Collab Creator AI
Get started
← Back to home

Privacy Policy

Last updated: 14 July 2026 · Collab Creator AI

Collab Creator AI ("we", "us") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data when you use Collab Creator AI (the "Service").

We act as data controller for personal data described here. For privacy enquiries contact admin@collab-creator.co.uk.

1. Data we collect

Account and profile

  • Email address, display name, and authentication identifiers (via our auth provider)
  • Creator profile: niche, region, audience, content format, keywords
  • Notification preferences (email, in-app, sound)

Usage and content

  • Trend searches, scripts, video jobs, and metadata you create in the workspace
  • Connected social account data you authorise us to access on YouTube, Instagram, and TikTok (profile details, public content, and analytics) — see section 5
  • Technical logs: IP address, browser type, device, timestamps, error reports

Payment

  • Billing status, subscription tier, and Stripe customer ID (card details are held by Stripe, not us)

2. How we use data

  • Provide, maintain, and improve the Service
  • Personalise trend ranking and AI outputs to your creator profile
  • Process payments and manage subscriptions
  • Send service notifications (e.g. video ready) according to your preferences
  • Detect abuse, secure accounts, and comply with legal obligations
  • Analyse aggregated usage to improve product quality (not sold as personal profiles)

3. Legal bases (UK GDPR / EU GDPR)

Where GDPR applies, we rely on:

  • Contract — to deliver the Service you signed up for
  • Legitimate interests — security, fraud prevention, product improvement (balanced against your rights)
  • Consent — where required (e.g. non-essential cookies, marketing if offered)
  • Legal obligation — tax, accounting, and regulatory requirements

4. AI processing

Prompts and content you submit may be processed by third-party AI providers to generate scripts and media. We configure providers to process data only to deliver the Service. Do not submit special category data or confidential third-party information unless necessary and lawful.

5. Connected social accounts (YouTube, Instagram, TikTok)

You can connect your public creator accounts so the Service can show analytics and, at your request, publish content you create. We only connect public accounts and we only act when you explicitly do so — we never post or read on your behalf without your action. We store OAuth access and refresh tokens encrypted at rest and never expose them to your browser. You can disconnect any account at any time in the app, which deletes the stored tokens and revokes our access where the platform supports it.

TikTok

When you connect TikTok via TikTok Login Kit, we access only the data covered by the scopes you approve:

  • Login Kit (user.info.basic, user.info.profile, user.info.stats) — your TikTok avatar, display name, profile link, and account-level stats (followers, likes, post count), so you can confirm which public account is linked for publishing
  • Content Posting API (video.publish, video.upload) — to publish an original video you create in the Service to your own TikTok account when you explicitly choose to

We do not use TikTok's Display API video.list scope. We do not pull, embed, or re-display posts from TikTok accounts you manage as a gallery on our website. Account identity is shown only to the signed-in creator who connected that account. Our use of information received from TikTok APIs adheres to the TikTok Developer Terms, and our handling of that data complies with this Privacy Policy. We do not sell or transfer TikTok data to third parties beyond the processors described below, and we do not use it for advertising or to build profiles.

Instagram (Meta) & YouTube (Google)

With your authorisation, we access your public Instagram professional account and YouTube channel profile, public content, and analytics, and — at your request — publish content you create. Our use of Google API data follows the Google API Services User Data Policy, including the Limited Use requirements. Instagram data is handled under Meta's platform terms.

Chrome browser extension

If you install our Chrome extension, it stores an authentication token locally after you connect your account, reads public YouTube page metadata when you open the trend panel, and calls our API to show personalized trends. See our Chrome Extension Privacy notice for full details.

6. Sharing

We share data only with:

  • Processors — hosting, authentication, email, analytics, payment (Stripe), AI inference, and connected platform APIs (YouTube/Google, Instagram/Meta, TikTok) — under contracts requiring appropriate safeguards
  • Authorities — when required by law or to protect rights and safety
  • Business transfers — in connection with merger, acquisition, or asset sale (with notice where required)

We do not sell your personal data.

7. International transfers

Data may be processed in the UK, EEA, United States, or other countries where our providers operate. Where required, we use appropriate safeguards such as UK IDTA, EU SCCs, or adequacy decisions.

8. Retention

We retain account data while your account is active and for a reasonable period afterward for backup, dispute resolution, and legal compliance. Billing records are kept as required by tax law. You may request deletion subject to exceptions (e.g. ongoing subscriptions, legal holds).

9. Your rights

Depending on your location, you may have the right to:

  • Access, rectify, or erase personal data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent where processing is consent-based
  • Lodge a complaint with the ICO (UK) or your local supervisory authority

To exercise rights, email admin@collab-creator.co.uk. We may verify your identity before responding.

10. Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. No method of transmission or storage is 100% secure.

11. Children

The Service is not directed at children under 18. We do not knowingly collect data from children. Contact us to request deletion if you believe a child has provided data.

12. Cookies

See our Cookie Policy for details on cookies and similar technologies.

13. Changes

We may update this policy. The "Last updated" date will change and material updates will be communicated as appropriate.