Privacy Policy

Last updated: June 1, 2026

1. About This Policy

Kollabo ("we", "us", "platform") is a marketplace service connecting brands with TikTok content creators (KOLs) in Indonesia. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Kollabo platform, including data obtained through TikTok integration.

2. Data We Collect

2.1 Brand Users

  • Name and email address (upon registration)
  • Company / brand name, industry, brand description
  • PIC (person in charge) phone number
  • Payment information — processed entirely by Mayar, a licensed payment service provider supervised by the relevant authorities. Kollabo does not store your credit card number or bank account details.
  • Campaign data you create (briefs, KOL criteria, budget)

2.2 KOL / Creator Users

When you connect your TikTok account, we request the following permissions via TikTok Login Kit:

  • user.info.basic — display name, profile photo, TikTok username
  • user.info.stats — follower count, following count, and video count
  • video.list — list of public videos with statistics (views, likes, comments)

TikTok data we store: username, follower count, engagement rate, average views, and thumbnails of up to 100 videos. We do not store your TikTok password. Access tokens are stored encrypted and are only used to refresh profile data periodically.

We also store the phone number and location you voluntarily provide in your KOL profile. Your location (city) may be shown to brands. Your phone number (WhatsApp) is NOT shared by default.Your WhatsApp number is only shared with a brand when all three conditions are met: (1) you apply to a campaign, (2) the brand selects you, and (3) you have enabled the "Share WhatsApp with Brands" option in your account settings. This option is off by default. If it is off, brands only receive your TikTok handle and must contact you via TikTok DM.

3. How We Use Your Data

  • Displaying KOL profiles to brands anonymously (TikTok handle hidden until the brand reveals it)
  • Calculating a match score between KOLs and campaigns based on niche, engagement, and followers
  • Sending notifications related to applications and campaign status
  • Processing brand subscription payments through Mayar
  • Fulfilling applicable legal and tax obligations
  • Improving platform recommendation quality and features

We do not sell your data to third parties for advertising purposes. Your TikTok data is used solely within the context of the Kollabo platform.

4. Sharing Data with Third Parties

We share data only under the following conditions:

  • Brands that reveal or select you (KOL): When a brand reveals your profile — whether through the Explore KOL page or after you apply to a campaign — the brand receives your TikTok handle. Your WhatsApp number is only shared if you have applied to a campaign, the brand has selected you, and you have enabled WhatsApp sharing (off by default). Brands are bound by the obligation not to misuse, sell, or distribute your data to other parties (see Terms of Service).
  • Mayar: As our payment service provider, Mayar receives the data required to process subscription transactions (name, email, and payment details). Mayar's privacy policy applies to the data they process — see mayar.id.
  • Supabase: Our cloud database infrastructure provider for data storage and authentication.
  • Legal obligations: If required by applicable law, regulations, or court order in Indonesia.

5. Data Security

We implement reasonable technical and organizational security measures, including encryption of data in transit (HTTPS/TLS), encryption of stored TikTok tokens, and role-based access controls (Row Level Security). Payments are processed through Mayar, which applies applicable transaction security standards. However, no system is 100% secure — we encourage you to use strong passwords and not share your account credentials.

6. Data Retention

  • Active account data is retained for as long as your account is active on the platform
  • TikTok data is periodically refreshed in accordance with granted permissions
  • After account deletion, data is removed within 30 calendar days
  • Transaction and invoice data is retained for 5 years in accordance with Indonesian tax obligations

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your account and data — see the Data Deletion page
  • Revoke TikTok permissions at any time through your TikTok account settings
  • Data portability — request a copy of your data in a machine-readable format

To submit a request, contact us at support@kollabo.id

8. Cookies and Tracking

We use session cookies required for authentication and platform security. We do not use third-party tracking cookies for advertising purposes.

9. Policy Changes

We may update this policy at any time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

10. Contact Us

Privacy-related questions or complaints can be sent to:

Kollabo

Email: support@kollabo.id

Indonesia

Terms of Service · Privacy Policy · Data Deletion