Legal

Privacy Policy

Last updated: May 13, 2026

getColabb ("we", "us", "our") operates the getColabb mobile application and the website at getcolabb.com (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and what choices you have.

1. Information We Collect

1.1 Account Information

When you sign up, we collect your name, email address, and profile photo via Google Sign-In, Facebook Login, or Apple Sign-In.

1.2 Social Media Data (Instagram & YouTube)

When you connect your Instagram or YouTube account, we access data permitted by the scopes you authorize:

  • Instagram: Username, account type, follower count, media (posts, reels), engagement metrics (likes, comments, reach, impressions), and profile information via the Instagram Graph API.
  • YouTube: Channel name, subscriber count, video statistics (views, likes, comments), and analytics data (watch time, audience demographics) via the YouTube Data API.

We never post on your behalf, send messages, or modify your social media content without your explicit action.

1.3 Usage Data

We collect device type, OS version, app version, IP address, and interaction logs (screens viewed, features used) to improve the Service.

1.4 Campaign & Transaction Data

If you participate in brand campaigns, we store campaign details, deliverables, communication logs, and payment transaction records.

2. How We Use Your Information

  • Matching: We use your social media metrics to match creators with relevant brand campaigns.
  • Analytics Dashboard: We display your engagement, reach, and growth data so you can track performance.
  • Payments: We process campaign payments through secure third-party payment processors (e.g., Razorpay).
  • Communication: We send transactional emails (campaign updates, payment confirmations) and, with your consent, promotional communications.
  • Service Improvement: Aggregated, anonymized usage data helps us improve features and fix bugs.

3. How We Share Your Information

We do not sell your personal data. We share information only in these cases:

  • With Brands (for Creators): When you apply to or accept a campaign, brands see your public profile, username, and relevant metrics.
  • With Creators (for Brands): Campaign details you post are visible to eligible creators.
  • Service Providers: Cloud hosting (AWS/Render), payment processing (Razorpay), email delivery (AWS SES), and analytics tools that process data on our behalf under strict confidentiality agreements.
  • Legal Requirements: When required by law, regulation, or legal process.

4. Data Retention

We retain your account data as long as your account is active. Social media metrics are refreshed periodically and older snapshots are retained for up to 12 months for trend analysis. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., financial transaction records for 7 years).

5. Your Rights & Choices

  • Access & Portability: Request a copy of your data by emailing privacy@getcolabb.com.
  • Correction: Update your profile information in the app at any time.
  • Deletion: Delete your account from the app settings, or submit a request at getcolabb.com/data-deletion. We process deletion requests within 30 days.
  • Revoke Social Connections: Disconnect Instagram or YouTube from the app at any time. We stop fetching new data immediately and delete cached data within 7 days.
  • Opt-out of Marketing: Unsubscribe from promotional emails via the link in any marketing email.

6. Data Security

We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, secure secret management (no credentials in code), and role-based access controls. However, no method of electronic storage is 100% secure.

7. Third-Party APIs

Our use and transfer of information received from Google APIs (including YouTube Data API) adheres to the Google API Services User Data Policy, including the Limited Use requirements. Our use of the Instagram Graph API adheres to Meta Platform Terms.

8. Children's Privacy

The Service is not directed to anyone under 13 (or 16 in the EEA). We do not knowingly collect data from children. If we learn we have collected data from a child, we will delete it promptly.

9. International Data Transfers

Your data may be transferred to and processed in India, where our servers are located. By using the Service, you consent to this transfer. We apply appropriate safeguards to protect your data regardless of where it is processed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: