colably.space
    Back to home

    Privacy Policy

    Last updated: April 28, 2026

    This policy explains how colably.space ("Colably") handles personal data. Use of the platform is also governed by our Terms of Service.

    1. Who we are

    colably.space ("Colably", "we", "our") is an influencer–brand collaboration platform where brands post gigs, creators apply, and both parties can message, manage collaborations, link social accounts, and—where enabled—use subscriptions, credits, and payments. The site is available at https://colably.space. Our contact details are on the Contact page.

    2. What data we collect

    • Account information — name, email address, and role (brand or creator) provided when you register.
    • Profile information — bio, profile picture, industry, website, and other optional profile fields you fill in.
    • Social platform data — when you connect Instagram, TikTok, or YouTube, we store your OAuth access token, platform username, follower count, and engagement metrics. We never store your social media password.
    • Usage data — pages visited, actions taken within the platform, and log data (IP address, browser type) for security and debugging.
    • Communications — messages exchanged through the platform between brands and creators.

    3. Instagram permissions and why we need them

    When you connect your Instagram account, we request the following permissions through Meta's Instagram Business Login:

    instagram_business_basic

    Read your Instagram username, profile picture, and follower count to display on your Colably profile.

    instagram_business_manage_messages

    Enable future in-app messaging features between brands and creators via Instagram.

    instagram_business_manage_comments

    Allow future comment moderation features on campaign posts.

    instagram_business_content_publish

    Allow future scheduled post publishing features for campaign content.

    instagram_business_manage_insights

    Access post and account insights to calculate engagement rates for campaign reporting.

    We only use these permissions for the stated purposes. We do not sell your Instagram data to third parties.

    4. How we use your data

    • To create and manage your account.
    • To display your profile to brands or creators you interact with.
    • To sync and display your social media follower counts and engagement stats.
    • To facilitate gig applications, collaborations, invitations, reviews, and notifications.
    • To power optional AI-assisted features (e.g. draft proposals), which you should review before sending.
    • To process subscriptions, credits, and payments where you enable those features.
    • To send transactional emails (e.g. new application received, collaboration accepted).
    • To improve platform performance, prevent abuse, and fix bugs.

    5. Cookies and similar technologies

    We use cookies and similar technologies that are necessary for authentication and session management (keeping you logged in), security, and remembering basic preferences. We do not use third-party advertising cookies on the logged-in product for cross-site tracking. You can control cookies through your browser settings; blocking essential cookies may limit login or certain features.

    6. Data storage and security

    Your data is stored in Supabase (PostgreSQL) hosted on secure cloud infrastructure. OAuth access tokens are stored encrypted at rest. We use HTTPS for all data in transit. Access to the database is restricted to authenticated server-side processes only.

    7. Data retention

    We retain your data for as long as your account is active. If you delete your account or disconnect a social platform, the associated tokens and synced stats are deleted within 30 days. You can request immediate deletion at any time (see Section 9).

    8. Third-party services

    • Meta (Instagram/Facebook) — OAuth login and data sync. Governed by Meta's Privacy Policy.
    • Supabase — Database and authentication infrastructure.
    • Vercel — Hosting and edge network.
    • Resend — Transactional email delivery.
    • OpenAI — Optional AI-assisted drafting when you use those features; content you submit may be processed according to OpenAI's terms and policies.
    • Payment processors — When you pay for a subscription or collaboration flows that involve payments, the processor handles card or wallet data; Colably does not store full card numbers on our servers.

    9. Your rights and data deletion

    You have the right to access, correct, or delete your personal data at any time. To request data deletion:

    1. Log in to your account and delete it from your profile settings, or
    2. Contact us at colably.space/contact and we will delete your data within 30 days.

    If you connected Instagram and want to revoke access, you can also do so directly from your Instagram account under Settings → Apps and Websites. We will receive a deauthorization notification and remove your tokens automatically.

    10. Children

    Colably is not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe we have received data from a minor, please contact us via the Contact page and we will delete it promptly.

    11. Changes to this policy

    We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.

    12. Contact

    For any privacy-related questions, please visit our Contact page, see our Terms of Service, or reach out via the phone numbers listed there.