Privacy Policy

When you use HeyCollabz, our systems record technical information needed to run and protect the service, such as your IP address, browser and device type, the pages you request, timestamps and error reports. Security-relevant actions, such as permission changes and connecting or disconnecting social accounts, are recorded in audit logs together with the IP address and browser information.

We use Sentry to detect and fix errors. It is configured not to send default personal information, and error reports are scrubbed of sensitive values before they are sent.

Instagram works only with professional (business or creator) accounts, and you connect it on Instagram's own sign-in screen. Access to your basic profile is required; access to your statistics, which Instagram calls insights, is optional.

With basic profile access, HeyCollabz receives your professional account's identifier, username and name, and your follower, following and post counts.

If you also allow insights, HeyCollabz reads the type and publication date of your recent posts and, for up to 20 recent Reels, how many views, likes, comments and shares each received. Only Reels are used, so that a view means a play, as on other video platforms. Without insights, these figures are shown as unavailable.

You connect a Facebook Page on Facebook's own sign-in screen. You sign in with your personal Facebook account only to authorize HeyCollabz and choose which Pages to share. What HeyCollabz connects is one Facebook Page that you manage, not your personal profile, and HeyCollabz does not request your personal profile information, friends, posts or messages.

Two kinds of access are required: seeing the Pages you manage, and reading a Page's basic information and engagement. Two are optional: reading the Page's insights, and reading activity on its posts. To let you choose a Page, HeyCollabz lists the Pages you shared, with their name, username, category and your tasks on each Page. This temporary authorization is kept encrypted for at most ten minutes while you choose and is then discarded; only the chosen Page's access credential is stored.

For the chosen Page, HeyCollabz receives the Page's identifier, name, username and follower count. With insights, it reads how many times each of up to 20 recent posts was displayed (post views), and with access to post activity, the number of reactions, comments and shares on those posts. HeyCollabz reads these counts only: it does not read or store the text of comments or who reacted or commented.

Linking a Page does not let HeyCollabz publish, manage or moderate it.

You connect Threads on Threads' own sign-in screen. Access to your basic profile is required; access to your statistics, which Threads calls insights, is optional.

With basic profile access, HeyCollabz receives your Threads account identifier, username and name, and whether Threads shows your profile as verified.

If you also allow insights, HeyCollabz receives your follower count and, for up to 20 recent posts, their type and publication date and their views, likes, replies, reposts, quotes and shares. Meta describes some Threads figures as still in development, and some may be missing for a post. When there is not enough data, HeyCollabz shows the figure as unavailable rather than estimating it.

You connect TikTok on TikTok's own sign-in screen. Access to your basic profile information is required; access to your account statistics and to your list of public videos is optional.

With profile access, HeyCollabz receives the identifier TikTok gives your account for HeyCollabz, your display name and username, and whether TikTok shows your account as verified. With statistics access, it receives your follower, following, total likes and video counts.

With access to your video list, HeyCollabz reads up to 20 of your most recent public videos: their identifier and publication date and their views, likes, comments and shares. HeyCollabz does not receive your private videos or messages, and it does not download your videos.

HeyCollabz uses connected information to confirm that you control the account, to show a verified connection badge, to display the account and its statistics on your profile and in Creator Discovery, and to let Brands and Agencies search, filter and compare Creators.

From your recent posts or videos, HeyCollabz calculates summary figures such as typical views, a median engagement rate, views relative to followers and posting frequency. It uses only items between 72 hours and 90 days old and needs at least five of them; otherwise the figure is shown as not enough data. These figures are labelled as HeyCollabz calculations and are not the platform's own analytics.

The ROI Calculator's Creator Estimate can use these figures as evidence, labelled with their source and date, alongside the assumptions the user enters.

While an account is connected, HeyCollabz refreshes its information about once a day and when you choose Refresh, and uses the refresh to detect expired or withdrawn permissions. HeyCollabz does not sell connected information, use it for advertising, send it to AI features, use it to train AI models, or use it to make decisions about employment, credit, housing or insurance.

Creator profiles, including connected accounts, are visible only to signed-in HeyCollabz members, such as Brands, Agencies and other Creators. They are not published on the open web.

By default, a connected account and its statistics are visible to those members. In your profile settings you can hide the account completely, or keep the link visible while hiding its statistics. Hidden statistics are not shown to other members and are not used in Discovery filters, rankings or the ROI Calculator for them.

Access credentials, the platform's account identifiers and the permissions you granted are never shown to other members. Authorized HeyCollabz staff access connection information only where needed for support, security or legal reasons.

You can disconnect an account at any time in Settings, then Profile, then Verified connections, or remove HeyCollabz in the platform's own settings. The Data Deletion Instructions explain both, step by step.

When you disconnect, or when the platform tells us or a refresh shows that you withdrew HeyCollabz's access, the access credentials, the statistics received from the platform, their daily history and the figures calculated from them are deleted at once. The profile link, username, display name and your own numbers stay until you remove them.

If an authorization only stops working, for example because it expired, HeyCollabz deletes the stored credentials and stops showing the statistics; they are replaced when you reconnect and deleted when you disconnect.

When Meta sends us a Threads data-deletion request, the whole Threads entry is removed.

Under the UK GDPR and, where it applies, the EU GDPR, we need a legal basis, meaning a reason the law recognizes, for each way we use personal data. We rely on the following.

Contract: to provide the account, profile, marketplace, messaging, subscription and connection features you sign up for or turn on, including showing a social account you choose to connect on your profile.

Legitimate interests: to keep HeyCollabz secure and prevent fraud and abuse, to calculate summary figures and rank Discovery results, to improve the service from aggregated information, to act on notices from social platforms, and to keep records needed for disputes. We balance these interests against your rights, and you can object to this processing, as explained under Your rights.

Consent: for optional analytics cookies and similar technologies. You can withdraw consent at any time in Cookie Settings; this does not affect processing that took place before.

Legal obligation: for records we must keep, such as tax and accounting records for paid subscriptions, and to respond to lawful requests.

Authorizing HeyCollabz on a social platform is how you instruct that platform to share information with us. We rely on that instruction to provide the connection feature you asked for, not on consent under data protection law. You can withdraw it at any time by disconnecting, or by removing HeyCollabz in the platform's settings.

HeyCollabz uses automated processing to calculate figures from social statistics, to rank Discovery results, to produce ROI estimates and to help detect fraud, spam and abuse. These help members search, compare and stay safe.

They do not produce decisions about you that have legal or similarly significant effects. Members decide whom to work with, and decisions to restrict an account are made by authorized staff.

When you use AI-assisted features, such as drafting help, your prompts, relevant workflow context such as campaign or proposal details, and the outputs are sent to our AI provider, OpenAI, to generate a response, together with limited operational metadata needed to provide and safeguard the feature. Do not submit secrets or unnecessary sensitive information to AI tools.

Connected social data is not sent to AI features, and HeyCollabz does not use your personal data to train AI models.

You can disconnect a social account yourself at any time, as explained under Connected social accounts. To delete information imported from a platform, or your whole HeyCollabz account, email privacy@heycollabz.com.

Our Data Deletion page explains each option step by step: what is deleted and what is kept, how requests from Meta and TikTok are handled, and how long requests take.

We use technical and organizational measures appropriate to the risk, including encrypted connections, role-based access controls for staff, audit logs for sensitive actions and server-side authorization checks.

Social platform access credentials are encrypted with AES-256-GCM, bound to the account they belong to, kept only on our servers, and never included in logs, error reports or analytics.

No system is completely secure. If a personal data breach is likely to put your rights at risk, we will notify you and the relevant authorities as the law requires.

Residents of California and some other places have rights to know what personal information we collect, use and disclose, to delete it, to correct it, and not to be treated differently for using these rights. You can use them by emailing privacy@heycollabz.com; an authorized agent can act for you with your written permission.

HeyCollabz does not sell personal information or share it for cross-context behavioural advertising, and it uses sensitive personal information, such as account sign-in details, only to provide and secure the service.