CollabLinker Privacy Policy.
Effective date: September 11, 2026. This Policy explains how the operator of CollabLinker ("CollabLinker", "we", "us") processes personal information when creators, brands and agencies use the service, including campaign marketplace, matching and AI-assisted features. It should be read together with our Terms of Service and Data Deletion instructions.
1. Information you provide
We process account email and authentication identifiers; creator-profile information such as public name, handle, category, country, languages, bio and optional avatar; collaboration preferences and private commercial settings; brand and agency contact information; campaign briefs, objectives, budgets, requested markets, creator criteria, platforms and deliverables; creator applications and optional quotes or messages; optional campaign documents; offer, negotiation, content-review, publishing and settlement records; support requests; agency membership information; and other information you choose to submit.
2. Social-platform information
Depending on the platform and connection method, CollabLinker may obtain social information through a provider-authorized OAuth/API connection or through a creator-confirmed public profile using a supported public-data integration. Authorized connections may provide account identifiers, public profile information and metrics permitted by the platform. Public-profile connections use publicly available profile identifiers and available public metrics and do not require your social-media password. The public CollabLink labels these connection types separately.
3. Campaign matching and AI-assisted processing
CollabLinker may process creator-profile, campaign and collaboration information to structure campaign requirements, calculate fit signals, rank or recommend creators, organize applications, summarize information and improve future matching. Early recommendations may combine automated rules with human review. When model-based AI features are enabled, relevant submitted content may be sent to an AI infrastructure or model provider only as needed to provide that feature, subject to provider safeguards and our service configuration. We do not intentionally use private passwords, social access tokens or full payment-card information as AI prompt content.
4. What is public
If a creator publishes a CollabLink, the page can display information the creator chose for the public profile, including public name, handle, headline, category, country, bio, collaboration types, work samples and supported social metrics. Live campaign listings may display brand name, campaign description, compensation type, location, creator requirements, platforms, deliverables, deadlines and other information the brand has provided for the opportunity. Account email, private brand contact information, OAuth tokens, secure brand-link tokens, private creator rate cards, valuation factors, unpublished campaign requests and private collaboration records are not intentionally published.
5. Brand, campaign and agency information
Brands may submit a campaign brief without a full account and provide organization name, contact name, work email, optional website, market, campaign objective, budget, creator requirements, platforms and description. Brands submitting direct offers may also provide phone/WhatsApp details and campaign documents where supported. Abuse controls may limit repeated submissions and may store a cryptographic hash derived from network information through first-party telemetry or verification systems rather than intentionally storing raw IP addresses in campaign records. Agency features process creator membership and shared collaboration information needed to provide agency workspaces.
6. Billing information
Paid subscriptions are processed through Paddle when it acts as Merchant of Record. CollabLinker receives identifiers and subscription, transaction, payment-status and billing-period information required to grant or remove plan access. Full card numbers and card security codes are processed by the payment provider and are not stored in CollabLinker application tables. Creator compensation for marketplace campaigns is currently separate from CollabLinker subscription billing unless a future payment feature expressly states otherwise.
7. How we use information
We use information to authenticate users; create and publish creator profiles; retrieve and display supported social metrics; receive campaign briefs and offers; provide campaign discovery, applications, matching and shortlisting; maintain negotiation and approval history; send transactional notifications; provide subscription entitlements; prevent fraud and abuse; secure the service; respond to support and privacy requests; diagnose errors; understand product usage; measure acquisition and marketplace conversion performance when enabled; improve recommendation quality; comply with legal obligations; and improve reliability and product functionality.
8. Legal bases and permissions
Where privacy law requires a legal basis, processing may rely on performance of a contract or steps requested before entering one, consent where specifically requested, legitimate interests in providing, improving and securing the service, and compliance with legal obligations. You may withdraw a consent-based permission where applicable, although this does not affect processing already lawfully completed.
9. Cookies, browser storage and first-party telemetry
CollabLinker uses essential authentication cookies and related storage required to keep users signed in securely. Some forms use session- or browser-scoped storage to preserve workflow state. Privacy-safe first-party telemetry records limited event names and page paths, including marketplace funnel events such as campaign brief submission and creator application submission; secure brand-link tokens are redacted from telemetry paths. Attribution parameters may be stored to understand how users reached CollabLinker. When Meta Pixel or TikTok Pixel is configured for advertising measurement, CollabLinker asks for browser measurement permission before loading those advertising technologies. If permission is granted, those providers may receive page-view and conversion events together with limited event parameters. Choosing not to grant measurement permission prevents CollabLinker from loading those advertising pixels in that browser unless the preference is later changed.
10. Service providers
We use infrastructure and service providers needed to operate CollabLinker, including hosting and deployment, database/authentication, email delivery, subscription billing, supported social platforms, public-data integrations and analytics. AI-assisted functionality may use AI infrastructure or model providers when enabled. When advertising measurement is enabled with permission, Meta and TikTok may also process limited browser and conversion-event information under their own terms and privacy notices. Providers receive information only as necessary for the service or measurement purpose they provide and may process it under their own contractual and legal obligations.
11. International processing
CollabLinker is designed for international use and service providers may process information in countries different from yours. Where applicable law requires transfer safeguards, we rely on provider contractual safeguards, recognized transfer mechanisms or other legally available grounds.
12. Retention
We keep information only as long as reasonably needed for the purposes described here. Unpublished brand campaign requests may be retained while they are reviewed, matched or followed up and may be deleted or anonymized when no longer useful or required. Creator applications and campaign outcomes may be retained as part of marketplace and collaboration history where reasonably necessary to provide the service, support repeat campaigns, prevent abuse, improve recommendation quality or satisfy contractual and legal obligations. Short-lived verification records expire quickly. Optional campaign documents are kept only as reasonably needed for the relevant collaboration, security or legal obligations. Product telemetry is automatically removed after a limited analytics period. Collaboration, billing, audit and security records may be retained longer where needed for contractual history, accounting, fraud prevention, security or legal obligations.
13. Security
We use access controls, row-level database security, server-side secrets, restricted service functions, cryptographic hashing, encrypted provider credentials where applicable, private file storage where applicable, signed download links, signed webhook verification and secure collaboration tokens. Marketplace write operations use restricted workflows rather than exposing unrestricted database writes to browsers. No online service can guarantee absolute security, so users should also protect account email access and confidential collaboration links.
14. Automated recommendations and your choices
Campaign fit scores and creator recommendations are intended to help organize opportunities, not make legally significant decisions without human participation. Brands retain final creator selection, and creators choose whether to apply or participate. If a recommendation appears inaccurate, users can choose not to act on it and may contact us with relevant corrections. Paid creator subscription status does not by itself guarantee higher marketplace ranking.
15. Your choices and rights
You can edit public creator-profile information, unpublish a CollabLink, disconnect supported social connections, cancel subscriptions and request access, correction or deletion where applicable. Creators can choose whether to apply to marketplace campaigns. Privacy and deletion requests should be submitted through our Contact page using the email associated with the relevant account or campaign submission. We may verify control before fulfilling a request.
16. Data deletion and provider revocation
Disconnecting a provider stops the active CollabLinker connection and removes stored active connection credentials where applicable. Revoking an OAuth authorization directly at a social platform prevents future authorized access but does not automatically delete unrelated campaign, application, collaboration, billing or audit records. Follow the Data Deletion instructions when stored CollabLinker information should also be removed.
17. Children
CollabLinker is a business collaboration service and is not directed to children. Users must meet the minimum age and legal-capacity requirements applicable to them and to the social platforms they connect. If you believe a child has provided personal information contrary to applicable law, submit a privacy request through the Contact page.
18. Changes to this Policy
We may update this Policy as the marketplace, matching systems, AI-assisted features, providers or applicable requirements change. The effective date above identifies the current version. Material changes will be communicated through the service or another reasonable channel when required.
19. Contact
For privacy, access, correction, deletion or other data questions, use the secure CollabLinker Contact page. Do not submit passwords, access tokens or full payment-card information.