Privacy policy

1. What we collect

We collect what you give us and what is needed to run the service:

• Account details: your email address, name and photo, and whether you are a brand or a creator.
• Brand details: your website or app link, name, description, logo, goals, audience, location and budget.
• Creator details: your display name, bio, niches, social handles and follower counts, city and country, and rate.
• What you do in Kollabrio: jobs, applications, messages and attachments, agreements, video submissions, campaigns and replies.
• Payment records: which plan or purchase you made and its status. Card and bank details are entered with Stripe and never reach our servers.
• Tracked-link clicks: for each click on a brand's tracked link we record the referring site, country, device type and a visitor code that changes daily. We do not store IP addresses for these clicks.
• Basic technical data such as cookies that keep you signed in.
• Page views: we count visits to our pages with Vercel Web Analytics, which sets no cookies and does not identify you.

2. Articles we write for you

If you ask Kollabrio to write an article, the question you chose and what we know about your business from its scan are sent to Anthropic (Claude) to write it, and the question is searched on Google through Serper to see what already ranks. Each article's picture is drawn by OpenAI from a one-sentence description of a scene. Articles you publish are shown to anyone your website or Shopify store shows them to.

If you connect a WordPress site, we keep the application password you give us (where only our servers can read it) and use it only to post the articles you publish. If you connect a webhook, we send each article you publish to that address. You can disconnect either in Integrations, and revoke a WordPress application password in WordPress itself.

3. Slideshows we make for you

If you ask Kollabrio to make a slideshow, what we know about your business from its scan is sent to Anthropic (Claude) to write the slides, and each slide's picture is drawn by OpenAI from a written description of a scene (with your mascot, if you gave us one). No one else's photos are used. The slides, the pictures and anything you upload for them (your character, screenshots of your product) are stored as public files, because they are made to be posted, along with the colours you choose. Uploaded pictures are re-encoded, which removes their metadata (such as where a photo was taken). If you post a slideshow to TikTok from Kollabrio, TikTok fetches the slides from us and posts them with the title, description and settings you chose.

4. Accounts you connect

If you connect an Instagram, TikTok, TikTok Shop, App Store Connect, Google Search Console, RevenueCat or Shopify account, we receive only what you approve on that platform's own screen.

• Instagram and TikTok: your account ID, username, profile photo and follower count, and an access token.
• TikTok Shop: your shop's ID, name and region, and an access token.
• App Store Connect: the API key you give us, used to read your app's download reports.
• RevenueCat: the read-only secret key you give us, used to read your app's summary numbers (subscriptions, trials, revenue).
• Shopify: your store's name, addresses, currency and number of products, the number and total value of its orders over the last 28 days (never your customers' names, addresses or other details), and an access token. Shopify also asks you to let us publish pages to your store, which we only do when you press Publish on a page in Kollabrio.
• Google Search Console: read-only access to the search numbers for your site (clicks, impressions, average position and top searches), used only to show them to you and to plan your marketing. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use it for advertising, sell it, or let people read it.

We use this to confirm the account is yours and to show you your own numbers. We do not post, message or change anything on your accounts unless you press a button in Kollabrio that says it will, and we do not sell this data or use it for advertising. Once a day we read your connected tools' summary numbers again and keep each day's figures, so you can see them over time. Tokens and keys are stored where only our servers can read them. You can disconnect at any time in Integrations, which deletes the connection and its tokens, or remove Kollabrio from inside the platform itself.

5. Creators we find outside Kollabrio

To help brands reach creators, we look up public creator profiles and business contact email addresses through a data provider, and may send those creators an email on a brand's behalf. Brands see a creator's public profile only, never the email address.

Every such email says how to stop: reply "stop" and that brand will not email you again through Kollabrio. To be removed from our records entirely, write to team@kollabrio.com.

6. Ask and the video library

Kollabrio keeps a library of public TikTok accounts and their recent videos, read through a third-party data service: the handle, display name, profile picture address, follower count, each video's caption, length, view, like, comment and share counts, and the address of its cover image. We don't keep copies of the videos or pictures. Each video's cover and caption are sent to Anthropic (Claude) to describe what kind of video it is; for videos that did especially well, and any video someone asks us to look at, the video is downloaded for a moment so that still frames from it can be sent to Anthropic and its sound to OpenAI to be transcribed, and the file is deleted straight away. We keep the written description and the transcript. If you are a creator and want your account left out, write to team@kollabrio.com.

Questions you ask on the Ask page are kept with their answers, which anyone with the answer's link can read. Questions are sent to Anthropic (Claude) to research and write the answer. If you are not signed in, a random id in a cookie counts your free questions; it identifies the browser, not you.

7. How we use it

• To run your account and the features you use, including matching brands with creators.
• To send service email: sign-in codes, notifications, receipts and, if you leave them on, digests and job alerts. You can turn the optional ones off in Settings.
• To take payments and pay creators through Stripe.
• To draft text you ask for, such as a job post or a reply. The relevant details are sent to our AI provider for that request only.
• To review what is posted. Our team checks every job and campaign before it goes out, and may read messages and other content when it is needed to investigate a report, prevent abuse or help you with a problem.
• To keep the service secure and to fix problems.

8. Who we share it with

We do not sell personal information. We share it only with the companies that run parts of the service for us, and only as needed:

• Supabase (database, sign-in, file storage) and Vercel (hosting)
• Stripe (payments and creator payouts)
• Resend (service email) and Instantly (outreach email)
• Anthropic (AI drafting)
• OpenAI (drawing pictures for articles and slideshows from a written description; never your personal details)
• Influencers Club (public creator search) and logo.dev (brand logos)
• YouTube API Services (finding public short videos in your market when you paste a link; we send the search phrase, never your details. Google's privacy policy is at policies.google.com/privacy)
• Discord (internal alerts to our own team about sign-ups, payments and items awaiting review)

Brands and creators see what each other chooses to share: a creator's public profile, a brand's name and logo, and the messages, agreements and submissions between them. We may also disclose information when the law requires it.

9. Keeping and deleting your data

We keep your information while your account is open. You can delete a brand or your whole account yourself in Settings: it removes the data tied to it straight away, cancels any paid plan and disconnects connected accounts. You can also email team@kollabrio.com from the address on the account and we will delete it within 30 days. Either way, records we must keep by law, such as payment records held by our payment provider, are kept.

To delete only the data from a connected account, disconnect it in Integrations. If you remove Kollabrio from inside Instagram or TikTok, write to us and we will delete what that connection gave us.

10. Your choices and rights

You can see and edit most of your information in the app. You can ask us for a copy of your data, to correct it, or to delete it, by writing to team@kollabrio.com. Depending on where you live, you may have further rights under laws such as PIPEDA, the GDPR or the CCPA, including the right to complain to your privacy regulator.

11. Security, children and changes

Data is encrypted in transit, access is limited by account, and secrets are kept on our servers. No service can promise perfect security; tell us straight away if you think your account has been misused.

Kollabrio is for people aged 18 and over and is not directed at children.

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect.

12. Contact

Questions or requests about your data: team@kollabrio.com.