Privacy policy

This Privacy Policy describes how CollabKit (“CollabKit,” “we,” “us”) handles personal information when you use our websites and services, including our media kit builder, hosted creator pages, dashboard, and free tools. It should be read together with our Terms of Service.

1. Information we collect

Depending on how you use CollabKit, we may collect:

• Account and contact data: such as name, email address, and authentication identifiers when you sign up or sign in (for example via Google OAuth).
• Media kit and profile content: text, images, links, portfolio items, pricing, bios, colors, and settings you add to your kit.
• Social and performance context: information associated with connected or referenced social accounts (for example usernames, public profile details, and metrics we obtain through integrations or other technical means) used to populate your kit.
• Inquiry and communications data: when someone submits a brand inquiry or you contact support, we process the contents of those messages and related metadata (such as timestamps).
• Transaction data: if you purchase a paid plan, our payment processor (Stripe) collects payment details; we receive limited billing information (for example customer id, subscription status, and receipt-related data), not your full card number.
• Technical and usage data: IP address, device and browser type, general location derived from IP, pages viewed, referring URLs, optional link campaign tags you add to your public URL (for example ?ref=) when someone loads your published kit, and diagnostic logs - collected via server logs, cookies, and similar technologies.
• Inputs to AI-assisted features: text or prompts you provide to tools that generate suggestions (for example bio or hashtag helpers), which may be sent to model providers to produce output.

2. How we use information

We use personal information to:

• Provide, maintain, and secure the Service (including hosting your public media kit page when you publish)
• Authenticate users, prevent fraud and abuse, and enforce our Terms of Service
• Process subscriptions and payments and send billing-related notices
• Deliver product updates, support responses, and (where permitted) marketing about CollabKit
• Operate AI-assisted features and improve models and prompts in line with this Policy
• Analyze usage in aggregate or de-identified form to improve performance and develop new features
• Comply with law and respond to lawful requests

3. How we share information

We do not sell your personal information. We may share information with:

• Service providers who assist us under contract - for example hosting, email delivery, analytics, payment processing (Stripe), authentication, customer support tooling, and AI inference providers used to power suggestions or summaries.
• Visitors to your public media kit when you publish content or enable features (such as an inquiry form) that make information visible or deliver messages to you.
• Professional advisers (lawyers, accountants) where necessary.
• Authorities when required by law or to protect rights, safety, and integrity of users and CollabKit.
• Business transfers in connection with a merger, financing, or acquisition, subject to appropriate safeguards.

Social platforms receive information according to their own policies when you authenticate with them or when your browser interacts with their services; CollabKit does not control those platforms’ data practices.

4. Public pages and brand inquiries

When your media kit is public, anyone with the link may see the content you choose to display. If you enable a brand inquiry form, submissions typically include the visitor’s contact details and message; we use that information to route the inquiry (for example by email) and to protect against spam or abuse.

5. Cookies and similar technologies

We use cookies and related technologies for session management, preferences, security, and analytics. You can control cookies through your browser; disabling some cookies may limit certain features.

6. Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or de-identify it, subject to backup and archival practices.

7. Security

We implement technical and organizational measures designed to protect personal information (including encryption in transit where appropriate and access controls). No online service is completely secure; we encourage strong passwords and caution when sharing links to your kit.

8. International transfers

We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal information, and to object to certain processing or direct marketing. You can exercise many choices in your account settings (for example updating kit content, disconnecting integrations, or deleting your account where available). You may also email [email protected].

10. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take steps to delete it.

11. Region-specific notices

If you reside in the European Economic Area, UK, or Switzerland, our legal bases for processing may include contract performance, legitimate interests (such as securing the Service and improving features), consent where required, and legal obligation. You may lodge a complaint with your local supervisory authority.

California residents may have additional rights under the CCPA/CPRA (for example to know, delete, and opt out of certain sharing). We do not “sell” personal information as defined by the CCPA. To submit a request, email [email protected].

12. Requests from public authorities

We review governmental and law enforcement requests for user data to verify validity and scope. We may challenge overbroad or unlawful requests and seek to notify users when not prohibited, disclosing only the minimum information necessary to comply with valid legal process.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on this page and update the “Last updated” date. For material changes, we will provide additional notice when appropriate.

14. Contact

Privacy questions: [email protected].