Privacy policy

CollabsMap is operated by Videreo GmbH (“Videreo”, “we”), Switzerland, the data controller for the personal data described here. You can reach us at hello@videreo.com.

• Account: email, name, primary platform and social handles.
• Creator profile: bio, niche tags, location, follower and engagement statistics, and self-reported audience demographics (age, gender, country splits).
• Applications: the pitches and messages you send to brands through the platform.
• Travel plans: the upcoming destinations and dates you add to your profile, used to match you to collaborations where you will already be. These are deleted automatically once the dates pass.
• Community submissions: opportunities you submit to the map, and the handle credited as the finder if you choose to be credited.
• Public profile: your creator profile is published on collabsmap.com by default so that brands can find you, and it can be indexed by search engines. It shows your name, photo, bio, location, niches, connected social handles and follower counts, and a headline summary of your audience (top markets and age band). Your email address, travel plans, and billing details are never published, and your engagement rate is shown to brands rather than publicly. You can unpublish your profile at any time from your profile settings.
• Billing (partners): subscription tier and Stripe customer/subscription identifiers. We never store card numbers — Stripe handles payment data.
• Product analytics: usage events and, only with your consent, session recordings (see “Cookies and analytics”).

Each purpose below rests on one legal basis under the GDPR and Swiss data-protection law:

Running your account and the platform

Performance of our contract with you — creating your account, hosting your profile, delivering your applications, and matching you to opportunities.

Generating a pitch draft

Performance of our contract — the processing happens because you asked for a draft.

Partner billing

Performance of our contract, plus our legal obligation to keep accounting and tax records.

Transactional email

Performance of our contract — application updates, replies from brands, and account notices.

Lifecycle and marketing email

Your consent, or our legitimate interest in telling existing users about the product. Every message has an unsubscribe link.

Product analytics and session recording

Your consent, given in the cookie banner and withdrawable at any time.

Publishing your creator profile

Our legitimate interest in running a discovery marketplace brands can browse. Profiles are published by default; you can object at any time by unpublishing yours from your profile settings.

Security, abuse prevention, and rate limiting

Our legitimate interest in keeping the platform working and protecting it from misuse.

When the brand has claimed its listing, your application appears in its dashboard. When the brand has not claimed its listing yet, we may instead email your application to the contact address the brand publishes for this purpose, so that it reaches someone rather than sitting unread — along with an invitation for the brand to claim its listing and reply properly. Either way the brand receives your profile and the pitch you wrote. If you would rather we did not forward an application this way, write to hello@videreo.com.

We share data with the following processors strictly to operate the service:

Supabase

Database and authentication hosting. Our database runs in Zurich, Switzerland.

Vercel

Application hosting and content delivery; processes each request, including your IP address.

Trigger.dev

Runs our scheduled background work (email digests, profile-statistics refreshes, account purges).

Stripe

Partner subscription billing and payment processing.

PostHog

Product analytics and optional session recording (consent-gated).

Sentry

Error monitoring (no personal data beyond a user id + role).

Anthropic (Claude)

AI generation of your application pitch drafts; receives your public profile and follower/engagement statistics.

Google (Gemini)

AI triage of audience-insight screenshots you upload (age/gender/country); processed in memory and not persisted by us.

ScrapeCreators

Retrieval of your public social-profile statistics from Instagram, TikTok, and YouTube.

Resend

Transactional and lifecycle email delivery.

Cloudflare

Image storage and CDN delivery (avatars, listing and portfolio media).

Mapbox

Map tiles for the interactive map; receives your IP address when the map loads.

When you generate a pitch, your public profile and verified statistics are sent to Anthropic to draft it. When you upload an audience-insights screenshot, it is sent to Google Gemini to extract structured demographics. We instruct these models not to invent statistics and use only verified data. Public social-profile statistics are retrieved via ScrapeCreators. We do not use your data to train third-party models.

Your account data is stored in Switzerland. Some processors — Anthropic, Stripe, PostHog, Cloudflare, Vercel, Trigger.dev, Mapbox — operate in the United States or route traffic globally. Where data leaves Switzerland or the EEA, those transfers rely on Standard Contractual Clauses or an equivalent approved mechanism.

• Stripe webhook payloads are minimised after 90 days (only the event id and type are kept).
• When you request account deletion, your account enters a 30-day grace period during which you can cancel; after that, your CollabsMap data is permanently erased and the request is propagated to our off-database processors (image CDN, payment processor, analytics).
• Time-bound travel/destination data is purged automatically once it expires.
• Erasure takes effect in the live product immediately at the end of the grace period. Residual copies in encrypted database backups are overwritten as those backups age out on their normal rotation.

Under the GDPR and Swiss data-protection law you can access, correct, export, or erase your personal data, and object to or restrict certain processing. Where we rely on your consent — analytics and marketing email — you can withdraw it at any time without affecting what we did before you withdrew it. Where we rely on our legitimate interest, including publishing your creator profile, you can object: unpublishing your profile in settings takes it down immediately. You can request erasure from your account settings (self-serve) or by emailing hello@videreo.com. We respond within one month of a request.

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to a data-protection authority: in Switzerland the Federal Data Protection and Information Commissioner, and in the EEA your national supervisory authority.

We set analytics cookies and enable session recording only after you accept them in the consent banner. Decline and the product stays fully functional with no analytics cookies and no recording. You can change your choice at any time by clearing the consent cookie.