Privacy Policy
CollabKeep is an escrow-backed influencer-marketing marketplace connecting Brands, Agencies, and Creators in India. This policy explains what we collect, why, and your rights. We follow India's Digital Personal Data Protection Act, 2023 (DPDP).
1. Data we collect
- Account: name, email, phone, role (brand/agency/creator/operator).
- Business & tax (brands/agencies): company name, GSTIN, PAN, billing city — used to issue GST invoices and enable Input Tax Credit.
- Creator KYC: PAN and payout details (UPI/bank) — required to compute 194-O TDS and release payouts. Stored encrypted; never shown to brands.
- Connected social data (with your consent): if you link Instagram (Business/Creator) or YouTube, we read read-only profile, media list, and insights (reach, engagement, views, subscribers). See Section 4.
- Campaign data: briefs, applications, messages, proof URLs, ratings, escrow and payout records.
2. How we use it
- Run the escrow workflow — hold funds, release only on verified proof, compute GST/TDS.
- Show creators' verified stats to brands and power the analytics and fair rate-card.
- Confirm a sponsored post is live (proof verification).
- Fraud prevention, dispute resolution, and legal/tax compliance.
3. Escrow & payments
CollabKeep never custodies your money. Funds are held by a licensed payment aggregator (escrow) and released to the creator on approval or the 48-hour auto-approve. We store only the transaction references needed to reconcile payouts and file GST/TDS.
4. Instagram & YouTube data (Meta & Google)
When you connect Instagram via Facebook Login (Meta Graph API) or YouTube via Google OAuth, you grant read-only access to your own account. CollabKeep uses it to:
- Display your follower count, engagement, reach and media on your media kit and analytics.
- Confirm that a campaign post is live (proof for escrow release).
We never post, edit, delete, or message on your behalf. We only access your own account, only after your explicit consent. You can disconnect any time inside the app (Get verified → Manage connections) or revoke access in your Meta / Google account. On disconnect we delete cached platform data within 30 days.
5. Sharing
We do not sell personal data. We share only with: the payment aggregator (to move escrow), tax authorities (GST/TDS filings), and infrastructure providers (hosting/database) under contract. Operator access to sensitive data is audit-logged.
6. Retention
We keep account and transaction records as required by Indian tax and accounting law. KYC and connected-social data are deleted on request or on account closure, subject to legal retention of financial records.
7. Your rights (DPDP 2023)
- Access, correct, or delete your personal data.
- Withdraw consent for connected social accounts at any time.
- Grievance redressal — contact our Data Protection point of contact below.
To delete your data, see our Data Deletion page.
8. Security
KYC is encrypted at rest, access is least-privilege and audit-logged, and we follow data-minimisation (we collect only what a workflow needs).
9. Contact
Brijesh · CollabKeep (Untitled Advertising) · Brijesh@untitledad.in · +91 94282 73686