Privacy Policy
Overview
Collabrate is operated by XBudd LLC ("we," "us," or "our"). This policy describes what personal information we collect through collabrate.ai, how we use it, and your rights regarding that information. Visiting this site does not itself constitute consent to data collection. By submitting the waitlist form, you consent to the practices described in this policy as they apply to your email address.
Information we collect
Currently (waitlist phase): We collect only what is necessary to operate the waitlist:
- Your email address, submitted via the waitlist form
- The date and time of submission
We do not collect your name, location, payment information, or device identifiers. We do not use advertising cookies or third-party tracking pixels.
When the product launches: Creators who connect their Gmail inbox will grant Collabrate read access to inbound email via the Google Gmail API. We will access inbound messages solely to classify brand deal proposals, evaluate commercial intent, and draft negotiation responses on your behalf. We will not access sent mail, personal correspondence, or any folder outside your primary inbox. Gmail access is granted voluntarily and can be revoked at any time through Google Account settings or within the Collabrate dashboard — revocation takes effect immediately.
How we use your information
Your email address is used solely to communicate with you about Collabrate — including waitlist confirmation, product updates, and your early access invite. We will not send unrelated commercial email, and we will never share your address with advertisers.
When the product launches, email content accessed via the Gmail API is used exclusively to operate the negotiation agent on your behalf. We do not build advertising profiles from your email content, and we do not share it with third parties beyond the sub-processors listed below.
Email data retention
We apply a strict, tiered retention policy to all email data the agent processes:
- Non-proposal emails: classified and permanently discarded within 24 hours — only the classification result (not the content) is retained
- Proposal emails: retained for the life of the active deal plus 90 days, then permanently deleted
- Creator-initiated deletion: any email thread may be deleted on demand from within the Collabrate dashboard, immediately and permanently
Waitlist email addresses are retained until you unsubscribe or request deletion. We will complete deletion within 30 days of a valid request.
Google API Services
Collabrate's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: email data accessed via the Gmail API is used only to operate the negotiation agent on the creator's behalf; it is not used for serving advertisements, is not transferred to third parties except as necessary to operate the service, is not used for credit assessment, and is not used to train generalized AI models.
Third-party service providers
We share your data only with a small number of carefully chosen sub-processors, each engaged under a data processing agreement and authorized to act solely on our documented instructions. The current list — including each provider's name, purpose, data processed, geographic location, and link to their privacy policy / DPA — is maintained on a dedicated page:
View the current sub-processor list →
That page is updated whenever we add, replace, or remove a sub-processor. Material changes will be communicated to waitlist members and active users by email at least 30 days before they take effect, where reasonably practical.
We do not sell, rent, or trade your personal information to any third party, for any purpose.
Business transfers: If XBudd LLC is involved in a merger, acquisition, asset sale, or wind-down, your personal data may be transferred as part of that transaction. We will notify waitlist members and active users by email at least 30 days before any such transfer takes effect, and the acquiring entity will be bound by the same commitments described in this policy or we will obtain your renewed consent.
Cookies
Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction. These include encrypted data transmission (TLS), access controls limited to authorized personnel, and regular review of our security practices. No method of transmission or storage is 100% secure. If you believe your data has been compromised, contact us immediately at hello@collabrate.ai.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay, as required by GDPR Article 34.
US residents: We will provide notice of security breaches affecting your personal information in accordance with applicable state law, including the Texas Identity Theft Enforcement and Protection Act and other applicable state breach notification statutes.
If you believe your data may have been compromised, contact us immediately at hello@collabrate.ai.
Your rights
You may unsubscribe from email communications at any time using the unsubscribe link in any message we send.
How to exercise your rights (DSAR process): To exercise any of your data rights, email hello@collabrate.ai with the subject line "Data Rights Request" and include: (1) your full name and email address associated with your account or waitlist submission; (2) the specific right you wish to exercise (access, correction, deletion, portability, restriction, or objection); and (3) any relevant details to help us locate your data. We will acknowledge receipt within 5 business days and respond fully within 30 days (or 45 days for Texas TDPSA requests, with a possible 45-day extension). We may ask you to verify your identity before processing the request. We will not charge a fee for reasonable requests. If we are unable to comply with your request, we will explain why.
California residents (CCPA / CPRA): We do not sell or share personal information as defined under California law. You have the right to know what personal information we collect, to request its deletion, and to correct inaccurate information. We do not discriminate against you for exercising any of these rights. To submit a request, email hello@collabrate.ai.
Texas residents (Texas Data Privacy and Security Act — TDPSA): If you are a Texas resident, you have the right to: (1) confirm whether we process your personal data and access it; (2) correct inaccuracies in your personal data; (3) delete personal data provided by or obtained about you; (4) obtain a portable copy of your personal data; and (5) opt out of the processing of your personal data for purposes of targeted advertising, sale, or certain profiling. We do not sell personal data or use it for targeted advertising. To exercise any of these rights, email hello@collabrate.ai. We will respond within 45 days, with the option to extend by an additional 45 days when reasonably necessary.
EEA and UK residents (GDPR / UK GDPR): Our legal basis for processing your email address is consent, given at the point of form submission. You have the right to access, rectify, erase, restrict processing of, and object to processing of your personal data. You also have the right to data portability (GDPR Art. 20): you may receive a copy of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and transmit it to another controller where technically feasible — email hello@collabrate.ai with the subject "Data Rights Request" to request an export. You may withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with your local supervisory authority.
International data transfers (EEA / UK): XBudd LLC is based in the United States. When we transfer personal data from the EEA or UK to the US, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission (and their UK equivalent, the International Data Transfer Agreement / IDTA), incorporated into our data processing agreements with each sub-processor. A copy of the relevant SCCs is available on request by emailing hello@collabrate.ai.
EU Representative (Article 27 GDPR): XBudd LLC has designated [REPRESENTATIVE NAME] as its EU representative under Article 27 of the GDPR. EEA residents may contact our representative at: [REPRESENTATIVE ADDRESS AND EMAIL]. This does not affect your right to contact us directly or to lodge a complaint with your local supervisory authority.
Automated decision-making (GDPR Art. 22): When the product launches, our AI agent will perform automated evaluation of inbound brand proposals — scoring legitimacy, assessing commercial intent, and prioritizing responses. This processing is carried out on behalf of creators to operate the negotiation service. It does not constitute automated decision-making that produces legal effects on data subjects under GDPR Article 22, as all final decisions (including deal approval) require explicit creator confirmation. No negotiation outcome is binding without creator approval.
Children
This site is not directed to individuals under 18, which is the minimum age required to join the waitlist and to use the Collabrate product. We do not knowingly collect personal information from anyone under 18, and consistent with the Children's Online Privacy Protection Act (COPPA), we will never knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.
Changes to this policy
We may update this policy as our practices or legal obligations evolve. We will notify waitlist members of any material changes by email before they take effect. The date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically.
Contact
Questions or requests regarding this policy:
hello@collabrate.ai
XBudd LLC · Texas, United States