Last updated: April 23, 2026
Collabscafe (PRIVATE) LIMITED ("Collabscafe", "we", "our", or "us") operates the website collabscafe.com, the creator portal at creator.collabscafe.com, and any associated mobile applications and services (collectively, the "Platform").
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Platform as a content creator ("Creator"), a brand or advertiser ("Brand"), or a visitor. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at hello@collabscafe.com and we will promptly delete the information.
When you register, we collect your name, email address, password (hashed), phone number, and account type (Creator or Brand).
If you are a Creator, we collect: profile photo, biography, profile title, location (city, state, country), niches/categories, social media handles and URLs, portfolio items (images, videos, links), pricing packages, and FAQs.
If you are a Brand, we collect: brand name, legal name, logo, website URL, company description, team member information, and location.
We collect engagement metrics from social media platforms to calculate Audience Quality Scores that help brands evaluate creators. The data collected and the collection method varies by platform:
| Platform | Data Collected | How Collected |
|---|---|---|
| YouTube | Subscriber count, video count, total views, recent video statistics (views, likes, comments), channel age, posting frequency | YouTube Data API v3 using a standard API key. Queries public channel data. No creator action or consent required — data is publicly available. |
| Follower count, following count, media count, recent post engagement (likes, comments), profile information | Instagram Graph API (Business Discovery) using our platform's authenticated token. Queries public Business and Creator account data. No creator action or consent required. Only works for Instagram Business or Creator accounts; Personal accounts are not accessible. | |
| TikTok | Follower count, following count, total likes, video count, recent video statistics (views, likes, comments, shares) | TikTok API using OAuth 2.0. Requires the creator's explicit consent — creators must actively connect their TikTok account via an authorization flow. Creators can disconnect at any time. |
When you place or receive an order, we process: order details, amounts, currency, payment status, and fulfillment status. Payments are processed by our third-party payment processor, PayFast. We do not store your full credit card or bank account numbers — PayFast handles all sensitive payment information under their own privacy policy and PCI DSS compliance.
We use Google Analytics 4 (GA4) to collect: pages visited, time on page, traffic sources, device type, browser, approximate location (city-level), and interaction events (clicks, scrolling). This data is aggregated and used to improve the Platform.
We use essential cookies (login session, preferences) and analytics cookies (Google Analytics). We do not use advertising or third-party tracking cookies. See Section 14 for details.
We do NOT use your data for:
The Audience Quality Score displayed on creator profiles is an estimate derived from publicly available engagement signals obtained through official platform APIs. It is not a guarantee of audience authenticity. Individual follower-level validation is not available through any official platform API. Scores may not reflect very recent changes to a creator's social accounts.
The score is intended as a directional trust signal for brands evaluating potential collaborations. It should not be the sole basis for business decisions.
| Recipient | What We Share | Why |
|---|---|---|
| Other Platform users | Creator profile information (name, bio, portfolio, social handles, pricing, Audience Quality Score) | This is the core function of the marketplace — brands browse creator profiles to find collaboration partners. |
| PayFast | Transaction amounts, payer/payee identifiers | To process payments and payouts. |
| Cloud hosting providers | All Platform data (stored on servers) | Infrastructure to operate the Platform. |
| Google Analytics | Anonymized usage data | Platform improvement and analytics. |
| Law enforcement / courts | As required by valid legal process | Legal compliance. |
We do not sell, rent, or trade your personal data to any third party. Period.
| Data Type | Retention Period |
|---|---|
| Account and profile data | While your account is active, plus 90 days after account deletion to allow for recovery. |
| Social platform statistics | Refreshed periodically. Historical snapshots retained for trend analysis while your account is active. |
| TikTok OAuth tokens | Until you disconnect your TikTok account. Tokens are deleted immediately upon disconnection. |
| Transaction records | 7 years from the date of the transaction, as required by Pakistani tax and accounting regulations. |
| Analytics data (GA4) | Up to 26 months (Google Analytics default retention). |
| Server logs | 90 days. |
You have the following rights regarding your personal data:
To exercise any of these rights, contact us at hello@collabscafe.com. We will respond within 30 days of receiving your request.
You can request data deletion through the following mechanisms:
Upon deletion, we remove your personal data from active systems. Some data may persist in encrypted backups for up to 90 days before being permanently purged. Transaction records are retained for 7 years per legal requirements.
While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
Your data may be stored and processed on servers located outside of Pakistan, including but not limited to servers in the United States, the European Union, or other jurisdictions where our cloud infrastructure providers operate. By using the Platform, you consent to such transfers. We ensure that appropriate safeguards are in place to protect your data regardless of where it is processed.
Our Platform uses the following third-party services. Your use of data obtained through these services is subject to their respective terms and policies:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Login session, CSRF protection, user preferences | Session / up to 30 days |
| Analytics (GA4) | Page views, traffic sources, user behavior (anonymized) | Up to 2 years |
We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this may affect Platform functionality (e.g., staying logged in).
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects when the policy was most recently revised.
If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us:
Collabscafe (PRIVATE) LIMITED
Karachi, Pakistan
Email: hello@collabscafe.com
