Legal Document

    Privacy Policy

    Your privacy matters. Discover how CollabSmart protects your data with full transparency.

    March 7, 2026

    Our Commitment to You

    At CollabSmart, we believe in full transparency about how data is collected, used, and protected. This policy complies with GDPR (EU), CCPA (California), and LGPD (Brazil).

    AI Verification analyzes public social metrics
    Escrow payments secured by Stripe
    Bank-grade AES-256 encryption

    1. Information We Collect

    We only collect information necessary to provide a secure, high-quality experience.

    Data CategoryWhat We CollectPurpose
    Account DataName, email, encrypted passwordAuthentication & security
    Profile DataBio, social handles, avatarPlatform identity
    Social MetricsFollowers, engagement rate, audience demographicsAI Authenticity Score calculation
    Financial DataProcessed exclusively via Stripe (we never see your card)Escrow payments
    Biometric Indicators*Engagement patterns, posting frequency, audience behaviorAI fraud detection
    Device & TechnicalIP address, browser type, device infoSecurity & analytics
    CookiesSession, preferences, analytics trackersSee Section 5
    • *Biometric Indicators: We analyze behavioral patterns from public social media data — NOT biometric data like fingerprints or facial recognition. This analysis is used exclusively for the AI Authenticity Score.

    2. How We Process Data for AI-Score

    Our AI verification system analyzes publicly available social media metrics to generate your Authenticity Score. Here's exactly what happens:

    AnalysisData SourceRetention
    Follower authenticityInstagram/TikTok public APIUpdated every 30 days
    Engagement patternsPost interactions & timingAggregated, anonymized
    Audience demographicsAge, gender, location distributionStored while account active
    Growth trajectoryHistorical follower changesRolling 12-month window
    Bot detectionInteraction pattern analysisReal-time, not stored
    • You explicitly consent to AI analysis during onboarding
    • You can request deletion of your AI-Score at any time
    • Raw social data is never shared with brands — only the aggregated score

    3. Security & Encryption

    We implement bank-grade security to protect your data at every layer.

    Security LayerTechnologyStandard
    Data in TransitTLS 1.3 encryptionIndustry standard
    Data at RestAES-256 encryptionBank-grade
    Payment DataStripe PCI DSS Level 1Highest payment security
    AuthenticationBcrypt password hashing + optional 2FAOWASP recommended
    Access ControlRole-based (RBAC) with audit logsSOC 2 compliant
    InfrastructureGeographic redundancy with disaster recovery99.9% uptime SLA

    4. Data Sharing & Third Parties

    We only share data when strictly necessary to provide our services.

    • Stripe: Payment processing only (PCI DSS Level 1)
    • Social Media APIs: Read-only access for verification
    • Cloud Infrastructure: Encrypted storage with access controls
    • Analytics: Anonymized, aggregated data only
    • We NEVER sell your personal data to third parties
    • We NEVER share raw social media data with brands

    5. Cookies & Tracking

    We use cookies to ensure platform functionality and improve your experience.

    Cookie TypePurposeDurationRequired
    EssentialAuthentication, security, session managementSessionYes
    PreferencesLanguage, theme, display settings1 yearNo
    AnalyticsUsage patterns, feature adoption (anonymized)90 daysNo
    MarketingCampaign attribution, referral tracking30 daysNo
    • You can manage cookie preferences at any time via our cookie banner
    • Rejecting non-essential cookies does not affect platform functionality

    6. Your Rights (GDPR / CCPA / LGPD)

    You have full control over your personal data. Here are your rights by regulation:

    RightGDPRCCPALGPD
    Access your data✅✅✅
    Delete your data✅✅✅
    Data portability✅✅✅
    Opt-out of saleN/A✅✅
    Restrict processing✅❌✅
    Object to processing✅❌✅
    Withdraw consent✅✅✅
    • Exercise your rights: privacy@collabsmart.net
    • We respond within 30 days (GDPR) or 45 days (CCPA)

    7. International Data Transfers

    CollabSmart operates globally. We ensure your data is protected regardless of where it's processed.

    • Standard Contractual Clauses (SCCs) for EU transfers
    • Privacy Shield compliance where applicable
    • LGPD compliance for Brazil-based users
    • Adequate protection assessments for all transfers

    Questions about your Privacy?

    We're here to help. If you have questions about this Privacy Policy or wish to exercise your data rights:

    📧 privacy@collabsmart.net

    This policy is effective as of March 7, 2026. Terms of Service · Cookies Policy

    Cargando CollabSmart…