Panoverse Inc. d/b/a Kolect AI (“Kolect,” “we,” “us,” or “our”) provides creator partnership tools, including creator profiles, account verification, analytics, and shareable media kits. This Privacy Policy explains how we collect, use, disclose, protect, and delete information when you use kolect.ai, our creator portal, and related services.
1. Information we collect
We may collect information you provide directly, including:
- Name, email address, mobile phone number, location, and communication preferences.
- Creator profile details, social media handles, collaboration preferences, and content you submit.
- Campaign applications, messages, support requests, and partnership history.
- SMS and email consent records, including the time and source of your choice.
We also collect limited technical and usage information, such as browser and device type, IP address, referring page, timestamps, and interactions with our services. We use cookies and similar technologies for authentication, security, preferences, and service analytics.
2. Connected TikTok, Instagram, and YouTube accounts
Connecting a social account is optional. If you choose to connect TikTok, Instagram, or YouTube through OAuth, we receive only the information covered by the permissions you review and approve on that platform. Depending on the platform and permissions granted, this may include:
- Account or channel identifiers, display name, handle, profile image, biography, and account type.
- Public or authorized posts and videos, captions, thumbnails, publishing dates, and content metadata.
- Follower or subscriber counts, views, reach, impressions, engagement, and content performance.
- Aggregate audience and channel analytics, such as geography, age range, gender, and traffic sources, when available.
We use this data to verify that you control the connected account, populate and refresh your creator profile and media kit, let you choose which verified signals appear in a shareable media kit, analyze content performance, and help brands evaluate potential creator partnerships.
Kolect's current creator account integrations are read-only. We do not use these permissions to publish, edit, or delete content; send messages; manage comments; run ads; or change your platform settings. If we introduce one of those capabilities, we will request the additional permission separately and explain the use before you authorize it.
3. How we use information
We use information to:
- Provide, personalize, secure, and support the Kolect service.
- Verify creator accounts and display current, authorized profile and analytics signals.
- Match creators with relevant brand opportunities and help brands assess fit.
- Communicate about accounts, partnerships, campaigns, and optional marketing preferences.
- Detect misuse, troubleshoot problems, comply with law, and improve product performance.
We do not sell connected social account data. We do not use connected social account data to train generalized or cross-customer artificial intelligence or machine-learning models.
4. Google API Services User Data Policy
Kolect's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can review or revoke Kolect's Google access at any time from your Google Account's third-party connections page. Revoking access stops future collection from that account.
5. When we disclose information
We may disclose information to service providers that support hosting, databases, security, analytics, communications, and customer support, only as needed to provide those services under contractual confidentiality and data-protection obligations. We may also disclose information to comply with law, respond to lawful requests, protect rights and safety, investigate misuse, or complete a corporate transaction.
A creator controls which media kit sections are published or shared. Information included in a published media kit is visible to people who receive or access that link.
6. Security and token storage
We use reasonable administrative, technical, and organizational safeguards. Data is encrypted in transit and at rest where supported, and OAuth access and refresh tokens are restricted to systems and personnel that need them to operate the connection. We do not ask for or store your TikTok, Instagram, Facebook, or Google password. No system is completely secure, so we cannot guarantee absolute security.
7. Retention, disconnection, and deletion
We retain personal information only as long as reasonably necessary for the purposes described here or as required by law. Connected-account tokens are retained only while needed to maintain the connection. You may disconnect an account from your Kolect profile or revoke access on the platform at any time.
Our step-by-step disconnection and deletion options are described on the Data Deletion and Account Disconnection page. After a verified deletion request, we delete or de-identify covered account data within 30 days, except for limited records that we must retain for security, fraud prevention, legal compliance, or dispute resolution. Backup copies expire on their normal cycle, generally within 90 days.
8. Your choices and privacy rights
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal information. You may also opt out of marketing communications at any time. We may need to verify your identity before completing a request.
California residents may request information about collection and disclosure, correction, and deletion, and may opt out of sale or sharing where applicable. Kolect does not sell personal information.
9. International transfers
We operate from the United States. Information may be processed in the United States and other locations where our service providers operate. Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses.
10. Children's privacy
The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can investigate and delete it as appropriate.
11. Changes to this policy
We may update this policy from time to time. The date above shows the latest revision. We will provide additional notice of material changes when required by law.
12. Contact us
For privacy questions or requests, email hello@kolect.ai, or write to Panoverse Inc. d/b/a Kolect AI, One Kendall Square, Building 200, Cambridge, MA 02139, United States.