Kolect Creator Privacy Policy

We may collect information you provide directly, including:

• Name, email address, mobile phone number, location, and communication preferences.
• Creator profile details, social handles, collaboration preferences, content, and media-kit information you submit.
• Campaign applications, partnership responses, rates, conditions, messages, uploads, support requests, and partnership history.
• SMS and email consent records, including the time, source, disclosure version, and status of your choice.

We also collect limited device, browser, IP address, referring-page, timestamp, usage, and diagnostic information for authentication, security, preferences, support, and service analytics.

Connecting Gmail is optional. If you connect it through Google OAuth, Kolect requests your basic Google account identity and the gmail.modify permission. Depending on the feature you use, we may access or process:

• Your Google account identifier and email address.
• Email and thread identifiers, senders, recipients, timestamps, subjects, labels, snippets, and message content.
• Attachments or attachment metadata when needed for a collaboration thread or a draft you manage through Kolect.
• Draft recipients, subject lines, bodies, attachments, versions, and delivery status.
• Actions and synchronization state needed to create or update drafts, apply labels, reconcile drafts sent or deleted in Gmail, and prevent duplicate actions.

Our automated systems may inspect enough message content and metadata to determine whether a message concerns creator business. Messages classified as unrelated are not added to your collaboration pipeline or used to personalize Richi responses.

We use Gmail data only to provide or improve creator-facing features, including to:

• Identify and categorize brand deals, gifting, affiliate, media, PR, and deal-administration messages.
• Summarize active opportunities, track collaboration status, and surface messages that need your attention.
• Analyze relevant messages with AI and prepare response drafts in your selected voice and preferences.
• Research brands mentioned in relevant messages using public or authorized information.
• Create or update Richi-prepared drafts in Gmail and create or apply Kolect labels when you enable Always On.
• Send a reviewed draft when you explicitly choose Send in Kolect.
• Detect when a Kolect-managed draft was sent or deleted in Gmail so its status remains accurate in the creator portal.

Always On controls Richi's ongoing Gmail draft and label automation. You can switch to on-demand use from your Kolect profile. Kolect does not send an AI-prepared email merely because Always On is enabled; sending requires your explicit action in the product.

Kolect's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not sell Gmail data or share it with advertisers or data brokers.
• We do not use Gmail data for advertising, retargeting, creditworthiness, or lending decisions.
• We do not use Gmail data to train generalized or cross-customer AI or machine-learning models.
• We do not allow humans to read Gmail data unless you affirmatively authorize access to specific data, access is necessary for security or abuse investigation, access is required by law, or the data is aggregated and de-identified for permitted internal operations.

Connecting TikTok, Instagram, or YouTube is optional. We receive only information covered by the permissions you approve, which may include account identity, authorized content, audience information, and performance analytics. We use it to verify account control, populate your creator profile and media kit, analyze performance, and help match creators with suitable partnerships. Social-account integrations are read-only unless we separately explain and request a write permission.

• Provide, personalize, secure, maintain, and support the creator portal.
• Operate creator profiles, media kits, partnership workflows, communications, and payments.
• Match creators with relevant opportunities and help brands assess fit.
• Detect misuse, troubleshoot errors, comply with law, and improve service reliability.
• Send account, security, partnership, and service communications, plus marketing only where permitted by your preferences.

We use service providers for cloud hosting, databases, authentication, security, email and API connectivity, communications, customer support, analytics, and AI processing. They may process only the data needed to provide their service to Kolect under confidentiality and data-protection obligations. When Richi uses an AI provider, we send only information reasonably necessary for the creator-facing feature and do not permit it to be used for advertising or generalized model training.

We may also disclose information to comply with law, respond to lawful requests, protect rights and safety, investigate misuse, or complete a corporate transaction subject to applicable notice and consent requirements. Information you intentionally publish in a public media kit or link-in-bio page is visible to people who access that link.

We use reasonable administrative, technical, and organizational safeguards. Data is encrypted in transit and at rest where supported. OAuth access and refresh tokens are encrypted or otherwise protected and restricted to systems and personnel that need them to operate the connection. We never ask for or store your Google password. No system is completely secure, so we cannot guarantee absolute security.

We retain personal information, Gmail metadata, relevant message content, derived deal records, and AI-generated drafts only as long as reasonably necessary to provide the service, maintain your account, satisfy legal obligations, or resolve security and dispute issues. OAuth tokens are retained only while needed to maintain an active connection.

Disconnecting Gmail or revoking Kolect in your Google Account stops future Gmail access and automated actions. Existing messages you sent and drafts or labels already created inside Gmail may remain in your Google account until you remove them there. A verified deletion request deletes or de-identifies covered Kolect-held data within 30 days, except limited records required for security, fraud prevention, legal compliance, audit, or dispute resolution. Backup copies expire on their normal cycle, generally within 90 days. See our Data Deletion and Account Disconnection page for instructions.

You can change Richi's working mode in your profile, disconnect Gmail in Kolect, or revoke Kolect from your Google Account at any time. Depending on where you live, you may also have rights to access, correct, export, delete, restrict, or object to processing of personal information and to opt out of marketing communications. We may verify your identity before completing a request. Kolect does not sell personal information.

We operate from the United States. Information may be processed in the United States and other locations where our service providers operate, using appropriate safeguards where required. The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy as the service changes. We will revise the effective date and provide additional notice or request renewed consent when required. For privacy questions or requests, email hello@kolect.ai, or write to Panoverse Inc. d/b/a Kolect AI, One Kendall Square, Building 200, Cambridge, MA 02139, United States.