Privacy Policy
Effective date: 12 November 2026
This Privacy Policy explains how TriCollab collects, uses, shares and protects personal data when you use our website and services at https://tricollab-app.tricollab2026.workers.dev (the “Platform”). It is published under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them. By creating an account or using the Platform, you consent to the processing described below.
1. Who we are
The Platform is operated by Tricollab Private Limited, 9-256/1, Jaganadhapuram Colony, Tiruvuru Mandal, Nadim Tiruvuru, Andhra Pradesh 521235, India (“TriCollab”, “we”, “us”). We are the Data Fiduciary for the personal data described in this policy. TriCollab is a marketplace that connects businesses and brands (“Businesses”) with content creators (“Creators”) for paid and barter campaigns.
2. Data we collect
Businesses
- Account details: email address, business name, phone number, business category and location.
- Tax details: GSTIN and PAN, where provided.
- Campaign data: briefs, budgets, brand kit files, creator shortlists, messages and feedback.
- Subscription and payment records (see “Payments” below).
Creators
- Profile details: name, display name, profile photo, bio, date of birth, gender, city and state, primary language, content niches, content types, availability, pricing and packages, past brand collaborations.
- Contact details: email address and phone number (verified by one-time password).
- Portfolio: files you upload and links you add to your work.
- Payout and tax details: bank account details, UPI ID, PAN and a copy of your PAN card.
- Social media data from accounts you connect (see sections 4 and 5).
- Campaign data: deliverables, drafts, videos and captions you upload, post links, messages and earnings.
Everyone
- Messages and support tickets you send through the Platform.
- Notification and email preferences.
- Technical data: login session data, device and browser type, IP address and server logs, collected automatically when you use the Platform.
Payments
Payments are processed by Razorpay. We receive the payment status, amount, order and payment IDs. We do not receive or store your full card number, CVV, UPI PIN or net-banking credentials.
3. How we use your data
- To create and manage your account and verify your email and phone number.
- To review Creator applications before profiles go live.
- To help Businesses discover Creators and to run campaigns end to end: briefs, roster approval, content review, scheduling, publishing and performance reporting.
- To process subscriptions and campaign payments, calculate platform commission, pay Creators and meet tax obligations such as TDS and GST.
- To send service emails and notifications about your account and campaigns.
- To provide support, prevent fraud and abuse, and keep the Platform secure.
- To comply with law and respond to valid requests from authorities.
We do not sell your personal data, and we do not use it for third-party advertising.
4. Instagram data
Creators can choose to connect an Instagram Professional (Business or Creator) account using Instagram Login, which is provided by Meta. Connecting is optional. You choose which permissions to grant on Instagram’s consent screen. We request:
- instagram_business_basic — your Instagram user ID, username, profile picture, account type, follower count, media count and your list of posts. We use this to verify your account, show your audience size on your Creator profile, and let you pick existing posts for your portfolio and campaign deliverables.
- instagram_business_manage_insights — post-level insights such as reach, views, likes, comments, shares and saves. We use these to calculate your engagement rate, average views and total reach, and to show campaign performance to the Business that paid for that campaign.
- instagram_business_content_publish — used only when you upload a video and caption for an approved campaign and choose to have TriCollab publish it to your account at the scheduled time. We never post anything you have not uploaded and queued yourself.
We store the access token Instagram issues so these features keep working, and we refresh it before it expires. Instagram data is used only to provide the features described above. We do not sell it, use it for advertising, or share it with data brokers.
What Businesses see: follower count, engagement rate, average views, total reach, portfolio posts you select, and performance data for posts made for their own campaigns. Your Instagram handle is not shown to Businesses while browsing Creators.
Disconnecting: you can disconnect Instagram at any time from your profile settings. This deletes your stored access token and the data we fetched from Instagram, such as your Instagram user ID, profile picture, account type and media count. Your Instagram handle and follower count stay on your profile as ordinary profile fields until you edit them or delete your account. You can also remove TriCollab in the Instagram app under Settings → Apps and websites. See our data deletion instructions.
5. YouTube data
If you add a YouTube channel, we use YouTube API Services to read its public statistics, such as subscriber count and video views. By adding a channel, you agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.
7. What other users can see
- Approved Creator profiles are visible to Businesses: display name, photo, bio, city and state, niches, languages, content types, pricing and packages, portfolio, follower and subscriber counts, engagement rate and average views. Instagram handles and YouTube links are not shown during discovery.
- Your bank details, UPI ID, PAN, date of birth, phone number and email are never shown to other users.
- Once a Creator is assigned to a campaign, the Business and the Creator can see the campaign brief, messages, submitted content and the published post for that campaign.
- Businesses’ campaign briefs are shared with the Creators invited to those campaigns.
8. How long we keep data
- Account and profile data: while your account is active, and deleted after you ask us to delete your account.
- Instagram data and tokens: until you disconnect Instagram, remove our app in Instagram, or delete your account.
- Payment, invoice and tax records: for the period required by Indian tax and accounting laws, which may be up to 8 years.
- Campaign records and messages: for the life of your account, so both parties keep a record of the work agreed and delivered.
- Server logs: for a limited period for security and debugging.
9. Your rights
Under the Digital Personal Data Protection Act, 2023 you have the right to:
- get a summary of the personal data we process about you and how we process it;
- correct, complete or update your data (most of it can be edited in your settings);
- have your data erased when it is no longer needed, unless law requires us to keep it;
- withdraw your consent at any time — this does not affect processing that already happened, and some features may stop working;
- nominate another person to exercise these rights if you die or become incapable;
- have your complaints resolved by our Grievance Officer, and then escalate to the Data Protection Board of India.
To exercise a right, email contact@tricollab.com from the email address on your account. We may need to verify your identity before acting.
10. Security
We use reasonable security practices, including encrypted connections (HTTPS), access controls that restrict who can read sensitive fields, server-side storage of access tokens, and limited staff access. No system is perfectly secure. If a personal data breach affects you, we will notify you and the Data Protection Board as the law requires.
12. Children
The Platform is only for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
13. Where data is processed
Some of our service providers process data on servers outside India. When that happens, we transfer data only as permitted under Indian law.
14. Changes to this policy
We may update this policy. We will post the new version here with a new effective date. If the changes are significant, we will also notify you by email or in the Platform.
15. Grievance Officer and contact
Under the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:
[GRIEVANCE OFFICER NAME]
Tricollab Private Limited, 9-256/1, Jaganadhapuram Colony, Tiruvuru Mandal, Nadim Tiruvuru, Andhra Pradesh 521235, India
Email: contact@tricollab.com
We acknowledge complaints within 24 hours and aim to resolve them within 15 days. For general questions, email contact@tricollab.com.