Privacy Policy

This Privacy Policy explains what information Collably, Inc. ("Collably," "we," "us," or "our") collects through collably.app (the "Service"), how we use it, and the choices you have. It's written to reflect what the Service actually does, not a generic template — if something below stops being accurate as the product changes, we'll update this page.

1. Information We Collect

From Google, when you sign in: your email address. Collably never sees or stores a password — authentication is handled entirely by Google via Supabase Auth.

What you provide directly: a permanent username; a role (Brand or Creator); optionally, a profile photo, bio, and niches (Creators) or a company name and website (Brands); links to your social accounts and the verification status of those links (Creators); campaign details you create (Brands); and content links, timestamps, and self-reported performance figures you submit to a campaign (Creators).

Collected automatically: basic usage data through Vercel Analytics and Speed Insights (page views and performance timing, aggregated — not tied to advertising profiles or sold to anyone), and a small number of functional cookies needed to keep you signed in and remember interface preferences (like whether your sidebar is collapsed).

2. TikTok Account Data

If you connect a TikTok account (Creators, optional, via Settings), TikTok asks you to authorize specific access and we only request what we use: your basic profile (name, avatar, a link to your profile), your public account stats (follower count), and a list of your own public videos with their stats (views, likes, comments, shares, thumbnail, caption, duration) — used to show verified performance data on content you submit to a campaign, instead of self-reported numbers. We never request the ability to post on your behalf.

Tokens are encrypted at rest and used only to make the specific API calls described above. Disconnecting (Settings, any time) revokes our access with TikTok directly and deletes your stored connection info — access/refresh tokens, follower count, and verification status. TikTok data already synced to a past submission (thumbnail, description, stats) is not deleted when you disconnect — it stays as part of that campaign's record for the Brand you submitted to, the same way the rest of a submission's history is kept, and simply stops updating since we no longer have access to refresh it.

3. How We Use Information

To operate your account and the campaign workflow (matching Brands and Creators, running the application/review/payout-tracking process); to show your profile to the other party in a campaign; to show your public profile at your Collably link, unless you've set it to private; to verify ownership of a linked social account when you request it; to communicate with you about your account or campaigns; to maintain the security and integrity of the Service; and to understand aggregate usage so we can improve it.

We do not use your data to train third-party AI models, and we do not run behavioral advertising on the Service.

4. How We Share Information

We don't sell your personal information. We share it only in these situations:

• With the other party in a campaign — a Brand reviewing your application sees your creator profile and submitted content; a Creator sees the Brand's campaign and company details
• Publicly, if you choose — your profile is visible at your Collably link unless you turn on private mode; campaign pages can be shared publicly by the Brand that created them
• With service providers who host and run the Service on our behalf, under obligations to protect it: Supabase (database and authentication), Google (sign-in), and Vercel (hosting, analytics, and performance monitoring)
• When legally required — to comply with a subpoena, court order, or similar legal process, or to protect the rights, safety, or property of Collably, our users, or the public
• In a business transfer — if Collably is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that deal, subject to this Policy or a successor policy you'll be notified of

5. Cookies

We use a small number of strictly functional cookies — keeping you signed in and remembering interface state like sidebar preferences. We don't use advertising or cross-site tracking cookies.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. If you request deletion (see below), we'll delete or anonymize your personal information within a reasonable time, except where we're required to keep it (for example, to comply with a legal obligation or resolve a dispute).

7. Your Rights and Choices

You can update most of your profile information directly in Settings at any time. You can set your profile to private to remove it from public view. You can request a copy of your data or request that we delete your account and associated personal information by emailing us at the address below — we'll respond and complete verifiable requests within a reasonable time. If you are located in the EEA, UK, or a U.S. state with its own privacy law (like California), you may have additional rights under that law (such as the right to access, correct, delete, or restrict processing of your data, or to opt out of certain uses); contact us to exercise them and we'll honor the rights applicable to you.

8. Data Security

We use reasonable technical and organizational measures to protect your information, including relying on Supabase and Google for authentication rather than handling passwords ourselves. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

9. Children's Privacy

The Service is not directed to, and we don't knowingly collect personal information from, anyone under 18. If you believe a child has provided us with personal information, contact us and we'll take steps to delete it.

10. International Users

Collably's infrastructure is hosted in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time as the Service changes or as required for legal reasons. If we make a material change, we'll update the "Last updated" date above and, where appropriate, provide additional notice. Continuing to use the Service after a change takes effect means you accept the updated Policy.

Contact

Questions about this Policy, or a data access/deletion request: privacy@collably.app