Privacy Policy

1. Introduction

This Privacy Policy explains how Colla (“we,” “us,” or “our”) collects, uses, stores, and shares your information when you use the Colla platform (“Platform”). Colla is currently operated by an individual based in New York, United States of America.

By using Colla, you agree to the practices described in this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2a. Information from third-party platforms

When you sign in via Google (YouTube) or Twitch OAuth, we receive and store the following public information from those platforms:

• Your display name and handle
• Your profile picture
• Your follower or subscriber count
• Your average view or performance statistics
• OAuth tokens required to maintain your connection (not shared publicly)

2b. Information you provide directly

When you set up or update your Colla profile, we collect and store information you provide, including your bio, content categories or niches, and any other profile customizations. Information you post publicly on Colla — including posts, replies, and profile details — is visible to other users and may be used by Colla for marketing purposes.

2c. Activity data

Colla stores activity generated through your use of the Platform. Some of this activity is public and may be used for marketing purposes — specifically, your posts, replies, and public profile information.

The following activity is private and will never be shared publicly or used for marketing: direct messages, swipe decisions, match relationships, and notifications. Direct messages may be reviewed by Colla staff if reported, as described in our Terms & Conditions.

2d. Analytics data

Colla uses Google Analytics to understand how users interact with the Platform. Google Analytics may collect data such as pages visited, time spent on the Platform, and general usage patterns. This data is collected via cookies and is governed by Google's own Privacy Policy.

3. Cookies

Colla uses cookies for the following purposes:

• Session cookies — to keep you logged in while you use the Platform
• Analytics cookies — set by Google Analytics to track usage patterns

When you first visit Colla, you will be shown a cookie consent notice. By continuing to use the Platform after seeing this notice, you consent to the use of cookies as described above. You may disable cookies in your browser settings, but doing so may affect your ability to use certain features of the Platform.

4. How We Use Your Information

We use the information we collect to:

• Operate and improve the Platform
• Display your profile to other users
• Facilitate connections and collaborations between creators
• Market Colla using public profile content, posts, and replies (see Section 2b)
• Respond to reports and moderate content
• Comply with legal obligations and enforce our Terms & Conditions

In the future, Colla may introduce algorithmic or AI-assisted matchmaking features that use your profile data and activity to suggest relevant collaborators. If and when this is implemented, it will be disclosed in an updated version of this policy.

Colla does not sell your personal data to third parties.

5. Data Sharing

Colla shares your data only in the following limited circumstances:

• Google — as a data processor, via Google Cloud SQL, Firebase, and Google Analytics
• Other users — your public profile information is visible to other Colla users as a core part of how the Platform works, similar to a public profile on any other social platform
• Future payment processors — if and when a premium tier is introduced, a third-party payment processor will handle billing data
• Legal compliance — if required by law, court order, or to protect the rights and safety of Colla or its users

6. Data Retention & Deletion

Your data is stored for as long as your account is active. If you request deletion of your account or data, Colla will process that request and remove your data from the active database. However, due to a 7-day rolling backup retention policy, your data may persist in backup systems for up to 7 days after deletion before being fully purged.

Some data may be retained beyond this period where required for legal compliance, including ban records and data relevant to unresolved reports or disputes.

When you delete your account, the following data is permanently deleted: your profile, all posts you authored (including their likes and replies), likes you gave to others' posts, swipes, matches, blocks, and notifications addressed to you.

The following data is retained after account deletion to preserve context for other users:

• Your replies — content is kept, but your name and profile picture are replaced with "Deleted User" and a generic icon
• Direct messages — conversations remain accessible to the other participant, with your identity replaced by "Deleted User"
• Notifications you sent to other users — your identity will appear as "Deleted User"; any pending collab requests you sent will be marked as resolved

Note that direct messages and swipe decisions cannot be edited or deleted by users individually. These limitations are disclosed here so you can make informed decisions about what you share on the Platform.

To request deletion of your data, email elijah.ren0616@gmail.com.

7. Your Rights

You have the following rights regarding your data:

To exercise any of these rights, email elijah.ren0616@gmail.com.

8. Children's Privacy

Colla is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will make every reasonable effort to delete their data and close their account.

However, we acknowledge that in some cases data may have already propagated — for example, if other users have interacted with or shared content from the underage account. In such cases, complete removal may not be fully possible, but we will make a best-effort attempt.

If you believe a user under 18 has an account on Colla, please contact us at elijah.ren0616@gmail.com.

9. Security

Colla takes reasonable technical measures to protect your data, including:

• All data is transmitted over HTTPS
• Authentication is handled exclusively via OAuth — Colla never stores passwords
• HTTP security headers are set on all responses, including Content Security Policy, HSTS, and X-Frame-Options
• Database access is restricted and managed through Google Cloud infrastructure

No system is completely secure. In the event of a data breach, Colla will notify affected users via a notice posted on the Platform homepage — accessible without login — within 3 days of becoming aware of the breach.

10. Changes to This Policy

Colla may update this Privacy Policy from time to time. When changes are made, you will be notified via an in-app notification that clearly states what has changed and the new effective date. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

If you do not agree to the updated policy, you should stop using the Platform before the effective date of the changes.

11. Contact

For privacy-related questions, data requests, or concerns, please contact: