Privacy Policy
We value your trust. This policy outlines how CollabOP collects, uses, and strictly safeguards your data when generating your Media Kit and accessing third-party analytics.
Last Updated: September 28, 2026
1. Introduction
Groimon Marketing LLP ("we," "us," or "our") operates the CollabOP platform (the "Service"). This Privacy Policy explains how we collect, use, and meticulously protect your information-especially sensitive data retrieved via authorized APIs-when you use our platform to generate your media kit, connect with brands, and manage collaborations.
2. Information We Collect
We collect information primarily to verify your identity and generate your public media kit with accurate analytics.
2.1 Account Information
- Name, email address, and profile photo (via Google/Social Login).
2.2 Social Media Data (The "Media Kit" Data)
- We use YouTube API Services and Instagram/Facebook Graph API to retrieve public metrics and authorized insights such as subscriber counts, view counts, engagement rates, and audience demographics.
- We do not access your private messages, alter your account settings, or post content on your behalf.
3. How We Use Your Information
Public Display
The primary use of your chosen metrics is to display them on your public-facing Media Kit URL to share with brands.
Brand Collaborations
We use your profile data to facilitate direct matches and communication with elite brands, and to process collaboration payments securely.
Improvement
We analyze aggregate usage trends to improve functionality and maintain the security of the platform.
4. Third-Party Data & API Compliance
- YouTube: Our application strictly complies with the YouTube API Services Terms of Service. By authorizing our application, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
Revocation: You can revoke CollabOP's access to your YouTube data at any time via the Google Security Settings page. - Meta (Instagram): We use the Meta Graph API. Data retrieval is subject to Meta's Privacy Policy.
5. Data Protection & Security Mechanisms
Protecting your sensitive data, especially authentication tokens and private analytics, is our highest priority. We implement robust, industry-standard security mechanisms:
- Encryption in Transit: All data exchanged between your browser, our servers, and third-party APIs (such as Google and Meta) is encrypted using secure TLS/SSL protocols (HTTPS).
- Encryption at Rest: Sensitive data, including OAuth access tokens, refresh tokens, and private channel insights, are encrypted at rest within our secure databases.
- Restricted Access Controls: Access to the underlying infrastructure and raw databases is strictly limited to authorized engineering personnel who require it for maintenance and support.
- No Password Storage: We use OAuth 2.0 for all third-party integrations. We never see, intercept, or store your actual Google or Meta passwords.
7. Data Retention & Deletion
We retain your authenticated tokens and analytics data only as long as your CollabOP account is active. When you delete your account, or revoke our access, all associated API tokens and stored metrics are permanently purged from our databases. You may request manual deletion of your data at any time by contacting us.