Privacy Policy

Effective Date: 16 September 2026 · Last Updated: 16 September 2026

1. Introduction

This Privacy Policy explains how Collab collects, uses, shares, and protects information about you when you use the Collab website and any related services (collectively, the "Service").

Collab is operated by GenuinelyGoodApps LLC, a Virginia limited liability company ("Collab," "we," "us," or "our"). Collab is a two-sided marketplace that connects brands with content creators for paid collaborations. By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

This Policy applies to two types of users: Creators (individuals who build profiles, connect their TikTok Shop accounts, submit or verify revenue data, and accept brand collaborations) and Brands (businesses that connect their TikTok Shop, search for creators, post campaigns, and pay for collaborations).

2. Information We Collect

2.1 Information you provide directly

Account information (all users): Your name, email address, and password when you create an account. You select whether you are a Creator or a Brand at signup.

Creator profile and verification information:

  • Public social media handles and links you choose to connect (e.g., TikTok).
  • Profile details: display name, bio, profile photo, location, content categories, content formats, and live-shopping capability.
  • Revenue and performance data you submit for verification, including TikTok Shop GMV (gross merchandise value), 30-day and all-time sales figures, view counts, and follower counts.
  • Shipping address, where you choose to receive products for gifted collaborations.
  • Optional demographic or matching details you provide to improve campaign matching.
  • Portfolio content and media you upload.

Brand information: Company name, logo, business description, category, campaign details (briefs, budgets, deliverables, targeting criteria), and offers you send to creators.

Payment information: When you fund a deal, get paid, or otherwise transact, payment is processed by our third-party payment processor, Stripe. You provide payment and payout details directly to Stripe. Collab does not store full bank account or card numbers on its own systems.

Communications: Messages you send through our in-app messaging feature, and any communications you send to us directly (e.g., support requests).

2.2 Information collected automatically

When you use the Service, we may automatically collect:

  • Usage data: pages viewed, features used, actions taken (such as applications, offers, and verification submissions), and timestamps.
  • Device and log data: IP address, browser type, operating system, device identifiers, and referring URLs.
  • Cookies and similar technologies: see Section 9.

2.3 Information from connected TikTok Shop accounts

If you choose to connect your TikTok Shop account to Collab, you will be taken to TikTok's own authorization screen, where you review and approve the specific permissions you are granting. We receive only what you authorize, and only for as long as that authorization remains active.

If you connect as a Brand (seller), we may receive:

  • Your shop identity and authorization details.
  • Affiliate order records for your shop, including order and SKU identifiers, product identifiers, the creator attributed to each sale, quantities, prices, commission rates and amounts, refunds and returns, and settlement status.
  • Creator marketplace information for creators you search or view, including sales performance, category focus, engagement metrics, and audience demographics as published by TikTok.
  • Performance analytics for affiliate content promoting your products, including views, GMV, orders, and conversion metrics.

If you connect as a Creator, we may receive:

  • Your TikTok Shop creator profile and affiliate identity.
  • Your affiliate order records across the brands you promote, including products, quantities, prices, and commission amounts.
  • Your product showcase contents and affiliate link information.

How we use this information. We use it to display your own performance to you, to verify creator revenue so that brands can rely on it, to attribute revenue to the creator who generated it, to measure campaign delivery, and to release escrowed payments when agreed deliverables are met.

What we do not do. We do not sell, rent, or trade TikTok Shop data. A brand's connected shop data is shown only to that brand. A creator's connected account data is shown only to that creator, except that verified performance figures a creator chooses to display on their Collab profile are visible to brands.

Disconnecting. You can revoke Collab's access at any time from your TikTok Shop account settings. When you do, we delete the associated access credentials immediately and delete the associated data within 30 days.

2.4 Information from other third parties

If you connect a social media account, we may receive information that platform is authorized to share, such as your public profile name, photo, and follower counts, in accordance with that platform's terms and your privacy settings.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and provide the Service;
  • Build and display Creator profiles and Brand listings;
  • Review and grant verification status based on revenue data you submit or authorize us to retrieve;
  • Power search, matching, and discovery between Brands and Creators;
  • Facilitate offers, applications, negotiations, and collaborations;
  • Enable in-app messaging between Brands and Creators;
  • Attribute sales to the creator who generated them and report campaign performance;
  • Process payments, escrow, payouts, and our service fee through Stripe;
  • Communicate with you about your account, deals, and Service updates;
  • Provide customer support and resolve disputes;
  • Detect, prevent, and address fraud, abuse, security issues, and violations of our Terms;
  • Comply with legal obligations; and
  • Improve and develop the Service.

4. How We Share Your Information

Between Brands and Creators. When you participate in the marketplace, certain information is shared with the other side. Creator profiles, verified stats, and verification badges are visible to Brands. When a Creator applies to a campaign or a Brand sends an offer, relevant profile and in-app contact information is shared.

With our hosting and infrastructure provider. The Collab application is built and hosted on Base44, operated by Base44, Inc. (United States), which provides our application hosting, backend functions, database, authentication, and secrets management. Base44 maintains SOC 2 Type II and ISO 27001 certification and engages its own sub-processors, including MongoDB, Render, Supabase, Google Cloud Platform, SendGrid, DataDog, OpenAI, and Anthropic (all United States), and Wix.com Ltd. (Israel), which supports provision and improvement of the platform. Base44's current sub-processor list is published in its Data Processing Addendum at base44.com/dpa. Our application data, including all TikTok Shop data, is stored in the United States.

With our payment processor (Stripe). We share transaction-related information with Stripe, Inc. (United States) to process payments, escrow funds, transfer payouts to Creators, and collect our service fee. Stripe does not receive TikTok Shop data. Stripe's handling of your information is governed by Stripe's own privacy policy.

For legal reasons. We may disclose information if required by law, subpoena, or legal process, or if we believe disclosure is necessary to protect our rights, the safety of users, or to investigate fraud or abuse.

In a business transfer. If Collab is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal information.

5. Where Your Information Is Stored

All Collab application data, including data obtained from connected TikTok Shop accounts, is stored and processed in the United States. We do not direct customer data to servers outside the United States. If this changes, we will update this Policy and notify affected users.

6. Data Retention and Deletion

We retain your personal information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

Specifically:

  • Connected account credentials are revoked and deleted immediately when you disconnect your TikTok Shop account or close your Collab account.
  • Data retrieved from connected accounts is deleted within 30 days of disconnection, account closure, or a verified deletion request.
  • Transaction and verification records may be retained after account closure where required for legal, tax, accounting, or fraud-prevention purposes, and only for as long as that purpose requires.

7. Data Security

We maintain a documented information security program covering access control, data classification, encryption, incident response, and vulnerability management, reviewed at least annually.

  • Data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256.
  • Access credentials and API tokens are held in managed secret storage backed by a cloud key management service, and are never exposed to your browser.
  • Access to production systems is limited on a least-privilege basis and protected by multi-factor authentication.
  • Payment and payout details are handled by Stripe, a PCI-compliant payment processor.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential.

If we become aware of a security breach affecting your personal information, we will notify you and any affected platform partners without undue delay, and in any event within 72 hours of confirming the incident, and will notify regulatory authorities where required by applicable law.

8. Your Privacy Rights

Depending on your state of residence, you may have rights regarding your personal information, including under the California Consumer Privacy Act (CCPA/CPRA) and the Virginia Consumer Data Protection Act (VCDPA):

  • Right to know / access: request the categories and specific pieces of personal information we have collected about you.
  • Right to delete: request deletion of personal information we have collected, subject to certain exceptions.
  • Right to correct: request correction of inaccurate personal information.
  • Right to data portability: request a copy of your information in a portable format.
  • Right to opt out: opt out of certain disclosures.
  • Right to appeal: if we decline your request, you may appeal that decision.
  • Right to non-discrimination: we will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at prestonpark@usecollab.app. We will acknowledge your request within 5 business days and respond within 30 days, or sooner where required by law. We may need to verify your identity before responding. You may also designate an authorized agent to make a request on your behalf.

We will also assist connected platforms, including TikTok Shop, and our Brand and Creator users in responding to requests to access, correct, delete, or provide a copy of personal data.

Residents of other U.S. states may have similar rights under their state laws; contact us to inquire.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you logged in, remember your preferences, understand how the Service is used, and improve it. You can control cookies through your browser settings, though disabling some cookies may affect how the Service functions.

10. Children's Privacy

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it. If you believe a minor has provided us information, contact us at prestonpark@usecollab.app.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services (such as TikTok or Stripe) that we do not control. This Policy does not apply to those third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and, where appropriate, notify you through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

GenuinelyGoodApps LLC (operating as Collab) 22608 Creighton Farms Dr, Leesburg, VA 20175, USA Email: prestonpark@usecollab.app