Privacy Policy

Data controller

The CollabLib service (collablib.com) is published by RakTiak, a French sole proprietorship registered under SIREN 941 238 685 (RCS Bobigny), represented by Babacar Gueye. RakTiak is the controller for the personal data described in this policy.

This policy covers the entire service: website, application and related communications. By creating an account you acknowledge having read it.

Data we collect

We only collect the data needed to run the marketplace:

• Account: email address, name, password (stored hashed) or Google sign-in identifier.
• Profile: bio, location, niches, content types, portfolio, profile picture, and for brands company information (legal name, industry, website).
• Connected social accounts: when you link an account (Instagram, TikTok, YouTube or another), we receive your public identifiers and audience statistics through the official APIs. We never access your passwords.
• Payments: transactions are processed by Stripe. We never store card numbers; creators' bank details (IBAN) are held by Stripe as part of their payout account.
• Business verification: identification documents (Kbis extract, SIRET number) provided voluntarily to obtain verified status.
• Usage: technical logs (IP address, browser type, pages viewed) and preferences (language, notifications).

Purposes and legal bases

Each processing activity relies on a GDPR legal basis:

• Contract performance: matching, collaboration management, payments and escrow, messaging, service notifications.
• Legitimate interest: platform security, fraud prevention, internal usage statistics, service improvement.
• Legal obligation: invoicing, accounting, anti-money-laundering (through Stripe), responses to lawful requests.
• Consent: non-essential cookies, marketing communications, social account connections. Consent can be withdrawn at any time.

Recipients and processors

Your data is processed by providers selected for their compliance guarantees:

• Supabase (database hosting and authentication, servers located in the European Union).
• Vercel (web application hosting).
• Stripe (payments, escrow and payouts, PCI-DSS certified).
• Google (Google sign-in, if you choose it).
• Meta, TikTok, YouTube: only if you voluntarily connect these accounts, through their official APIs.

Transfers outside the European Union

Some providers (Vercel, Stripe, Google) may process data in the United States. These transfers are covered by the European Commission's standard contractual clauses or an adequacy decision (EU-US Data Privacy Framework).

Retention periods

We keep your data:

• Account and profile: for the life of the account, then deletion within 30 days of closure, subject to legal obligations.
• Invoicing documents and transactions: 10 years (accounting obligation).
• Technical logs: 12 months at most.

Your rights

Under the GDPR you have the rights of access, rectification, erasure, portability, restriction and objection over your personal data.

You can exercise these rights at any time from your settings (profile edition, account deletion) or by writing to us. If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr).

Security

Exchanges are encrypted (TLS), data is isolated per account at the database level, internal access is restricted to what is strictly necessary and no card data ever passes through our servers.

Cookies

Details about the cookies we use and how to manage them are in our cookie policy.

Contact

For any question about your personal data: privacy@collablib.com. To request deletion of your data, see our dedicated page.