Privacy Notice

Who this notice covers

This notice applies to invited creators and authorized representatives of brands, agencies, and TheCollabGrid operations teams who use the managed launch service. Public account creation and public creator discovery are not available in this version.

The service is operated by TheCollabGrid, registered at F-59, Raghav Marg.

Information we process

• Account and access information, including name, invited email, role, workspace assignment, authentication events, and account status.
• Creator profile and matching information, including display name, social handle or profile URL, city, categories, languages, availability, verification status, and collaboration history.
• Campaign and workflow information, including briefs, recommendations, responses, approvals, commercial terms, deliverables, review status, and sourced performance records.
• Security, consent, audit, support, and deletion-request records needed to operate and protect the service.

Why we use it

We use personal data to provision invited accounts, verify role and scope, curate creators, administer campaigns, record choices and agreements, coordinate deliverables, provide reporting, prevent misuse, maintain auditability, respond to requests, and comply with applicable obligations. Optional marketing requires a separate choice and is not a condition of account or campaign participation.

Who can see what

Access is enforced server-side. A brand or agency sees only campaigns within its active workspace scope and only creator information approved for that campaign. A creator sees only their own profile, invitations, responses, confirmed terms, deliverables, and approved performance records. Ops may access the operational information required to manage the service.

Creator compensation, brand contract value, TheCollabGrid fees, and margin are separated according to the campaign's approved commercial-visibility setting. Internal amounts are not exposed through customer or creator routes when the managed-margin model is selected.

Service providers and international processing

The managed launch uses Supabase for authentication and application data, Vercel for application hosting and execution, and Resend for transactional email. These providers process information on our instructions under their applicable terms. Provider locations, contractual safeguards, retention, and administrator access are reviewed as part of launch operations.

Retention and deletion

We retain information only for the period needed for the managed service, security, contractual records, disputes, tax or accounting obligations, and documented legal holds. The approved retention schedule governs each record category. Eligible information is deleted, de-identified, or restricted when it is no longer needed, including through relevant processors where required.

Your choices and requests

You may request access information, correction, deletion, withdrawal of optional consent, or grievance handling through the approved privacy contact. Privacy contact: nimit401@gmail.com. Grievance contact: nimit401@gmail.com. We may need to verify identity and may retain a limited record where law, security, contract, or dispute obligations require it.

Security, children, and changes

We use role and tenant checks, restricted administrator access, secure authentication, audit records, data minimization, and incident procedures. No method is completely secure. Version 1 is for people aged 18 or older and Ops must not knowingly activate a minor. Material changes will receive a new version and, where required, a fresh notice or choice.