Last updated: October 24, 2026
Collabaway, Inc. (“Collabaway,” “we,” “us,” or “our”) is committed to protecting your privacy. This Data Policy describes how we collect, use, share, and protect your personal information when you use the Collabaway platform, website, and services (collectively, the “Platform”).
When you create an account, we collect information you provide directly, including your name, email address, password, optional mobile number, account type (brand, agency, influencer, or editor), and your chosen unique handle. If you register using Google OAuth, we receive your name, email address, and profile picture from Google.
Depending on your account type, you may provide additional profile information such as a biography, profile photo, location, content categories, languages spoken, portfolio links (including YouTube video links), website URL, and rate card information. For influencer accounts, this information is displayed on your public profile at collabaway.com/@handle.
Portfolio video files remain with their hosting provider. Playing a portfolio video loads the provider's player, and its privacy terms apply. Videos and links that you publish in your public portfolio can be viewed and shared by visitors, including unlisted YouTube links.
Connecting a social media account is optional for creators, including creators who make UGC. Typed profile links are labelled unverified; signing in to a supported platform confirms account ownership. We support OAuth connections with Instagram, YouTube, TikTok, Twitter (X), LinkedIn, and Twitch. Depending on the platform and optional permissions you choose, we may receive and store:
We may also aggregate social media data through third-party services such as Phyllo to provide standardized analytics across platforms. We do not post to your social media accounts or access your private messages.
We collect information about how you use the Platform: pages visited, buttons and features used, browser and device type, the website that referred you (its domain only), your country and region worked out from your IP address, and timestamps. On our public pages we use PostHog and Google Analytics for this, with your consent, as described in our Cookie Policy; without it, PostHog only counts visits, without cookies. With your consent, PostHog may also record how some public pages are used, with everything you type hidden.
Analytics never records what you type, your search terms, your handle or the address of private pages. Some events about your account, such as signing up or confirming your email, are recorded on our servers and shared with PostHog under an internal account ID, never your email address. Deleting your account deletes them, including the copy held by PostHog.
We use the information we collect to:
You can create an account and use Collabaway without providing a phone number. If you choose to add one, we send a verification code to confirm the number. Verification does not opt you into offer alerts or calls.
With your separate, optional permission, we may text you when a brand or agency sends you a sponsorship offer, or our team may call you about sponsorship offers. Message frequency varies with offers. Message and data rates may apply. Consent is not a condition of using the platform.
We use Twilio to deliver text messages. We record your contact choices, the wording you saw and when you answered. You can withdraw permission for texts or calls separately in Settings → Notifications. Reply STOP to stop texts, or HELP for help. After a STOP reply, re-enabling texts may also require replying START to the sender; your app preferences remain under your control.
We do not sell or share mobile numbers or SMS opt-in consent with third parties for their marketing. We disclose this information to service providers only as needed to deliver messages and operate the service. For help, contact support@collabaway.com.
When you connect a social media account via OAuth, you authorize the respective platform to share certain information with Collabaway. Each social media platform has its own privacy policy and terms governing what data is shared:
You can disconnect any linked social media account at any time through your account settings. Disconnecting an account asks the platform to revoke our access and removes the statistics we stored for it from your profile; for YouTube, figures on your deals are removed at the same time. Note that at least one social media connection is required for influencer accounts.
Payments on the Platform are processed through Stripe Connect. When you set up payment capabilities (either to pay or receive funds), you provide financial information directly to Stripe. Collabaway does not store your full credit card numbers, bank account numbers, or other sensitive payment credentials on our servers.
We receive and store limited transaction data from Stripe, including transaction amounts, dates, status, and the last four digits of payment methods, for the purpose of displaying transaction history and managing campaign budgets within the Platform. Stripe’s handling of your payment data is governed by the Stripe Privacy Policy.
When you participate in a campaign, your profile information, contact details, and campaign-related communications are shared with other campaign participants (brands, agencies, influencers, and editors assigned to that campaign). This sharing is necessary to facilitate campaign collaboration and is limited to the scope of the campaign.
We share data with trusted third-party service providers who assist us in operating the Platform, including:
These service providers are contractually obligated to use your data only as necessary to provide their services to us and in accordance with applicable data protection laws.
We may disclose your information if required by law, subpoena, or legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Collabaway, our users, or the public.
We retain your personal data for as long as your account is active or as needed to provide you with the Platform’s services. If you delete your account, we will delete or anonymize your personal data within thirty (30) days, except where we are required to retain certain data for legal, regulatory, or legitimate business purposes (such as maintaining financial transaction records as required by tax law).
Campaign data, including messages and deliverables, may be retained for a reasonable period after campaign completion to support dispute resolution and legal compliance. Anonymized and aggregated data that does not identify you may be retained indefinitely for analytics purposes.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us at privacy@collabaway.com. We will respond to your request within thirty (30) days.
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 18, please contact us at privacy@collabaway.com.
Collabaway is based in the United States. If you access the Platform from outside the United States, your personal data may be transferred to, stored in, and processed in the United States or other countries where our service providers maintain facilities. These countries may have data protection laws that differ from those in your jurisdiction.
Where required by applicable law, we implement appropriate safeguards for cross-border data transfers, including standard contractual clauses approved by relevant regulatory authorities. By using the Platform, you consent to the transfer of your information to the United States and other countries as described in this policy.
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS) and at rest, application-level access controls, regular security reviews, and Row Level Security policies on our database.
OAuth tokens for connected social media accounts are encrypted at rest. Payment data is handled by Stripe in compliance with PCI DSS standards and is never stored on Collabaway servers.
While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information.
We use cookies and similar technologies to operate the Platform, maintain your session, and analyze usage patterns. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.
We may update this Data Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and notify registered users via email or in-platform notification. Your continued use of the Platform after any changes constitutes your acceptance of the revised policy.
If you have any questions about this Data Policy or our data practices, please contact us at:
Email: privacy@collabaway.com
We'd like to measure how people find and use Collabaway, including recordings of some pages with anything you type hidden. If you reject, we only count visits, without cookies. The site works the same either way. Cookie policy