1
Data controller
Click and Collab B.V., registered with the Dutch Chamber of Commerce, based in the Netherlands. For questions about this policy: privacy@clickandcollab.com.
← Back to home
Privacy policy
How we handle your data
Last updated on 19 August 2026. This policy describes which data Click and Collab processes, on what basis, how long we keep it and which rights you have.
Who we are and what you can contact us about
2
Who this policy applies to
Creators, brands and agencies, team members who sign in on behalf of a brand, and visitors of the website and the app.
3
Age
You must be sixteen or older to create an account. If you are sixteen or seventeen, you need written consent from your parent or guardian for collaborations; we may ask you to show it. If someone turns out to be younger than sixteen, we delete the account and its data. For payouts the minimum is eighteen, because our payment provider has to verify your identity.
4
Contact about your rights
We handle requests within one month. We may ask you to verify your identity before we provide or delete data.
Which data we process
5
Account data
Name, email address, country, language and the role you signed up with. For business accounts also company name, Chamber of Commerce number, VAT number, business and billing address and the team members you invite.
6
Data from linked channels
Reach, engagement and audience composition from Instagram, TikTok and YouTube, retrieved with the access you give yourself. We receive no passwords and cannot post on your behalf. You can revoke a connection at any time.
7
Financial data and identity checks
Bank account number, billing details, transaction history and, for creators, the identity and tax details our payment provider is legally required to verify. Full card details never reach our systems.
8
Communication and usage
Messages in the chat and their automatic translations, support requests, and technical data such as IP address, device and browser needed for security and troubleshooting.
What we use it for and on what basis
9
Performance of the agreement
Making bookings possible, securing and paying out payments, creating invoices, chatting and reporting results. Basis: performance of the agreement.
10
Publicly findable profile
Your creator profile is public by default, so brands can find you through search engines. Public are: name, country, category, channels, package prices and general reach figures. You can switch this off in your profile; your profile is then only visible after signing in. Basis: legitimate interest, with the right to object.
11
Matching and the match percentage
We rank creators by relevance and show brands a match percentage, calculated from category, audience, reach, engagement and price. This is a tool for the buyer, not an automated decision with legal effect: a person decides whether to book. Basis: legitimate interest.
12
Automatic translation
Chat messages are translated into the recipient's language by a machine translation service. The original stays available. Basis: performance of the agreement.
13
Legal obligations
Bookkeeping, tax filing, and preventing fraud and money laundering. Basis: legal obligation.
14
Cookies, measurement and marketing
We always place necessary cookies; for measurement and advertising we first ask your consent, which you can withdraw later. Without consent all core functions still work.
Retention, sharing, security and your rights
15
Retention periods
We keep account data for as long as your account exists and for thirty days after that. Chats close fourteen days after delivery and are kept for two years in case of disputes. Financial records are kept for seven years, as the law requires.
16
Sharing with third parties
Only with parties needed to deliver the service: our payment provider, hosting and database provider, email service, translation service and the channels you link yourself. We have a data processing agreement with each of them. We do not sell data.
17
Transfers outside the EU
Our own storage is in the European Union. Where a provider processes data outside the EU, this happens on the basis of an adequacy decision or standard contractual clauses with additional safeguards.
18
Security
Encrypted traffic, role-based access, mandatory two-step verification for our staff and an audit log that records every action by a staff member.
19
Your rights
Access, correction, deletion, restriction, portability and objection to processing based on legitimate interest. If you gave consent, you can withdraw it at any time.
20
Complaints
If you disagree with our response, you can file a complaint with the Dutch Data Protection Authority or go to court.
Questions about your data?
Contact us via privacy@clickandcollab.com. You can view, change or delete your data through your account settings. If you are not satisfied with how we handle your request, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).