runcollab

Privacy Framework · Data Protection Architecture

Privacy Policy

Last updated: October 2026. At runcollab, we believe creators and brands should collaborate without surrendering private social credentials or exposing sensitive personal contact information. This Privacy Policy outlines our transparent data handling practices.

1. Zero Social Media OAuth Token Harvesting

runcollab does not harvest, store, or demand access tokens, OAuth credentials, or private permissions for your personal or business social media accounts (Instagram, TikTok, Facebook, or YouTube).

Unlike legacy influencer marketing platforms that demand full read/write account access or scrape private follower inboxes, runcollab relies exclusively on publicly verifiable social handles (@handle) and direct links to public 9:16 past ad samples provided willingly by creators. Your social accounts remain 100% under your sovereign control.

2. Counterparty Contact Masking (privacy-mask.ts)

To safeguard personal privacy, prevent off-platform harassment, and preserve marketplace integrity, all direct communication identifiers are programmatically masked using our deterministic masking layer (privacy-mask.ts).

  • Phone Numbers: Displayed with central digits redacted (e.g., +91 ••••• ••421) across all public creator cards, brand views, and collaboration overviews.
  • Direct Email Addresses: Obfuscated in public rosters and applicant summaries (e.g., cr••••••@domain.com) to prevent scraping by automated spam harvesters.
  • Digital Deliverables & Asset Packs: Brand digital asset packs and product URLs are shared directly with the assigned creator for creative production with zero physical shipping requirements.

3. Private Off-App Sprint Alerts

When you provide an email address or mobile phone number during profile onboarding or sprint configuration, this information is held securely and used strictly for critical 48-hour sprint lifecycle notifications:

  • Immediate alerts when a creator accepts a brief or confirms “Product Received”.
  • 48-hour SLA deadline reminders and submission milestone alerts.
  • Direct notifications when uncompressed cloud drafts are ready for review or revision.
  • Escrow release confirmations and Non-GST Commercial Invoice delivery.

We do not sell, rent, or lease your contact information to third-party data brokers or marketing affiliates under any circumstances.

4. Cloud Deliverable Links & Zero Third-Party Media Retention

runcollab does not host, replicate, or hold permanent secondary copies of creators’ original video master assets on proprietary servers.

Creators host deliverables directly in their own Google Drive or Dropbox storage accounts. When a brand reviews a draft or initiates “Download Final Video File ⬇”, runcollab securely resolves the cloud link to execute direct streaming or browser redirects. Original uncompressed media files transfer directly from the creator’s cloud account to the brand’s local system, minimizing intermediate exposure and ensuring maximum cryptographic file integrity.

© 2026 runcollab, Inc. All rights reserved.