Privacy Policy

1. Introduction

Welcome to Local collab ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform that connects local creators with brands for collaboration opportunities.

By using our service, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not access or use our service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Account Information: First name, last name, email address, phone number, password
• Profile Information: Date of birth, gender, bio, website, profile picture (avatar)
• Location Data: City, state, country, timezone
• Business Information: Business name (for brands), industry, company description
• Creator-Specific Data: Social media handles, follower counts, content categories, portfolio items
• Communication Data: Messages sent through our platform, campaign applications, offers

2.2 Social Media Integration

When you connect your social media accounts (Instagram, TikTok, YouTube), we collect:

• Public profile information (username, display name, follower count)
• Account verification status and business account status
• Content metrics (likes, comments, engagement rates, impressions, reach)
• Post data (media URLs, captions, timestamps, performance metrics)
• OAuth tokens for API access (stored securely with encryption)

2.3 Usage and Technical Information

We automatically collect certain information when you use our service:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on platform
• Authentication Data: Login timestamps, IP addresses, session tokens
• Local Storage: Authentication tokens, user preferences, session data

2.4 Payment Information

Payment processing is handled by Stripe. We collect:

• Stripe Connect account information for creators
• Transaction history and payment status
• Tax information as required by law

3. How We Use Your Information

We use the information we collect for the following purposes:

• Platform Operation: Provide, maintain, and improve our services
• Account Management: Create and manage user accounts, authenticate users
• Matching and Discovery: Connect creators with relevant brand opportunities based on location, interests, and engagement metrics
• Communication: Facilitate messaging between users, send notifications about campaigns and offers
• Analytics: Calculate engagement scores, performance metrics, and platform insights
• Verification: Verify phone numbers and email addresses using Twilio Verify
• Payment Processing: Process payments through Stripe, manage escrow transactions
• Legal Compliance: Comply with legal obligations, resolve disputes, enforce agreements
• Security: Detect and prevent fraud, abuse, and security incidents

4. Information Sharing and Disclosure

4.1 With Other Users

We share certain profile information with other users to facilitate collaborations:

• Public profile information (name, bio, location, social media metrics)
• Portfolio content and past collaboration examples
• Engagement statistics and performance metrics

4.2 Third-Party Service Providers

We share information with trusted service providers who help us operate our platform:

• AWS: Cloud hosting, file storage (S3), user authentication (Cognito)
• Stripe: Payment processing and financial services
• Twilio: SMS verification and messaging services
• Social Media Platforms: API access for Instagram, TikTok, YouTube data
• Analytics Providers: Platform usage and performance analytics

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect the rights, property, or safety of Local collab, our users, or others
• Investigate or prevent fraud, abuse, or illegal activities
• Enforce our Terms of Service or other agreements

5. Data Storage and Security

5.1 Data Storage

Your data is stored securely using industry-standard practices:

• Database encryption at rest using PostgreSQL with encryption
• Secure file storage on AWS S3 with access controls
• Redis for session management with encryption in transit
• Social media tokens encrypted and stored securely

5.2 Security Measures

We implement various security measures to protect your information:

• JWT-based authentication with secure token management
• HTTPS encryption for all data transmission
• Regular security audits and vulnerability assessments
• Access controls and user permission management
• Secure password hashing using bcrypt

6. Cookies and Local Storage

Our web application uses local storage to enhance your experience:

• Authentication Tokens: Stored in localStorage to maintain your login session
• User Preferences: Settings and preferences for personalized experience
• Session Data: Temporary data to improve platform performance

You can clear this data through your browser settings, but this may affect platform functionality and require you to log in again.

7. Your Rights and Choices

7.1 Account Management

You have the following rights regarding your account and data:

• Access: View and download your personal data
• Update: Modify your profile information and preferences
• Delete: Request deletion of your account and associated data
• Portability: Export your data in a machine-readable format

7.2 Social Media Connections

You can manage your social media integrations:

• Disconnect social media accounts at any time
• Control which data is synced from connected accounts
• Revoke access tokens through your social media platform settings

7.3 Communication Preferences

You can control how we communicate with you:

• Opt out of marketing communications
• Manage push notification preferences
• Control email notification settings

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Closed Accounts: Some data retained for up to 7 years for legal compliance
• Transaction Records: Financial records retained as required by law
• Communication Data: Messages and communications retained for dispute resolution

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our platform and updating the "Last Updated" date. Your continued use of our service after such changes constitutes acceptance of the updated policy.

12. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

13. State-Specific Rights

13.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete personal information we have about you
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

13.2 European Residents (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, update, or delete your information.