Privacy Policy

This Privacy Policy explains how Collab Dock ("Collab Dock", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use our website, applications, and services (collectively, the "Platform"). We act as a data controller for the personal data we process about brands, creators, and visitors, except where we process data on behalf of a brand or creator, in which case we act as a data processor.

We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, and other regional privacy frameworks where the Platform is offered.

1. Information We Collect

1.1 Information you provide

Account information (name, email, password hash, role), profile information (bio, categories, pricing, portfolio, sample work), verification information (government ID where required, business registration, tax forms), payment information (billing details processed by our payment processor), and communications you send through the Platform.

1.2 Information from connected platforms

When you connect a third-party account such as TikTok, Instagram, YouTube, or similar, we receive only the data fields you authorize through that platform's OAuth consent screen. From TikTok this may include your open ID, display name, avatar, public video list, and aggregated performance metrics, used solely to populate your Collab Dock profile and campaign analytics. We do not access private messages, contacts, or content you have not authorized.

1.3 Automatically collected information

Device identifiers, IP address, browser type, operating system, referring URLs, pages viewed, and timestamps. See our Cookies Policy for details.

2. How We Use Information

We use personal information to operate the Platform, verify creators and brands, match collaborations, process payments and escrow, prevent fraud and abuse, comply with legal obligations, and improve our services. Legal bases under GDPR include performance of a contract, legitimate interests, consent (for marketing and non-essential cookies), and legal obligation.

3. Sharing of Information

We share personal information with: (a) other users as required by the marketplace (e.g. a brand can see an approved creator's profile); (b) service providers acting as processors (hosting, analytics, payments, KYC, email); (c) authorities where required by law; (d) successors in a merger or acquisition. We do not sell personal information. We do not use personal information for cross-context behavioral advertising.

4. International Transfers

Personal data may be transferred to and processed in countries outside your own, including the United States and the European Economic Area. Where required, we rely on Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms.

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Platform, comply with tax, accounting, and legal obligations, resolve disputes, and enforce our agreements. Accounts that are deleted are anonymized or removed within 90 days, subject to legal retention requirements.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal information; to object to processing; to withdraw consent; and to lodge a complaint with your supervisory authority. California residents have additional rights under the CCPA/CPRA including the right to know, delete, correct, and limit use of sensitive personal information. To exercise these rights, contact privacy@collabdock.com.

7. Security

We use industry-standard technical and organizational measures including encryption in transit (TLS), encryption at rest, role-based access controls, and regular security review. No method of transmission or storage is 100% secure.

8. Children

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it.

9. Changes to this Policy

We may update this Privacy Policy. Material changes will be notified by email or in-app notice at least 14 days before they take effect.

10. Contact

For privacy requests, please use the contact form.