Your data, on your terms.

1. Who we are

Nexus (“we”, “our”) is operated by CollabNexus Ltd, a private limited company registered in England & Wales (Company No. 17438481), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We connect UK-based social media creators with brands for paid marketing collaborations. Contact us at info@collabnexus.co.uk.

2. What we collect

• Account data — name, email, password hash, role (brand or creator), company name.
• Profile data — creator niches, platforms, follower count, portfolio, bio, avatar.
• Social platform data — when you connect Instagram, TikTok, or YouTube via OAuth, we receive: profile ID, username, follower count, and (with your consent) recent media metadata used only for creator matching and the Growth AI audit. We do NOT post to your accounts.
• Financial data — Stripe processes all payments. We store transaction records, hire amounts, and payout balances. We never see your card details.
• Usage data — application IPs, browser type, page views (via analytics).

3. Why we collect it

• To match creators with relevant brand campaigns.
• To process escrow payments and release payouts.
• To run the Growth AI creator audit that suggests posting strategy.
• To prevent fraud and abuse.
• To send transactional emails (never marketing without opt-in).

4. Who we share it with

Only the third parties strictly needed to run the service:

• Stripe — payments.
• Anthropic Claude & Google Gemini — AI features (brief drafting, Growth AI audit, case studies). No raw PII is sent — only campaign text and public profile data.
• Meta, TikTok, Google — only during OAuth to confirm your identity and pull public metrics you have authorised.
• Hosting / infra — Emergent-managed AWS-region servers in the EU/UK.

We never sell your data.

5. Your rights (UK GDPR)

You can at any time:

• Request a copy of all data we hold (email us).
• Correct anything inaccurate from your Settings page.
• Delete your account and all associated data via our Data Deletion page.
• Object to processing or withdraw consent.
• Complain to the UK Information Commissioner's Office.

6. How long we keep it

Account data: while your account is active + 30 days after deletion request (in case you change your mind). Financial records: 7 years (UK tax law). Analytics: 26 months. Social OAuth tokens: rotated every 60 days; deleted on disconnect.

7. Cookies

We use only strictly necessary cookies for authentication (session token) and analytics. No third-party advertising cookies. No cross-site tracking.

7a. Social login data (Instagram, TikTok, Google/YouTube)

If you sign in or connect an account with Instagram, TikTok or Google, we receive only the data you consent to on the provider's screen: your public profile (name, handle, avatar), email address, and public audience statistics (follower/subscriber count, view count, video count) and, where granted, a list of your recent public posts. For Google we use the read-only youtube.readonly scope to read your own channel statistics; we never read private videos, analytics or comments and never write to your channel.

This data is used solely to populate your Nexus creator profile so brands can verify your reach. It is stored encrypted at rest, refreshed weekly, shown only on your own profile, never combined with data from other providers, and never sold, transferred or used for advertising. You can revoke access at any time in Settings → Connections (or at myaccount.google.com/permissions), which deletes the token and cached data immediately. Deleting your Nexus account removes everything else within 30 days.

Nexus's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Changes

We'll email you at least 14 days before any material change. Continued use after that constitutes acceptance.

9. Contact

Questions? info@collabnexus.co.uk