02Information We Collect

When you create a creator or brand account, we collect information such as your name, email, location, and social accounts (for creators) or company information (for brands). When a collaboration is agreed, we also collect shipping address and contact information so the product can be shipped. We may also collect device and usage information via cookies when you visit the site (see the "Cookies & Analytics" section). If you add a TikTok, YouTube or Instagram account, we also receive the data described in the "Connected Social Accounts (TikTok, YouTube & Instagram)" section.

03How We Use Your Information

We use your information to run the approval process, match creators with relevant campaigns, form collaboration agreements, and facilitate shipping between brands and creators. We also use it to communicate with you about your account and campaigns. The legal basis for this processing is that it is directly related to the establishment or performance of a contract and our legitimate interests under KVKK Article 5; where we have a legal obligation to fulfill, the relevant legislation is also the legal basis.

04Shipping & Contact Information

Your shipping address is shared with a brand only after you confirm a collaboration agreement for their campaign. It is never shown publicly or to brands whose collaboration you have not accepted.

05Account Approval Data

To keep the marketplace curated, our team reviews creator and brand applications, which may include looking at the publicly available social profiles or business information you provide at signup. This review is done solely to make an approval decision and on the basis of our legitimate interest.

06Connected Social Accounts (TikTok, YouTube & Instagram)

Creators can show statistics from their social accounts on their ShipCollab profile. Brands see these statistics when a creator applies to one of their campaigns, and our team uses them when reviewing accounts. This section explains exactly what we receive and how we handle it. Statistics are refreshed about once a day; if an account’s statistics cannot be refreshed for 30 days (for example because the account was deleted or renamed, or access was revoked), the statistics and content list we hold are deleted automatically.

TikTok. We receive TikTok data only if you click "Connect with TikTok" on your profile and approve access on TikTok's own authorization screen. We use TikTok's official Login Kit and receive only the data covered by the permissions you approve:

• user.info.basic: your display name, profile photo and an identifier (open_id) that TikTok creates for ShipCollab.

• user.info.profile: your TikTok username, shown as "@username" on your profile together with a link to your TikTok profile.

• user.info.stats: your follower count, total likes and number of public videos.

• video.list: your most recent public videos (title, cover image, link, duration, publish date, and view, like, comment and share counts). We use up to 20 recent videos to calculate average views and engagement rate, and show up to 12 of them on your profile.

We never post, comment, send messages or change anything on your TikTok account, and we cannot see your password, private videos or messages. TikTok data is never sold, never used for advertising, and never shared with anyone other than the brands and team members described above (apart from the hosting providers listed in "How We Share Your Information").

The access token TikTok issues to us is stored encrypted and is used only to refresh these figures automatically, about once a day. You can end the connection at any time: remove or change the TikTok account in the "Social accounts" section of your profile, or revoke ShipCollab's access in the TikTok app under Settings and privacy > Security > Manage app permissions. Once access is revoked, we can no longer receive any new data. When you remove or change the account, or close your ShipCollab account, the stored token and the TikTok data we hold are deleted. You can also request deletion at privacy@shipcollab.com. How TikTok itself handles your data is described in TikTok's Privacy Policy.

YouTube. ShipCollab uses the YouTube API Services. For YouTube we read only public channel information: channel name, profile photo, subscriber count, video count, total views and recent public videos. We look these up using the channel name you enter, so no sign-in to your Google account is needed. By adding a YouTube channel you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). How Google handles data is described in the Google Privacy Policy (https://policies.google.com/privacy). When you remove or change the channel on your profile, or close your account, the YouTube data we hold is deleted.

Instagram. We read Instagram statistics using the "business discovery" feature of Meta's official Instagram Graph API. This feature only returns public information about professional (Business or Creator) Instagram accounts; personal accounts cannot be read. We run the lookup with the username you enter, through ShipCollab's own Instagram account: you do not need to sign in with Instagram, we never receive access to your account, and only your username is sent to Meta for this lookup. The information we read is your username, display name, profile photo, follower and post counts, and your most recent public posts (first line of the caption, cover image, link, post type, publish date, and like and comment counts). We use up to 25 recent posts to calculate engagement rate and show up to 12 of them on your profile. Because Instagram does not share view counts for other accounts, we do not receive view data. We never post, comment, send messages or change anything on your Instagram account, and Instagram data is never sold or used for advertising. How Meta handles data is described in the Meta Privacy Policy (https://www.facebook.com/privacy/policy). When you remove or change the account on your profile, or close your account, the Instagram data we hold is deleted.

07Cookies & Analytics

We use essential cookies to run the site: they keep you signed in and remember your language preference. Alongside those, Google Analytics and Meta Pixel cookies measure how visitors use the site and product, such as which pages are viewed and which signup path is followed. These two run only if you choose "Accept" in the cookie banner shown on your first visit. If you choose "Decline", those scripts are never loaded, so not a single request goes to Google or Meta, and any measurement cookies already set are deleted. You can change your choice at any time from the "Cookie preferences" link at the bottom of this page. You can also block or delete cookies from your browser settings.

08How We Share Your Information

We share the minimum information necessary to carry out a collaboration: your name and shipping information with an accepted brand, or your campaign information with an applying creator. Beyond that, we share information with the infrastructure providers we use, only to the extent needed to deliver the service: Microsoft Azure (Germany) for hosting and the database, Resend and Google for sending email, Google Analytics and Meta Pixel for visit statistics (these two only if you have given cookie consent), and Meta (Instagram), Google (YouTube) and TikTok to retrieve social account statistics (only the username you add, or the permission you grant when connecting, is sent to these platforms). Because these providers are located outside Turkey, your data may be processed abroad; such transfers are carried out in line with the conditions set out in KVKK Article 9. We do not sell personal information to third parties.

09Data Retention

We keep account and collaboration information for as long as your account is active. When you close your account, your information is deleted or anonymized so that it can no longer be linked to you. If we need it to resolve an ongoing dispute or to answer a legal request, we keep only what is needed for as long as it is needed. If a legal retention period ever comes to apply to us, we will update this section.

10Your Rights & Choices

Under KVKK Article 11, you have the right to: learn whether your personal data is being processed, request information about it if so, learn the purpose of processing and whether it is used in accordance with that purpose, know the third parties to whom your data is transferred domestically or abroad, request correction if it is processed incompletely or incorrectly, request its deletion or destruction under the conditions set out in KVKK, request that any correction or deletion also be notified to third parties to whom your data was transferred, object to a result that arises solely from automated analysis to your detriment, and claim compensation for damages arising from unlawful processing. You can exercise these rights by contacting us at privacy@shipcollab.com or through your account; we respond to requests within 30 days at the latest. You can also opt out of non-essential communications (such as marketing emails) at any time.

11Data Security

We use reasonable technical and administrative measures to protect your information, including limiting shipping and contact information to the parties of an accepted collaboration. In the event personal data is unlawfully accessed, we notify the Turkish Data Protection Board and affected individuals as soon as possible and without delay after becoming aware of it.

12Children's Privacy

ShipCollab is not directed at children, and accounts are limited to users who meet our minimum age requirement. We do not knowingly collect information from children.

13Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify users through the platform before the changes take effect.

14Contact Us

Questions about this policy or your data can be sent to privacy@shipcollab.com.