Privacy Policy

1. Who We Are

Collabra ("we", "our", or "us") is an AI-powered creator analytics platform that connects to your Instagram account to provide insights, recommendations, and growth tracking. By using Collabra, you agree to this Privacy Policy.

If you have questions, contact us at: privacy@collabra.app

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Email address
• Name (if provided)
• Password (stored as a secure hash — never in plain text)

2.2 Instagram Data (via Meta OAuth)

When you connect your Instagram account, we request access to:

• Account metrics: follower count, reach, impressions, profile visits, and engagement rate
• Content metadata: post type, caption, published date, and media thumbnail URL
• Content performance: likes, comments, shares, saves, views, and reach per post
• Instagram User ID and username

We store your Meta OAuth access token in encrypted form to fetch data on your behalf. We never post to Instagram or take any action on your account.

2.3 Usage Data

We may automatically collect:

• Device type and operating system
• App version
• Pages and features accessed
• Crash reports and diagnostic logs

3. How We Use Your Information

We use your data exclusively to provide and improve Collabra's services:

• Syncing your Instagram analytics on a daily schedule
• Calculating your Creator Score (growth, engagement, consistency, brand readiness)
• Generating weekly performance reports
• Producing personalised posting recommendations
• Displaying historical analytics and trend data within the app
• Sending important service notifications (account issues, token expiry)

We do not use your data for targeted advertising, and we do not sell or rent your data to third parties.

4. Data Sharing

We share data only where strictly necessary:

• Meta / Instagram: We call the Instagram Graph API on your behalf using your OAuth token. Meta's own privacy policy applies to data held by Meta.
• Infrastructure providers: Hosting, database, and cache services (e.g., cloud servers and Redis). These providers process data only under our instructions and are bound by data processing agreements.
• Legal requirements: We may disclose data if required by law, court order, or to protect our legal rights.

We do not share your Instagram content, metrics, or personal information with any third-party advertisers or data brokers.

5. Data Retention

We retain your analytics history indefinitely while your account is active — this is core to Collabra's value (historical trend tracking). If you delete your account:

• All personally identifiable information is deleted within 30 days.
• Your Instagram OAuth token is revoked immediately.
• Aggregated, anonymised analytics data may be retained for product improvement.

6. Security

We implement industry-standard security measures:

• All data in transit is encrypted via HTTPS/TLS.
• Instagram access tokens are stored using AES encryption at rest.
• Passwords are hashed using a secure one-way algorithm (PBKDF2/bcrypt).
• Access to production systems is restricted to authorised personnel.

No method of transmission over the internet is 100% secure. We strive to protect your data but cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to certain processing activities.
• Disconnect Instagram: Revoke our access to your Instagram account at any time from within the app or via Meta's app settings.

To exercise any of these rights, contact us at privacy@collabra.app. For account and data deletion instructions, visit our Data Deletion page.

8. Children's Privacy

Collabra is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

9. Third-Party Links

The app may contain links to third-party websites or services (e.g., Meta/Instagram). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notice at least 7 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

For privacy-related enquiries or to exercise your rights, please contact:

• Email: privacy@collabra.app
• Support: support@collabra.app