Privacy Policy

ClikCollab (“we”) is run by [Business name], [Address in India]. We run clikcollab.com, a marketplace that connects creators, models and influencers with brands in India.

Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described here: we decide why and how it is used. You are the Data Principal. Questions about this policy: hello@clikcollab.com.

If you have a question, complaint or request about your personal data or about content on ClikCollab, contact our Grievance Officer:

• Name: [Grievance Officer name]
• Designation: [Designation]
• Email: [grievance email]
• Address: [Address in India]

We acknowledge every complaint within 24 hours and aim to resolve it within 15 days of receiving it. Please write from the email address on your account, or tell us how to reach you, so we can confirm who you are before acting on a request.

• Account details: name, email, account type (creator or brand), and company name for brands. Passwords are stored by our sign-in provider as a one-way hash; we can never see them.
• Profile details you add: photo, bio, city, country, languages, niches, rates, and the social account handles and follower counts you enter.
• Connected social accounts (only if you choose to connect): see Connected accounts below. Read-only; we never post for you or read your messages.
• Bookings and messages between brands and creators on the platform.
• Your email choices: whether you agreed to news emails, when, and the exact wording you saw.
• Security records: sign-in times, failed sign-in attempts, the network address of requests (used for rate limiting), and an admin log of moderation actions.
• Payments: none today. ClikCollab is free during launch and takes no card details. Once paid plans start, payments will be handled by a payment provider (we plan to use Razorpay); we will receive the plan and payment status, never full card numbers. We will update this policy before that happens.
• Page-view counts: we count visits to public pages with Vercel Web Analytics. It uses no cookies, doesn't identify you, and never counts private areas such as dashboards.

We don't use advertising trackers or advertising cookies.

We use your personal data only for these purposes:

• To create and run your account and keep you signed in.
• To show creator media kits to brands, and to power Smart Match (it ranks creators for a brand's brief; it doesn't make decisions about you on its own, and creators set their own rates and choose which requests to accept).
• To handle booking requests and messages between brands and creators, and, once paid plans start, subscriptions and payments.
• To send service emails: sign-in and confirmation links, booking updates and account notices.
• To send news and tips by email, only if you said yes (see News emails).
• To keep the platform safe: preventing fraud, spam and abuse, and acting on reports.
• To meet legal obligations, for example answering a lawful request from a government authority or court.

We use your personal data on the basis of your consent, which you give when you create an account, connect a social account or tick the news-email box. Some uses are allowed by the DPDP Act without separate consent (“legitimate uses”), such as complying with the law or a court order, or responding to a medical emergency.

You can withdraw consent at any time, as easily as you gave it:

• News emails: untick the box in Dashboard → Settings → Email preferences, or press Unsubscribe in any news email.
• A connected social account: Dashboard → My profile → Disconnect.
• Being featured: untick Feature me in your profile.
• Everything: delete your account in Dashboard → Settings → Delete account. It takes effect immediately.

Withdrawing consent doesn't affect what we did before you withdrew it. It may mean we can't provide parts of the service, for example a media kit can't be shown without the profile behind it.

A creator's media kit, once complete, is public: name, photo, niche, city, follower range and selected stats. Rates, audience detail and contact options are shown only to signed-in brands. Brand accounts are not public. If a creator ticks Feature me in their profile, we may also show their public media kit (name, photo, city and link) on our website and social media; untick it any time to stop new features.

We use these service providers (“Data Processors”) to run ClikCollab. They may use your data only to provide their service to us. Your account, profile and booking data are stored in India (Mumbai). Some providers process data outside India, mainly in the United States, to host the website, deliver email and check for bots. The DPDP Act allows this, except to countries the Government of India restricts; we won't transfer personal data to a restricted country.

We also share personal data when the law requires it, for example with a government agency or court that makes a lawful request. We don't sell personal data.

We send news and tips only to people who said yes. The box at sign-up is never ticked for you, and we record when you agreed and the exact wording you saw. Every news email has an Unsubscribe link that works in one click, without logging in. Emails about your account (sign-in links, security and booking notices) aren't marketing and keep arriving while you have an account.

We use only essential cookies: to keep you signed in, to protect sign-up and log-in from bots (Cloudflare Turnstile), and to count each view of an ad once (a cookie with no personal data that expires after 30 minutes). Your browser also remembers your light or dark choice on your own device. No advertising cookies.

We keep personal data only as long as we need it for the purposes above, or as long as the law requires, and then delete it.

• Unconfirmed sign-ups: deleted after 7 days, with one reminder email about 24 hours after signing up. A password chosen at sign-up is kept encrypted only until you confirm your email, and at most 24 hours.
• Your account and profile: until you delete your account. Deletion removes your profile, connected accounts, bookings and messages immediately.
• After you delete your account: for brand accounts, the company name and the reason chosen for leaving are kept for 12 months to help us improve the service, then removed automatically. For creator accounts, nothing that identifies you is kept. If you tick “Email me once when it's busier” while deleting, we keep only your email for that one message, for up to 12 months.
• Records of your news-email choices: kept while you have an account, so we can show what you agreed to.
• Security and admin records (such as sign-in attempts and moderation actions) and closed reports: 12 months, then deleted automatically. Records that an account was created, confirmed or deleted (no name or email) are kept for statistics.
• Payment records (once payments start): kept for as long as tax and accounting laws require.

Encryption in transit (HTTPS) everywhere; encrypted social-network tokens; database row-level security; two-factor sign-in for administrators; rate limits and bot checks on sign-up and log-in; access limited to people who need it; and regular security reviews. To report a security problem, email hello@clikcollab.com.

Under the DPDP Act you have the right to:

• Access: get a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
• Correction and updating: have inaccurate or incomplete data corrected, completed or updated.
• Erasure: have your data deleted when it's no longer needed for the purpose you gave it for, unless the law requires us to keep it.
• Grievance redressal: complain to our Grievance Officer and get an answer.
• Nominate: name another person to use these rights for you if you die or become unable to use them yourself.

Most of this is self-serve in your dashboard: edit your profile, disconnect accounts, or delete your account. For anything else, or to nominate someone, email hello@clikcollab.com or the Grievance Officer. We confirm who you are before acting, and we answer within the time the law requires.

Please contact our Grievance Officer first; the law asks you to use our grievance process before going further. If you aren't satisfied with our answer, you can complain to the Data Protection Board of India.

If a personal data breach happens, we tell the people affected and the Data Protection Board of India without delay, as the DPDP Act and its Rules require. We tell you what happened, what it may mean for you, what we are doing about it and what you can do to protect yourself. Where the law requires, we also report it to CERT-In.

ClikCollab is only for people aged 18 and over. Under the DPDP Act, using a child's data (anyone under 18) needs verifiable consent from a parent or guardian, so we don't allow accounts for anyone under 18. If we learn that an account belongs to someone under 18, we delete it. If you think a child has signed up, please tell us at hello@clikcollab.com.

We'll post changes here with a new date and, for important changes, tell account holders by email. If a change means using your data for a new purpose, we'll ask for your consent first.