- Tracked links: when someone clicks a creator's kollabic link we record the time, device type and referring page, and a daily-changing code that lets us count unique visitors without storing IP addresses.
- Enquiries: details you send through our contact, newsletter or job application forms.
How we use it
- To run your account and the campaigns you take part in, including matching brands with creators.
- To process payments, issue invoices and send payouts.
- To estimate audience quality and show campaign results.
- To send account emails (verification, password reset, campaign updates). We send newsletter emails only if you subscribe; email us to unsubscribe and we'll remove you.
- To keep the platform secure, prevent fraud and meet legal obligations such as tax records.
Who we share it with
We share data only as needed to run the service:
- Between brands and creators on the same campaign (for example, a brand sees the profile and content of creators who apply).
- With service providers who process data for us: Stripe (payments and payouts), our email provider, our database and hosting providers, and, if a brand uses plain-language creator search, Anthropic, which processes the search text only.
- With Instagram (Meta) and Google, when you choose to connect those accounts.
- With authorities when the law requires it.
We don't sell personal data.
International transfers
We serve brands and creators in 37 countries across North America, Latin America, Europe, the Middle East, Africa and Asia-Pacific, and our service providers may process data in other countries. When personal data from the UK or the European Economic Area is transferred elsewhere, we rely on safeguards the law recognises, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
Legal bases (UK and EEA)
We process your data to perform our contract with you (running your account, campaigns, payments and payouts), to meet legal obligations (such as tax records), and for our legitimate interests in keeping the platform secure and improving it. We rely on your consent for the newsletter, and you can withdraw it at any time.
Cookies and browser storage
We use two essential cookies to keep you logged in. We store your creator shortlist and preferred currency in your browser so they survive a page refresh. We don't use advertising or tracking cookies, so we don't need a cookie banner.
How long we keep it
We keep account data while your account is open. Notifications are deleted after 90 days, email logs after 180 days, activity logs after a year and click records after about 13 months. Payment and invoice records are kept for as long as tax law requires.
Your rights
Wherever you live, you can ask to see, correct, delete or export your personal data, and you can disconnect a social account at any time from your dashboard, which stops further syncing.
- UK and EEA (UK GDPR and GDPR): you also have the right to object to or restrict processing, and to complain to your data protection authority, such as the ICO in the UK.
- Other countries: you have the rights your local law gives you, for example under Canada's PIPEDA, Australia's Privacy Act, Brazil's LGPD, Japan's APPI, South Korea's PIPA, Singapore's PDPA or South Africa's POPIA. We'll honour access, correction and deletion requests wherever you are.
- California (CCPA/CPRA) and other US states: you can ask what personal information we collect and how we use it, and ask us to delete or correct it. We don't sell or share personal information for cross-context behavioural advertising, and we won't treat you differently for using these rights.
To make a request, email our contact page. We'll respond within 30 days.
Privacy contact
For questions or complaints about how we handle your data, email our contact page.
Contact
kollabic