Privacy Policy
Last updated: 28 June 2026
This Privacy Policy explains how Collabr (the “Platform”, “we”, “us”), a creator–brand marketplace operated from Singapore, collects, uses, stores, shares and protects your information, including information we access from social accounts you choose to connect (TikTok, Instagram and YouTube). It should be read alongside our Terms & Conditions. By using Collabr you agree to the practices described here.
1. Information we collect
We collect:
Account and profile data you provide: name, email, password (stored hashed by our authentication provider), role (brand or creator), profile details, and any rates, niches, or links you add.
Campaign and collaboration data: campaigns, applications, messages, deliverables and dispute information you create or exchange on the Platform.
Payment data: handled by our payment processor (Stripe). We do not store full card numbers; we receive limited details such as payment status and payout-account status.
Connected social account data (only if you connect an account): see Section 2.
Usage and device data: basic logs, cookies needed for sign-in and security, and analytics about how the Platform is used.
2. Data from connected social accounts (TikTok, Instagram, YouTube)
Connecting a social account is optional and done through each platform’s official OAuth flow. You can disconnect at any time. When you connect an account, you authorise us to access, via the platform’s API, the data needed to produce your own performance analytics:
TikTok (scopes user.info.basic, video.list): your basic profile and your video list with per-video metrics (view, like, comment and share counts and timestamps).
Instagram (scopes instagram_basic, instagram_manage_insights, pages_show_list, business_management): your professional account profile and media insights for your own content.
YouTube (scope yt-analytics.readonly and the YouTube Data API): your channel and video performance metrics.
We use this data only to compute and display analytics back to you (the account owner) and, where you are a connected creator, to show verified performance to brands you choose to engage. We do not post, comment, message or take any action on your social accounts, and we do not sell this data. We retain historical snapshots of these metrics so your performance history persists over time, even after the native app stops showing older data; you can request deletion at any time (Section 8).
3. How we use your information
To operate the marketplace (accounts, campaigns, applications, messaging, payments and payouts); to compute your analytics and reports; to provide content suggestions; to keep the Platform secure and prevent fraud and abuse; to provide support; to send service and transactional emails; and to comply with legal obligations.
4. Automated processing and AI
We use a third-party AI provider (Anthropic) to help categorise your content (for example, labelling a post’s format or topic) and to generate optional content suggestions and plain-language summaries of your own analytics. The numeric analytics themselves are computed by our own deterministic code, not by AI. Information sent to the AI provider is limited to what is needed for the task (such as post titles, captions and metadata). Our AI provider does not use this data to train its models. AI suggestions are informational only.
5. How we share information
We do not sell your personal information. We share it only with:
Service providers (sub-processors) that run the Platform under contract: Supabase (database, authentication and hosting), Stripe (payments and payouts), Anthropic (AI processing as described in Section 4), and Resend (transactional email).
Social platforms (TikTok, Meta, Google) when you connect an account, to authenticate and retrieve your data via their APIs.
Other users, where you choose to share it (for example, a creator’s verified metrics shown to a brand you engage, or messages you send).
Legal and safety: where required by law, to enforce our Terms, or to protect rights, safety and the integrity of the Platform; and in connection with a merger, acquisition or asset sale.
6. Platform policy compliance
Our use of information from social platforms complies with their developer terms and policies, including the TikTok Developer Terms of Service, the Meta Platform Terms and Developer Policies, and the Google API Services User Data Policy.
Google Limited Use. Collabr’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except as necessary for security, to comply with law, or with your explicit consent.
7. Data retention
We keep account and marketplace data for as long as your account is active and as needed to provide the Platform, resolve disputes, and meet legal, tax and accounting obligations. Connected-account analytics snapshots are retained to provide your performance history until you disconnect the account or request deletion. When data is no longer needed, we delete or anonymise it.
8. Your rights and choices
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:
• Disconnect a social account at any time from your Creator Studio settings, which stops further data collection from that platform.
• Request deletion of your data via our Data Deletion page or by emailing us.
• Access, correct or export your data, or withdraw consent, by emailing joincollabr@gmail.com.
We will respond within the timeframe required by applicable law. You may also revoke Collabr’s access directly from your TikTok, Instagram/Meta or Google account settings.
9. Data deletion
To delete your account and associated data, including any data retrieved from connected social accounts, follow the steps on our Data Deletion page. We honour deletion requests received directly and via the platforms’ data-deletion mechanisms.
10. Security
We use technical and organisational measures to protect your information, including encryption in transit, access controls, and storage of access tokens in a restricted manner. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. International transfers
We operate from Singapore and use service providers that may process data in other countries. Where data is transferred across borders, we rely on appropriate safeguards as required by applicable law.
12. Children
The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, for example by updating the date above or by notice on the Platform. Your continued use after changes take effect constitutes acceptance.
14. Contact
Questions or requests about your privacy? Contact us at joincollabr@gmail.com.