Privacy Policy
How Collabfy collects, uses and protects personal data, and the choices and rights you have wherever you are.
Effective 4 November 2026
Who we are
Collabfy is run by Collabfy Labs LLP, a limited liability partnership registered in India, with its registered office at Vasant Kunj, Delhi, India. In this policy, “Collabfy”, “we” and “us” mean Collabfy Labs LLP and any company it controls that runs part of the service, such as a Collabfy company in the United Arab Emirates. Where another Collabfy company is responsible for your data, we tell you when we collect it, and this policy applies in the same way.
For the data described here, Collabfy is the controller under EU, UK and UAE law, and the data fiduciary under Indian law.
This policy covers our website, the plan builder and plans, the contact form, creator and clipper applications, and the emails, messages and calls that follow. Campaign work is also covered by the agreement for that campaign.
The short version
- We collect what you give us, such as plan answers, contact details and applications, and basic data about how the site is used.
- We use it to build your plan, talk to you, run campaigns and improve the site.
- Analytics and advertising cookies run only if you allow them. You can change this any time with Your privacy choices at the bottom of every page.
- We don’t sell your personal data for money.
- Wherever you live, you can ask to see, correct or delete your data, or object to how we use it.
What we collect
What we collect depends on how you use Collabfy.
- Plan answers: what you’re looking for, your type of business, category, goals, markets, platforms, budget range and timing.
- Contact details: your name, email, brand or business name, website or social handle, and your phone number if you give it.
- Messages: what you send us through the contact form, email or WhatsApp, and notes from calls you book with us.
- Applications from creators, UGC creators and clippers: your name, email, country, city and languages, the roles you apply for, social handles, follower range, links to your work, and the formats, platforms and niches you choose. For clippers, also the number of accounts you post from and your usual views per clip. We don’t ask your age.
- Booking details: when you book a call, the scheduling tool gives us your name, email, the time you chose and any answers you add.
- Usage data: the pages you visit, your device and browser, your approximate location from your IP address, and how you reached the site. Analytics and advertising data is collected only if you allow it (see the Cookie Policy).
- Public profile data: for creators and clippers, public information from your social profiles, such as follower counts, engagement and past brand work, which we review before suggesting you for a campaign.
We don’t ask for sensitive data such as health, religion, biometric or bank account details, and we ask you not to send it.
How we use it, and why we’re allowed to
| What we do | Data used | Legal basis (EU, UK, UAE) |
|---|---|---|
| Build and show your plan, and send you its link | Plan answers, contact details | Steps you asked us to take before a contract |
| Prepare a creator shortlist and hold your call | Plan answers, contact details, booking details | Steps you asked us to take before a contract |
| Run campaigns, and pay creators and clippers | Contact details, application data, campaign records | Performing a contract; legal duties such as tax and accounting |
| Review applications and invite people to the community | Application data, public profile data | Our legitimate interest in building a trusted network |
| Answer messages and follow up on plans | Contact details, messages | Our legitimate interest in answering and following up on enquiries |
| Send campaign ideas, briefs and WhatsApp updates | Email address, phone number | Your consent, which you can withdraw at any time |
| Measure and improve the site | Usage data | Your consent for analytics cookies; our legitimate interest for basic security logs |
| Show Collabfy ads to people who visited the site | Advertising cookie data | Your consent |
| Keep the service secure and stop spam and fraud | Usage data, form data | Our legitimate interest in security; legal duties |
| Meet legal duties and handle legal claims | Any relevant data | Legal duties; our legitimate interests |
India. We process your personal data with the consent you give when you submit a form after reading the notice beside it, or for a legitimate use the law allows, such as a purpose for which you chose to give us the data. You can withdraw consent at any time, as easily as you gave it. Withdrawing doesn’t affect what we did before.
United States. The table above also shows the categories of personal information we collect and why. We don’t use sensitive personal information.
Automated plans. Your plan is created by rules that match your answers to our library of campaigns. It is a recommendation: it doesn’t decide anything about you, and a person goes through it with you on the call.
Emails and WhatsApp
We send campaign ideas or briefs by email only if you tick the box to receive them. Every email has an unsubscribe link.
We message you on WhatsApp only if you give your number and agree to it. Reply STOP, or tell us, and we stop. WhatsApp is run by Meta, and its own terms and privacy policy apply to your use of WhatsApp.
Messages about a plan you asked for, a call you booked or your application are part of the service, not marketing.
Where your data goes
Collabfy is run from India, and some of our service providers process data in other countries, including the United States and the European Union. When data leaves the EU, the UK or the UAE, we protect it with the safeguards those laws require, such as the European Commission’s standard contractual clauses, the UK addendum to them, or the EU-US Data Privacy Framework for certified US providers. We transfer data from India only to countries Indian law allows.
How long we keep it
| Data | How long we keep it |
|---|---|
| Plans | 3 years after you create them |
| Enquiries and plan contact details, if no campaign follows | 3 years after our last contact |
| Creator and clipper applications | 3 years after your last update, or until you ask us to delete them |
| Campaign, contract and billing records | As long as tax and accounting laws require: in India, eight years |
| Records of your consent | Until you withdraw it, then 3 years as proof |
| Security logs | At least one year, as Indian law requires |
| Analytics data | Up to 14 months |
When a period ends, we delete the data or anonymise it so it no longer identifies you.
How we protect it
We use encryption in transit, access controls and providers with recognised security certifications, and only people who need your data for their work can see it. No system is perfectly secure. If a breach puts your data at risk, we tell you and the regulators as the law requires.
Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you and how we use it, and give you a copy
- correct, complete or update it
- delete it
- limit how we use it, or stop a use based on our legitimate interests
- send it to you or to another company in a format you can use
- stop using it for marketing or targeted advertising
- withdraw any consent you gave
Some rights have limits. For example, we may have to keep records the law requires. If we can’t do what you ask, we tell you why.
European Union and United Kingdom. You can also complain to your local data protection authority.
India. You can ask for a summary of your data and how we process it, have it corrected, completed, updated or erased, and nominate someone to use your rights if you die or can’t act yourself. Contact our Grievance Officer first. If you’re not satisfied with the answer, you can complain to the Data Protection Board of India.
United States. Depending on your state, you can ask to know, access, correct and delete your personal information, and opt out of its sale or sharing and of targeted advertising. We won’t treat you differently for using these rights. You can use an authorised agent. If we turn down your request, you can appeal by replying to our answer, and if we refuse the appeal, you can contact your state attorney general.
United Arab Emirates. You have the rights in the UAE Personal Data Protection Law: to information about your data, to correct or erase it, to restrict or object to its processing, to data portability, and to object to decisions made only by automated means. You can complain to the UAE’s data protection regulator.
Other countries, including Singapore, Malaysia, Indonesia, Thailand, the Philippines and Saudi Arabia: you have the rights your local law gives you, and we honour them in the same way.
How to use your rights
Email contact@collabfy.xyz with your request. We may ask you to confirm who you are, using details we already hold, before we act. We reply within one month, or sooner where the law requires. If a request is complex, we may take up to the extra time the law allows and tell you why. Using your rights is free.
Grievance Officer (India): Neil Popli, contact@collabfy.xyz. We resolve complaints within one month.
Children
Collabfy is open to everyone and isn’t aimed at children. We don’t ask anyone’s age. We don’t knowingly collect personal data from anyone under 13, or from anyone below the age at which the law where they live requires a parent’s consent (in India, under 18), without the consent of their parent or guardian. Applicants under 18 need a parent or guardian to approve their application. If we learn we hold a child’s data without that consent, we delete it.
Changes to this policy
We update this policy when our service or the law changes, and the date at the top shows the current version. If a change affects how we use your data, we tell you by email or on the site before it applies.
Privacy questions
Email contact@collabfy.xyz, or write to Collabfy Labs LLP, Vasant Kunj, Delhi, India.