Last updated: March 2026
Collabaway, Inc. (“Collabaway,” “we,” “us,” or “our”) is committed to protecting your privacy. This Data Policy describes how we collect, use, share, and protect your personal information when you use the Collabaway platform, website, and services (collectively, the “Platform”).
When you create an account, we collect information you provide directly, including your name, email address, password, account type (brand, agency, influencer, or editor), and your chosen unique handle. If you register using Google OAuth, we receive your name, email address, and profile picture from Google.
Depending on your account type, you may provide additional profile information such as a biography, profile photo, location, content categories, languages spoken, portfolio links, website URL, and rate card information. For influencer accounts, this information is displayed on your public profile at collabaway.com/@handle.
Influencer accounts are required to connect at least one social media account during registration. We support OAuth connections with Instagram, YouTube, TikTok, Twitter (X), LinkedIn, and Twitch. When you connect a social media account, we receive and store:
We may also aggregate social media data through third-party services such as Phyllo to provide standardized analytics across platforms. We do not post to your social media accounts or access your private messages.
We automatically collect information about how you interact with the Platform, including pages visited, features used, search queries, browser type, device information, IP address, referring URLs, and timestamps. We use PostHog for product analytics, which may include session recordings of your interactions with the Platform to help us improve the user experience.
We use the information we collect to:
When you connect a social media account via OAuth, you authorize the respective platform to share certain information with Collabaway. Each social media platform has its own privacy policy and terms governing what data is shared:
You can disconnect any linked social media account at any time through your account settings. Disconnecting an account will revoke our access token and remove the associated social media data from your profile. Note that at least one social media connection is required for influencer accounts.
Payments on the Platform are processed through Stripe Connect. When you set up payment capabilities (either to pay or receive funds), you provide financial information directly to Stripe. Collabaway does not store your full credit card numbers, bank account numbers, or other sensitive payment credentials on our servers.
We receive and store limited transaction data from Stripe, including transaction amounts, dates, status, and the last four digits of payment methods, for the purpose of displaying transaction history and managing campaign budgets within the Platform. Stripe’s handling of your payment data is governed by the Stripe Privacy Policy.
When you participate in a campaign, your profile information, contact details, and campaign-related communications are shared with other campaign participants (brands, agencies, influencers, and editors assigned to that campaign). This sharing is necessary to facilitate campaign collaboration and is limited to the scope of the campaign.
We share data with trusted third-party service providers who assist us in operating the Platform, including:
These service providers are contractually obligated to use your data only as necessary to provide their services to us and in accordance with applicable data protection laws.
We may disclose your information if required by law, subpoena, or legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Collabaway, our users, or the public.
We retain your personal data for as long as your account is active or as needed to provide you with the Platform’s services. If you delete your account, we will delete or anonymize your personal data within thirty (30) days, except where we are required to retain certain data for legal, regulatory, or legitimate business purposes (such as maintaining financial transaction records as required by tax law).
Campaign data, including messages and deliverables, may be retained for a reasonable period after campaign completion to support dispute resolution and legal compliance. Anonymized and aggregated data that does not identify you may be retained indefinitely for analytics purposes.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us at privacy@collabaway.com. We will respond to your request within thirty (30) days.
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 18, please contact us at privacy@collabaway.com.
Collabaway is based in the United States. If you access the Platform from outside the United States, your personal data may be transferred to, stored in, and processed in the United States or other countries where our service providers maintain facilities. These countries may have data protection laws that differ from those in your jurisdiction.
Where required by applicable law, we implement appropriate safeguards for cross-border data transfers, including standard contractual clauses approved by relevant regulatory authorities. By using the Platform, you consent to the transfer of your information to the United States and other countries as described in this policy.
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS) and at rest, application-level access controls, regular security reviews, and Row Level Security policies on our database.
OAuth tokens for connected social media accounts are encrypted at rest. Payment data is handled by Stripe in compliance with PCI DSS standards and is never stored on Collabaway servers.
While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information.
We use cookies and similar technologies to operate the Platform, maintain your session, and analyze usage patterns. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.
We may update this Data Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and notify registered users via email or in-platform notification. Your continued use of the Platform after any changes constitutes your acceptance of the revised policy.
If you have any questions about this Data Policy or our data practices, please contact us at:
Email: privacy@collabaway.com