Security and privacy

Your deals, your data, your call.

Creators trust us with their inbox, their earnings and their tax details. Here's how Collabaway is built to protect them.

Your account

Passkeys: Sign in with your phone or computer's fingerprint or face instead of a password.
Recovery codes: One-time codes to get back in if you lose your device.
Signed-in devices: See where you're signed in and sign out of any device, or all others at once.
Re-check before risky changes: Changing your password or email, or deleting your account, asks you to confirm it's you.

Encrypted sensitive data: Connected-account tokens, stored email content and tax identifiers are encrypted with AES-256-GCM, each with its own keys.
Private files: Briefs, content drafts, verification documents and screenshots are stored privately and opened through short-lived links.
Download your data: Get a copy of your account data from Settings → Privacy & data at any time.
Delete your account: Close your account yourself from Settings → Danger zone.

Two Gmail permissions, no more: Read your mail and save drafts. Collabaway never sends email from your account.
Sponsor email only: Only messages that look like brand deals are stored; the rest is left alone.
Disconnect any time: Disconnect Gmail or any social account from Settings whenever you like.
See who opened your mail: Creators can see every time a person accessed their mail data, in Privacy & data.

Opt-in only: AI features stay off until you agree on a clear consent screen, and you can turn them off any time.
You accept every deal: The AI can negotiate within your limits but can never accept, pay or change your settings.
Protected from hidden instructions: Brand messages never reach the part of the AI that writes, and every outgoing message is checked first.