PRIVACY POLICY

Creators: name, email, handle, Google Sign-In basics (name, email, picture, account ID); your Collab Card content; and private fields — rate card, UPI ID, shipping address, contact email — which are never public. Your rate card is shown only in a Deal Room if you share it. We never access Gmail, Drive, contacts or passwords. Brands: company, contact name, email, phone, Instagram handle, the brief and its budget. Deal Rooms: messages, locked terms, deliverables, post links, payment records, reviews. Payments: Razorpay handles money and KYC. We store amounts, payment IDs, UTR and status — never card numbers, bank details or ID documents. Usage: page views by source, product analytics, and daily-scrambled IP hashes for abuse limits. Emails: every email we send is logged, content included, so failed emails can be resent.

Instagram data Instagram data. If you connect your Instagram professional account, we access it read-only through Meta’s official API: your profile (username, account type, follower and media counts), account insights (reach, engagement, and audience age, gender and cities) and metrics on your recent posts. We never read your DMs, comments, captions or media, and we can never post or change anything. We use this data to verify that the account is yours, to show your verified numbers on your public card and to brands you deal with (you agree to this under the Connect button), and to power your Studio analytics. We store these numbers and your access token securely, keep up to 13 months of history, and use them for nothing else. Instagram data is never sold, never used for advertising and never sent to AI models.

Disconnect and deletion. Disconnect any time in Studio: Collab Card Studio → Trust & Verification → Connect Instagram → Manage › → Disconnect Instagram. Your Instagram numbers and access token are deleted immediately and you get a confirmation code with a status page. Removing MyCollabLink in Instagram → Settings → Apps and websites, or asking Meta to delete your data, does the same. You can also email hello@mycollablink.com with the subject “Delete my data”. Instagram data is never sold, never used for advertising, never sent to AI

YouTube Connecting a channel uses YouTube API Services; the YouTube Terms of Service and the Google Privacy Policy (https://policies.google.com/privacy) apply. Revoke access anytime at https://myaccount.google.com/permissions.

We do not collect government IDs, and we do not sell personal data to anyone. Ever.

With your consent: running the product, showing verified metrics, payments and subscriptions, and emails. For security (legitimate use): hashed IPs and usage logs. With cookie consent: analytics and ad measurement. Payment records are also kept under legal obligation.

Brief text and your published profile (plus your rate card) go to an almost all the major AI model to produce your summary and fit score. Instagram data is never sent to AI. Output is advisory and never used to train models.

Deal counterparties see what you share in the Deal Room. Public cards are public and can be indexed. Processors (minimum necessary each): Supabase, Vercel, Resend, Razorpay, Meta (Instagram API, Pixel, Conversions API), Google (Sign-In, YouTube, Analytics), DeepSeek/OpenAI/Google AI, Upstash, PostHog. We disclose data when law requires, and data may transfer with a change of ownership, with notice. We never sell personal data.

Sign-in cookies are required. PostHog and Google Analytics measure usage; Meta Pixel and Conversions API measure our marketing (the latter uses a hashed email, never the plain address). Opt out of analytics and ad measurement via the cookie banner or settings.

Primary database: Supabase, Mumbai (India). Some processors operate globally under standard contractual safeguards.

Account data: while active, deleted within 30 days of account deletion. Deal and payment records: as long as a party may need them and tax law requires. Email logs: 12 months. Instagram: 13 months of history, gone within 30 days of disconnect. Analytics: up to 24 months.

Encryption in transit, encrypted tokens, restricted and logged access, expiring Deal Room links. Breaches affecting you are reported to you and the Data Protection Board of India as the DPDP Act requires.

Access, correct or erase your data, withdraw consent, raise a grievance, or nominate someone to act for you. Email hello@mycollablink.com response within 5 days, grievances resolved within 15 days. Escalation: Data Protection Board of India.

Transactional emails are part of the service. Nudge emails can be unsubscribed via any email's link or Studio settings.

MyCollabLink is for users 18 and older. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.

Any of: (1) Studio > Settings > Delete account, or disconnect Instagram to delete Instagram data only; (2) Instagram > Settings > Apps and websites > Remove MyCollabLink; (3) email hello@mycollablink.com, subject "Delete my data". You get a confirmation code and status link; deletion completes within 30 days, except records law requires us to keep.

When this policy changes materially, we will update the date above and notify active users by email or in-product notice before the change takes effect.