Privacy policy

Effective date: August 22, 2026

This policy explains what data CollabGlam collects, why we collect it, how the email relay works, who we share data with and the rights you have over your information.

1. Data we collect

We collect the following categories of information:

  • Account data — your email address, name and profile details you provide (company information for brands; display name, platforms, niches, rates and payout details for creators).
  • Public creator metrics — publicly available statistics about creator accounts on YouTube, Instagram and TikTok, such as follower counts, average views and engagement, and audience composition. Where audience figures are inferred rather than reported by a platform, they are labeled as estimates.
  • Collaboration data — campaigns, applications, messages, contracts, milestones, deliverable links and ratings created through the Service.
  • Payment data — transaction records for deposits, escrow, releases and payouts. Card details are processed by our payment provider and never stored on our servers.
  • Technical data — IP address, browser information and usage events collected when you use the Service, used for security and reliability.

2. How we use your data

  • to operate the Service: matching, messaging, contracts, escrow and payouts;
  • to power discovery and AI features, such as scoring how well a creator's audience fits a campaign;
  • to secure accounts, prevent fraud and enforce our terms;
  • to send transactional email — sign-in codes, invitations, notifications and message delivery;
  • to improve the Service using aggregated, de-identified usage information.

3. Email relay

CollabGlam includes an email bridge: messages sent through our relay are processed to deliver your conversations. When a brand and a creator message each other, we transmit the message to the recipient's email address through proxy addresses on our mail domain, and replies to those addresses are parsed and delivered back into the conversation thread.

Message content and attachments are processed only to route, deliver and store the conversation, to enforce attachment limits and to provide features such as collaboration stage tracking. We do not sell message content or use it for third-party advertising.

4. How we share data

We share personal data only:

  • Between counterparties — brands and creators in a collaboration see each other's relevant profile information, messages and contract details;
  • With service providers — payment processing (Stripe), email delivery (Amazon SES), file storage, AI infrastructure, and cookieless usage analytics (PostHog), each bound to process data only on our instructions;
  • For legal reasons — when required by law, to protect rights and safety, or in connection with a corporate transaction with notice to you.

We do not sell personal data.

5. Cookies and sessions

We use a single first-party session cookie to keep you signed in. It is httpOnly, expires after 30 days and can be revoked at any time by signing out. We do not use third-party advertising cookies or cross-site trackers on the Service.

6. Security

All traffic is encrypted in transit with TLS. Integration credentials are stored AES-256 encrypted with keys held separately from the database, sign-in codes are stored only as hashes and expire after ten minutes, and access to production systems is restricted and logged. No system is perfectly secure, so we also maintain monitoring and an incident response process, and will notify affected users of a breach as required by law.

7. Your rights (GDPR and CCPA)

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. California residents additionally have the right to know what personal information we collect and to not be discriminated against for exercising their rights; we do not sell personal information as defined by the CCPA.

To exercise any right, contact privacy@collabglam.com. We respond within the timelines required by applicable law and may need to verify your identity via your account email. You may also lodge a complaint with your local supervisory authority.

8. Data retention

We keep account and collaboration data while your account is active and as needed to provide the Service. Financial records — escrow, ledger entries and payouts — are retained as required for tax, audit and dispute purposes. When you close your account we delete or de-identify personal data within a reasonable period, except where a legal obligation requires longer retention.

9. Children

The Service is for adults. We do not knowingly collect personal data from anyone under 18, and accounts found to belong to minors are closed. If you believe a minor has provided us personal data, contact privacy@collabglam.com and we will delete it.

10. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced through the Service or by email before they take effect, and the effective date above will be updated. Continued use after the effective date constitutes acceptance of the revised policy.

11. Contact

Data protection inquiries: privacy@collabglam.com (Data Protection Officer). General support: help@collabglam.com. CollabGlam LLC, 732 S 6th St STE N, Las Vegas, NV 89101, United States.