Privacy Policy

Last updated: 28 July 2026

This policy covers The Creator Collab, an invite-only pilot for content creators: the waitlist on this site, the pilot app (where creators manage outreach and message brands), the contact form on a creator's public media kit, and the optional social-platform connections a creator can set up in the app. It explains what we collect, why, and what your rights are.

1. Who we are

The data controller is Spijker Dienstverlening (trading as The Creator Collab), a business registered in the Netherlands with the Dutch Chamber of Commerce (KVK) under number 96035250, located at Sibeliusstraat 12, Leiden, the Netherlands.

For anything privacy-related, email hello@thecreatorcollab.com. We have not appointed a data protection officer, as our processing does not require one.

2. What we collect

Only what you enter in the two waitlist forms:

• Creator waitlist: email address, biggest platform, follower range, and — optionally — your handle and content niche.
• Brand waitlist: company, business type, and email address.
• Media-kit contact form & in-app messages: if you contact a creator through their public media kit or message them in the app, we process your name, company, email address and the content of your messages, so the conversation can be delivered and continued.

We also see cookieless, aggregated visit statistics for this site (for example how many people viewed a page). These cannot identify you.

We do not collect payment details, precise location data, or any cross-site tracking data.

3. Connected social platforms & Google user data

In the app, a creator can optionally connect a social account so their media kit fills itself. Right now that is YouTube (via Google sign-in); connections for other platforms may follow and will work the same way. Connecting is never required — every number can also be entered by hand.

What we access. When you connect YouTube, you grant us read-only access. We retrieve your channel name and ID, subscriber count, view and video counts, a list of your uploads (titles, thumbnails, view counts, publish dates) and, from YouTube Analytics, 30-day totals (views, watch time, likes, comments, shares, subscribers gained) and aggregated audience statistics (age groups, gender split, top countries). The access is read-only by design: we cannot post, change or delete anything on your channel.

How we use and store it. This data is used for one purpose: filling your own profile and media kit. It is stored in our database (Supabase, EU) in records only you can read. The sign-in tokens are stored with additional access controls that make them unreadable from the app itself; only our server-side functions can use them, solely to fetch the data above. If you import a video into your media kit, we save a copy of its thumbnail in our media storage so the tile keeps working. Nothing from a connected account appears on your public media kit until you press publish yourself — publishing is always a manual action.

What we never do with it. We do not sell it, share it with third parties or advertisers, use it to train AI models, or use it for any purpose other than showing your own statistics to you and — after you publish — on your own media kit. Our use of data received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Disconnecting & deletion. You can disconnect at any time in the app: we then revoke our access with Google and delete the stored tokens. You can also revoke access yourself at myaccount.google.com/permissions. Statistics already saved to your profile stay until you edit or delete them, and anything you previously published stays on your media kit until you change it — disconnecting stops future updates, it does not silently rewrite your page. Deleting your account removes all of it. For any residual data, email hello@thecreatorcollab.com.

The YouTube connection uses YouTube API Services. By connecting, you also agree to the YouTube Terms of Service; Google's handling of your data is described in the Google Privacy Policy.

4. Why we collect it & legal basis

• Managing the waitlist and sending pilot invites. Legal basis: Article 6(1)(b) GDPR — taking steps prior to a contract at your request.
• Selecting the pilot group based on platform, follower range and niche, so the first cohort is a workable mix. Legal basis: Article 6(1)(f) GDPR — our legitimate interest in running a small, balanced pilot. Platform and follower range are required to join; your handle and niche are optional — leaving those empty still keeps you on the waitlist.

Invite emails are the service you signed up for, not marketing. We only send a newsletter or other marketing if you separately opt in (Article 6(1)(a) GDPR — consent), and you can withdraw that consent at any time.

• Running the pilot app and delivering messages. When you contact a creator or exchange messages, we deliver and — because people use the app occasionally rather than all day — email you a notification that a new message or inquiry is waiting (never the message content). Legal basis: Article 6(1)(b) GDPR (performing the service) and 6(1)(f) GDPR — our legitimate interest in reliably delivering conversations.
• Fetching statistics from a connected social account (section 3). This only happens after you connect the account yourself, and only to fill your own profile and media kit. Legal basis: Article 6(1)(b) GDPR — performing the service you asked for. Audience statistics are aggregated percentages about your viewers as a group; we receive no data that identifies an individual viewer.

5. Who we share it with

We do not sell your data and we do not share it with advertisers. We use these service providers (processors):

• Supabase — database where waitlist entries, accounts and messages are stored, hosted in the EU.
• Vercel — website and app hosting, and cookieless analytics.
• Resend (EU region) — delivers our transactional email: invites, password resets, and new-message/new-inquiry notifications.
• Hostinger — hosts our hello@thecreatorcollab.com mailbox, which receives the emails you send us (including removal and rights requests).

A data processing agreement is in place with each processor.

6. International transfers

Waitlist data is stored in the EU, in Frankfurt, Germany (eu-central-1). Vercel is a US-based company; where data leaves the EU, it does so under Vercel's EU-U.S. Data Privacy Framework certification and/or Standard Contractual Clauses.

7. How long we keep it

We keep your waitlist entry until you accept an invite or ask to be removed — whichever comes first. If neither happens, we delete all waitlist data no later than 12 months after the waitlist closes.

Sign-in tokens for a connected social account are kept until you disconnect, and are deleted immediately when you do. Statistics fetched from a connection stay on your profile until you edit or delete them. Deleting your account removes both at once.

8. Your rights (GDPR)

You can ask us at any time to:

• access the data we hold about you;
• correct it (rectification);
• delete it (erasure);
• restrict how we use it;
• receive it in a portable format;
• object to processing based on legitimate interest (such as pilot-group selection);
• withdraw any consent you gave, such as a newsletter opt-in.

Email us at hello@thecreatorcollab.com — we respond within one month.

You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to your local EU supervisory authority.

9. Your rights — California & other regions

We do not sell or share your personal information with anyone, for any purpose, and we do not use it for targeted advertising.

Wherever you live, you have the same rights to know, access, delete and correct your data. Use the same address: hello@thecreatorcollab.com.

10. Cookies & analytics

This site does not use cookies or similar storage on your device. We measure visits with Vercel Web Analytics, a cookieless service: it counts page views using an anonymised, aggregated method, never stores anything in your browser, and cannot identify you. Because there is nothing to consent to, you won't see a cookie banner here. If we ever introduce cookies, we will ask for your consent first and update this policy.

11. Security

All traffic to and from this site is encrypted (TLS/HTTPS). Waitlist entries are stored with Supabase behind access controls, including row level security, and only the business owner has access to them.

12. Children

The Creator Collab is aimed at professional content creators and is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has joined the waitlist, email us and we will delete the entry.

13. Changes to this policy

The date at the top shows when this policy was last changed. If we make a material change, we email everyone on the waitlist before it takes effect.

14. Contact

hello@thecreatorcollab.com
Sibeliusstraat 12, Leiden, the Netherlands