Privacy Policy

Last updated: December 2025

Introduction

CollabInbox ("we", "our", "us") is committed to protecting your privacy. This privacy policy explains how we collect, use, disclose, and protect your information when you use our platform for managing collaborations between creators and brands.

Data We Collect

We collect the following types of information:

  • Account information: name, email address, password (encrypted), profile picture.
  • Profile information: username, biography, category, social media accounts, postal address (for product shipments).
  • Usage data: pages visited, features used, timestamps, IP address, browser type.
  • Payment information: securely processed by Stripe. We do not store your credit card information.
  • Communications: messages exchanged between creators and brands on the platform.

How We Use Your Data

We use your information to:

  • Provide, maintain, and improve our services
  • Send you notifications related to your collaborations
  • Analyze platform usage to improve it
  • Detect and prevent fraudulent activities
  • Comply with our legal obligations

Data Sharing

We never sell your personal data. We may share your information with:

  • Collaboration partners: brands see creator profile information and vice versa as part of collaborations.
  • Service providers: hosting (Cloudflare), payments (Stripe), emails (Resend).
  • Legal obligations: if required by law or to protect our rights.

Google / Gmail data (optional integration)

If you choose to connect your Gmail account (an optional feature available on Pro plans), CollabInbox accesses certain data from your Google account through the Gmail API, solely to detect and centralize the brand-collaboration requests you receive by email. This connection is entirely optional and is never requested during ordinary sign-in.

  • Data accessed: with the gmail.readonly (read-only) scope, we read your incoming emails (sender, subject, content) only to identify those that are brand-collaboration requests. We can never send, modify, label, or delete any email.
  • Use: emails identified as collaboration requests are shown in your CollabInbox inbox, with an AI-generated summary, a category, the proposed budget, and missing-information detection. Your Google data is used exclusively to provide this feature — never for advertising, lending/credit scoring, or any other purpose.
  • Transfer: to generate the summary and category, the relevant email content is processed by our AI provider (OpenAI) via its API. OpenAI does not use data submitted through its API to train its models. We do not sell or share your Google data with data brokers, advertisers, or any third party for purposes unrelated to the feature.
  • Protection: data is encrypted in transit (TLS/HTTPS). The OAuth refresh token is stored encrypted. Access is strictly limited to your own account.
  • Retention and deletion: you can disconnect Gmail at any time (Settings → Integrations), which immediately stops all access and deletes the stored token. Detected requests you keep remain until you delete them or delete your account; on account deletion, the associated Google-derived data is erased.

CollabInbox’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Security

We implement technical and organizational security measures to protect your data: SSL/TLS encryption, password hashing, restricted data access, regular backups.

Cookies

We use essential cookies for platform functionality (authentication, preferences). We do not use third-party advertising cookies.

Your Rights

Under GDPR, you have the following rights:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to object to processing

To exercise these rights, contact us at privacy@collabinbox.app

Data Retention

We retain your data as long as your account is active. After account deletion, we retain certain data for 3 years for legal and accounting purposes.

Changes

We may update this policy. Significant changes will be notified by email or through the platform.

Contact

For any questions regarding this privacy policy:

privacy@collabinbox.app