Privacy Policy

Collab Engine ("we", "us") helps TikTok creators find and pitch brand collaborations. This policy explains what data we collect, why, where it lives, and how you can get rid of it. The data controller is Jonas Riese (contact below).

What we collect

• Account data. Your email address, used to sign you in via magic link and to send service messages.
• TikTok data (only if you connect your account). When you connect TikTok through TikTok's official Login Kit, we access — with your explicit consent on TikTok's consent screen — your basic profile (display name, username, avatar), your public account statistics (follower, following, likes, and video counts), and a list of your public videos with their engagement metrics. We can only read data about your own account. We never see your TikTok password, we cannot post, message, or act on your behalf, and we do not access your private videos, direct messages, or your audience's personal data.
• Profile answers. What you tell us in onboarding (your audience, niche, goals, region).
• Usage data. The pitches you generate and the outreach outcomes you record, so the product can work and improve your matches.

Why we use it

• To build your creator profile and match you with brands.
• To generate personalized pitch drafts.
• To operate your account, subscription, and support.

We process your TikTok video content and profile with AI services to infer your content themes and positioning. We do not sell your personal data, and we do not share it with brands — pitches are only sent when you send them yourself.

Where it lives

Data is stored in a Postgres database hosted by Neon and processed on Vercel's hosting platform. TikTok access tokens are stored server-side only and are never exposed to your browser. Emails are sent via Resend. AI processing uses Anthropic's API. Payments (when enabled) are handled by Stripe — we never store card numbers.

How long we keep it, and how you delete it

• Disconnect TikTok anytime from your dashboard. This deletes our stored access tokens and the profile/video data we synced from TikTok. You can also revoke access in the TikTok app under Settings → Security → Apps and services.
• Delete your account by emailing us — we remove your account and associated personal data within 30 days.
• Otherwise, we keep data only while your account is active.

Your rights

Depending on where you live (including under the GDPR), you have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. Email us and we'll handle it.

Cookies

We use only functional cookies: a session cookie to keep you signed in and a short-lived cookie to secure the TikTok connection flow. No advertising or cross-site tracking cookies.

Changes

If this policy changes materially, we'll notify you by email or in the app before the change takes effect.

Contact

Jonas Riese — jonasriese99@gmail.com