Privacy Policy

1.1 Information You Provide Directly

• Account information: name, email address, password (stored as a secure hash), profile photo, bio, location, and website.
• Identity and role information: the role(s) you select (Buyer, Seller, or both) during onboarding.
• Payment information: billing details collected by our payment processor, Stripe. We do not store full card numbers on our servers.
• Communications: messages you send via the Platform's messaging system.
• User content: collaboration listings, reviews, and any other content you post.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, clicks, and session duration.
• Device and technical data: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies: see Section 6 below.

1.3 Information from Third Parties

• OAuth sign-in: if you sign in via Google or Apple, we receive your name, email, and profile picture from those providers.
• Linked social accounts: if you link your social media accounts (YouTube, Instagram, TikTok, etc.), we receive profile data and follower counts as permitted by those platforms.
• Payment processors: Stripe may share transaction status and payout details with us.

We use the information we collect to:

• Create and manage your account;
• Provide, maintain, and improve the Platform;
• Process transactions and send related notifications;
• Facilitate communication between Buyers and Sellers;
• Send you service announcements, updates, and support messages;
• Send marketing communications (where you have opted in);
• Monitor and analyze usage trends to improve user experience;
• Detect, investigate, and prevent fraudulent or unauthorized activity;
• Comply with legal obligations; and
• Enforce our Terms of Service and other policies.

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance: to provide the Platform services you have requested.
• Legitimate interests: to improve the Platform, prevent fraud, and communicate with you about our services.
• Consent: for marketing communications and optional cookies.
• Legal obligation: where required by applicable law.

We do not sell your personal information. We may share your information in the following circumstances:

• With other users: your public profile information (name, avatar, bio, storefront) is visible to other Platform users.
• Service providers: we share data with third-party vendors who assist us in operating the Platform (e.g., Stripe for payments, hosting providers, analytics services). These parties are contractually required to protect your data.
• Legal compliance: we may disclose information when required by law, court order, or governmental authority.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• With your consent: in any other circumstances where you have given us permission to share.

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your data within 90 days, except where we are required to retain it for legal, tax, or audit purposes.

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS), hashed password storage (bcrypt), and access controls. However, no method of transmission over the Internet is 100% secure. You are responsible for keeping your account credentials confidential.

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information.
• Deletion: request deletion of your personal data (subject to legal retention obligations).
• Portability: receive your data in a structured, machine-readable format.
• Objection / Restriction: object to or restrict certain processing activities.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at privacy@collab.app. We will respond within 30 days (or as required by applicable law).

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided us with personal information, we will delete it promptly. If you believe we have collected such information, please contact us at privacy@collab.app.

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We take appropriate steps to ensure that such transfers comply with applicable data protection laws (e.g., Standard Contractual Clauses for EEA transfers).

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the Effective Date and, where appropriate, sending an email notification. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.