Privacy Policy

1. Individuals Under the Age of 18

Our Platform is not intended for persons under 18 years old or under the age of majority in their jurisdiction, whichever is higher. No one under the applicable minimum age may provide any information to or on the Platform. We do not knowingly collect personal information from persons under 18 years old. If you are under 18 (or under the age of majority in your jurisdiction), do not use or provide any information on this Platform or through any of its features, register on the Platform, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you might use. If we learn we have collected or received personal information from a person under the applicable minimum age, we will delete that information. If you believe we might have any information from or about such a person, please contact us at [email protected].

2. Data we may collect about you

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

• Account Data includes your email address, password, date of birth, and account preferences.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, ISP name, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Platform.
• Location Data refers to the location you manually specify, either by selecting a city or by providing details about your planned travel destinations and dates. The Platform does not collect or store your precise geographic location. Instead, it collects information based on the locations you input, which may or may not be accurate or up to date.
• Message Data includes contents of any public or private messages you send through the Platform.
• Content Data includes private or public photos, videos, or other digital content.
• Profile Data includes the public information you choose to add to your publicly displayed profile, such as your profile headline or description.
• Usage Data includes information about how you use our Platform, products, and services.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences and any feedback or data transmitted to us via email.

We also collect, use, and share Aggregated Data including statistical or demographic data for any purpose.

Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Platform feature.

However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

Special Categories of Personal Data

We do not collect Special Categories of Personal Data about you, such as details about your religious or philosophical beliefs, political opinions, trade union membership, health information, or genetic and biometric data, unless you voluntarily provide it.

However, to facilitate meaningful connections on our Platform, we collect information about your gender identity, gender preferences for collaboration, and ethnicity. Under GDPR, this may constitute special category data (data concerning racial or ethnic origin and sexual orientation).

Legal basis: We process this data based on your explicit consent (GDPR Article 9(2)(a)), which you provide during the registration and profile setup process. This data is used for the Platform's core matching and discovery functionality. You may withdraw your consent at any time by deleting your account or contacting us at [email protected]. However, some of this data is required for the Platform to function, and withdrawing consent may require account deletion. Additionally, by choosing to include this information in your public profile, you are manifestly making this data public within the meaning of GDPR Article 9(2)(e).

We do not collect information about criminal convictions and offenses.

If you fail to provide personal data:

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

3. How we collect data about you

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us information about you by filling in forms or by corresponding with us by email. This includes information you provide at the time of registering to use our Platform, posting material, or requesting further services. We may also ask you for information when you report a problem with our Platform.
• User contributions. You also may provide Content Data for us to publish or display ("post") on public areas of the Platform or transmit to other users of the Platform or third parties. You submit Content Data for posting and transmission to others at your own risk. Although you may set certain privacy settings for Content Data by logging into your account profile, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of any users of the Platform with whom you choose to share your Content Data. Therefore, we cannot and do not guarantee that unauthorized persons will not view your Content Data.
• Automated technologies or interactions. As you interact with our Platform, we may automatically collect technical data about your equipment, browsing actions and patterns as specified above. We collect this information by using cookies, server logs, and other similar technologies. We may also use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). Please note that we do not recognize or respond to any do not track signals (DNT). For more information about DNT, visit www.allaboutdnt.com.
• Third-party integrations. If you connect your Twitter/X or Bluesky account, we receive your handle, follower count, and public profile information from those services via their APIs.

3.1. Cookies and automatic data collection technologies

Our Platform uses cookies (small files placed on your device) or other automatic data collection technologies to distinguish you from other users of the Platform. This helps us deliver a better and more personalized service when you browse our Platform. It also allows us to improve our Platform by enabling us to:

• Estimate our user-base size and usage patterns.
• Store your preferences so we may customize our Platform according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Platform.

You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, certain parts of our Platform will become inaccessible and certain features will not work correctly. Unless you adjust your browser settings to refuse cookies, our system will issue them. To learn more about our use of cookies, please see our Cookie Use Policy.

We may also use analytics tools such as Google Analytics and Twitter/X conversion tracking to understand how visitors use our Platform and to measure the effectiveness of our outreach. These tools are only activated with your consent via our cookie consent tool. For more details, please see our Cookie Policy.

3.2. Third-party use of cookies and other tracking technologies

Some content or applications on the Platform use third-party services, including Google Analytics for usage analytics and Twitter/X for conversion tracking. These third parties may use cookies or other tracking technologies to collect information about you when you use our Platform, subject to your cookie consent preferences. They may associate the information collected with your personal data or they may collect information, including personal data, about your online activities over time.

We do not control how these third-party tracking technologies operate or how they may use the collected data. If you have any questions about these tracking technologies, you should contact the responsible provider directly. For details on the specific cookies used, see our Cookie Policy.

4. How we use your personal data

We use your personal data to provide you products, offer you services, communicate with you, deliver marketing, or to conduct other business operations, including using data to improve and personalize your experiences. Examples of how we may use the personal data we collect and our reasons for doing so include:

What we use your personal data for:	Our reasons:
To register you as a new customer	Performance of a contract with you
To provide Platform services to you, including facilitating connections and communications between users	For the performance of our contract with you or to take steps at your request before entering into a contract
To prevent and detect fraud against you or JustCollabs	For our legitimate interests or those of a nonparty, i.e., to minimize fraud that could be damaging for us and for you
To monitor the website for child sexual abuse material (CSAM)	For our legitimate interests or those of a third party, that is, to prevent and detect CSAM that could be damaging for us and for you. To comply with our legal and regulatory obligations
Ensuring business policies are adhered to, e.g., policies covering security and internet use	For our legitimate interests or those of a third party, i.e., to make sure we are following our own internal procedures so we can deliver the best service to you
Operational reasons, including improving efficiency, training, and quality control	For our legitimate interests or those of a third party, i.e., to be as efficient as we can so we can deliver the best service for you at the best price
Statistical analysis to help us manage our business, e.g., for customer base or other efficiency measures	For our legitimate interests or those of a third party, i.e., to be as efficient as we can so we can deliver the best service for you at the best price
Preventing unauthorized access and modifications to systems	For our legitimate interests or those of a third party, i.e., to prevent and detect criminal activity that could be damaging for us and for you
Updating customer records	For the performance of our contract with you or to take steps at your request before entering into a contract
To comply with our legal and regulatory obligations	For our legitimate interests or those of a third party, e.g., making sure that we can keep in touch with our customers about existing orders and new products
Marketing our services to existing and former customers and to third parties who have previously expressed an interest in our services	For our legitimate interests or those of a third party, i.e., to promote our business to existing and former customers
To assist law enforcement and response to subpoenas	To comply with our legal and regulatory obligations

We may also use personal data to contact you about our own goods and services that might be of interest to you.

We may use non personal data for any business purpose.

5. Disclosure of your personal data

We may share your personal data that we collect, or you provide as described in this privacy policy:

5.1 Public Profile Information

JustCollabs is a location-based social networking platform designed to allow users to share information and connect with others. When you use the Platform, your Profile Data is visible to other users (including any sensitive personal data). This means that other users can view the information you include in your profile, including any personal or sensitive personal data that you choose to share. For example, other users may see your location (such as the city you specify or your travel plans) and your preferences.

5.2 Third-Party Service Providers

We share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us and require access to that information to do that work. We have implemented appropriate safeguards and data processing agreements with these providers to protect your personal data. Our primary service providers include:

• Supabase (Authentication and Database): We use Supabase for user authentication and database hosting. Supabase receives and stores: Account Data (email address, password hashes, user ID), authentication tokens, and session data. Supabase operates in compliance with GDPR and data is stored in the United States. Data processing agreement: https://supabase.com/dpa
• Cloudflare R2 (File Storage): We use Cloudflare R2 for storage of user-uploaded files including avatars, profile images, and media content. Cloudflare R2 receives and stores: avatar images, profile media, and associated metadata. Files are encrypted at rest and in transit. Data is stored in the United States. Privacy policy: https://www.cloudflare.com/privacypolicy/
• DigitalOcean (Server Hosting): Our primary database and application server are hosted on DigitalOcean infrastructure in San Francisco, USA. DigitalOcean processes: all Platform data including account data, profile data, messages, and content data. DigitalOcean's DPA and Standard Contractual Clauses apply automatically under their Terms of Service. Privacy policy: https://www.digitalocean.com/legal/privacy-policy
• Resend (Email Delivery): We use Resend to send transactional emails (account confirmations, password resets, notifications). Resend receives: email addresses and email content (notification text). Resend acts as a data processor and does not use your data for any other purpose. Privacy policy: https://resend.com/legal/privacy-policy
• Twitter/X API (Social Media Integration): If you connect your Twitter/X account, we access your Twitter handle, follower count, and public profile information via the Twitter API. We store encrypted OAuth tokens to maintain your connection. We do not post on your behalf without explicit permission. Privacy policy: https://twitter.com/en/privacy
• Bluesky/AT Protocol (Social Media Integration): If you connect your Bluesky account, we access your Bluesky handle (DID), follower count, and public profile information via the AT Protocol. We store encrypted access tokens to maintain your connection. Privacy policy: https://bsky.social/about/support/privacy-policy
• Cloudflare Turnstile (CAPTCHA): We use Cloudflare Turnstile for bot protection on signup and login forms. Cloudflare processes: IP addresses, browser fingerprints, and interaction data for fraud prevention. No personal data is stored long-term. Privacy policy: https://www.cloudflare.com/privacypolicy/
• Google Analytics: We use Google Analytics to help us understand how our customers use the Platform. Google Analytics collects: Technical Data, Usage Data, and Location Data (city-level). You can read more about how Google uses your personal data here: https://policies.google.com/privacy. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
• EmailOctopus (Email Marketing): We use EmailOctopus for email marketing automation, including newsletters and platform updates. EmailOctopus receives: email addresses and usernames/nicknames for campaign personalization. EmailOctopus acts as a data processor and processes data in accordance with GDPR. You can unsubscribe from marketing emails at any time using the unsubscribe link in any email. Privacy policy: https://emailoctopus.com/legal/privacy
• Cloudflare (CDN and Security): We use Cloudflare as our Content Delivery Network (CDN) and for DDoS protection. All traffic to and from our Platform passes through Cloudflare's network. Cloudflare processes: IP addresses, request headers, and traffic metadata for performance optimization and security purposes. Privacy policy: https://www.cloudflare.com/privacypolicy/

Each of our service providers is bound by a data processing agreement that includes appropriate safeguards for your personal data in accordance with GDPR Article 28.

We may allow selected third parties to use tracking technology on the website, which will enable them to collect data about how you interact with the Platform over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content and better understand online activity.

5.3 Other Disclosures

• To our subsidiaries and affiliates.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all the Company's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by the Company about the users of our Platform is among the assets transferred.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our terms and other agreements.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection.

We may share non personal data without restriction.

The categories of personal information we may disclose include:

• Account Data;
• Technical Data;
• Location Data;
• Message Data;
• Content Data;
• Profile Data; and
• Usage Data.

6. Your personal data use choices

We strive to provide you with choices regarding the personal data you provide to us. We have created mechanisms to provide you with the following control over your data:

• Tracking technologies and advertising. You can set your browser to refuse all or some browser cookies, or to alert you when websitesset or access cookies. If you disable or refuse cookies, please note that some parts of this Platform will become inaccessible and not function properly. For more information about the cookies we use, please see Cookies and automatic data collection technologies.
• Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to this designated address: [email protected]. However, please know we do not currently sell data triggering that statute's opt-out requirements.
• Global Privacy Control (GPC). We honor Global Privacy Control (GPC) signals as a valid consumer opt-out request for the sale or sharing of personal information, as required by applicable state laws including the California Consumer Privacy Act and the Colorado Privacy Act. When we detect a GPC signal from your browser, we will treat it as a valid request to opt out of any sale or sharing of your personal information associated with that browser. You can enable GPC in your browser settings or by installing a GPC-compatible browser extension.

Our Platform may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates, or plug-ins enabling third-party features. If you follow a link to any third party website or engage a third-party plug-in, please note that these third parties have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these third parties.

We do not control third parties' collection or use of your information to serve interest-based advertising. But these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.

Residents of certain jurisdictions, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia, the European Economic Area, and the United Kingdom might have additional personal information rights and choices. Please see Your State Privacy Rights and Your EEA/UK Privacy Rights for more information.

7. Data Retention—How long will you use my personal data for?

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

7.1 Specific Retention Periods

Different types of data are retained for different periods based on legal requirements and business necessity:

• Active Account Data: Profile information, messages, and user-generated content are retained for as long as your account is active.
• Messages: Private messages are retained indefinitely while your account is active unless you delete them. Deleted messages are permanently removed from active systems but may persist in backups for up to 90 days.
• Deleted Accounts: When you delete your account, we immediately remove your profile from public view. Account data is retained in archived form for up to 1 year for legal compliance, fraud prevention, and to prevent abuse. After this period, data is permanently deleted except as required by law.
• Account Data After Deletion: After account deletion, basic account data (email address, username) may be retained in archived form for up to 1 year for fraud prevention, abuse prevention, and legal compliance purposes, after which it is permanently deleted except as required by law.
• Security and Audit Logs: Access logs, security logs, and administrative audit logs are retained for 90 days for security monitoring and compliance purposes, then permanently deleted.
• Email Communications: Transactional emails sent via Resend are retained by Resend for up to 30 days in compliance with their data retention policy.
• Authentication Tokens: Session tokens and OAuth tokens are deleted when you log out or when they expire (typically 24 hours to 60 days depending on the token type).
• Backup Data: Deleted data may persist in encrypted database backups for up to 90 days before permanent deletion from all systems.

7.2 Data Retention Determination Factors

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

7.3 Anonymization

In some circumstances we will anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

7.4 Your Right to Request Deletion

In some circumstances you can ask us to delete your data. See section 8 (Accessing and correcting your personal data) and section 12 (Your EEA/UK Privacy Rights) for further information on exercising your right to erasure.

8. Accessing and correcting your personal data

You can review and change your personal data by logging into the Platform and visiting your account profile view. If you have not registered for an account or you need help, you may send us an email at [email protected] to request access to, correct, or delete any personal data that you have provided to us. We cannot delete your personal data except by also deleting your user account. We may not accommodate a request to change data if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

If you delete your Content Data from the Platform, copies of your Content Data may remain viewable in cached and archived pages or might have been copied or stored by other users of the Platform. In addition, we may also save an archived version of deleted accounts in a separate database for up to one year in case we need it for legal reasons. Proper access and use of information provided on the Platform, including Content Data, is governed by our terms.

Residents of certain jurisdictions, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia, the European Economic Area, and the United Kingdom might have additional personal information rights and choices. Please see Your State Privacy Rights and Your EEA/UK Privacy Rights for more information.

9. Cross-border data transfers

We are based in the United States of America. We may process, store, and transfer the personal information we collect, in and to a country outside your own, with different privacy laws that might or might not be as comprehensive as your own. If you are located outside the United States, your personal information might at times be accessible by persons who are located worldwide including in countries that the European Commission or other geopolitical regions have not determined to provide the same adequate level of data protection in your country, province, territory, or geopolitical region.

By submitting your personal information or engaging with our Platform, you hereby consent to this transfer, storing, or processing, including the transfer of your information across international boundaries to jurisdictions anywhere in the world as permitted by law. If you are a Canadian resident or otherwise located in Canada, please note that personal information transfers outside of Canada might result in your information becoming accessible to foreign jurisdiction's law enforcement or other authorities.

If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom (UK), please note that your information will be transferred outside of those areas, including to the United States. For transfers to countries that have not received an adequacy decision from the European Commission, we rely on the following safeguards:

• EU-US Data Privacy Framework (DPF): Where our service providers are certified under the EU-US Data Privacy Framework, transfers are made in reliance on this adequacy decision. This includes providers such as Google LLC and Cloudflare Inc.
• Standard Contractual Clauses (SCCs): For transfers to service providers not covered by the DPF, we use the European Commission's Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) as the transfer mechanism, supplemented by additional technical and organizational safeguards where necessary.

You may request a copy of the relevant transfer safeguards by contacting us at [email protected].

10. Data security

The security of your personal data is very important to us. We use physical, electronic, and administrative safeguards designed to protect your personal data from loss, misuse, and unauthorized access, use, alteration, or disclosure.

10.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal data. All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS). Sensitive data, including private messages and third-party authentication credentials, is encrypted at rest. Passwords are hashed and never stored in plain text. Access to user data is restricted to authorized personnel, and our Platform is protected by network-level security including firewall and DDoS mitigation services.

10.2 Your Responsibility

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Platform, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to take care when providing information in public areas of the Platform like profile information, which other verified users can view.

10.3 Security Limitations

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our Platform. Any transmission of personal data is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the Platform.

10.4 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users and relevant supervisory authorities as required by applicable data protection laws (GDPR Article 33-34, CCPA requirements) without undue delay and no later than 72 hours after becoming aware of the breach, where feasible.

11. Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Correct inaccuracies in their personal information, taking into account the information's nature processing purpose (excluding Iowa and Utah).
• Data portability.
• Opt-out of personal data processing for:
• targeted advertising (excluding Iowa);
• sales; or
• profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
• Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights might vary by state. To exercise any of these rights please email us at [email protected]. To appeal a decision regarding a consumer rights request please email us at [email protected].

11.1 California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act ("CCPA/CPRA") provide you with specific rights regarding your personal information.

Categories of Personal Information Collected: In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, username, IP address)
• Internet or network activity (browsing history, interaction with Platform)
• Geolocation data (city-level location you provide)
• Sensory data (photos, videos you upload)
• Professional or employment-related information (creator profiles)
• Sensitive personal information (gender identity, sexual orientation preferences)

Sources of Collection: Directly from you, automatically through your use of the Platform, and from third-party authentication providers (Twitter/X, Bluesky).

Business Purpose for Collection: To provide the Platform's services, facilitate creator networking, ensure platform safety, and comply with legal obligations.

Sale or Sharing of Personal Information: We do not sell your personal information as defined under the CCPA. We do not share your personal information for cross-context behavioral advertising purposes.

Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of your sensitive personal information (including sexual orientation and gender preferences) to uses necessary to provide the services you request. To exercise this right, email [email protected].

Your Rights Under CCPA/CPRA:

• Right to Know what personal information we collect, use, and disclose
• Right to Delete your personal information
• Right to Correct inaccurate personal information
• Right to Opt-Out of sale or sharing of personal information
• Right to Limit Use of sensitive personal information
• Right to Non-Discrimination for exercising your privacy rights

To exercise these rights, email [email protected] with the subject line "CCPA Request." We will respond within 45 days. We will verify your identity before fulfilling your request by matching information you provide against our records. You may designate an authorized agent to make a request on your behalf; we may require written proof of the agent's authority and verify your identity directly.

11.2 Nevada Privacy Rights

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out right may submit a request to [email protected]. However, please know we do not currently sell data triggering that statute's opt-out requirements.

12. Your EEA/UK Privacy Rights

If you reside in the EEA, the following terms apply to you.

Legal Basis for Processing. We may process your personal data because you have given it permission to do so (e.g., by sending data through the Platform's contact or signup forms), because the processing is in our legitimate interests and it is not overridden by your rights, or because JustCollabs needs to process your personal data to comply with the law.

Your legal rights. Under certain circumstances, you have rights under data protection laws in relation to your personal data. Your rights might include the following:

• Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully, or where we are required to erase your personal data to comply with local law. Note, however, that we might not always be able to comply with your request of erasure for specific legal reasons that will be notified to you, if applicable, at the time of your request.
• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information that override your rights and freedoms.
• Request restriction of processing your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful, but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims; or (d) you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
• Request the transfer of your personal data to you or a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine readable format. Note that this right only applies to automated information that you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we might not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us at [email protected]. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

13. Changes to our privacy policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal data, we will notify you by email to the email address specified in your account (if applicable) or through a notice on the Platform. The date the privacy policy was last revised is identified at the top of this page. You are responsible for periodically visiting our Platform and this privacy policy to check for any changes.

14. Contact information

Questions, comments, and requests regarding this privacy policy and our privacy practices are welcomed. You may contact us through any of the following methods:

Email: [email protected]

Mailing Address:
Pivot Core LLC (d/b/a JustCollabs)
30 N Gould St Ste N
Sheridan, WY 82801
United States

Data Protection Inquiries:
For questions specific to your personal data, privacy rights, or to exercise your rights under GDPR, CCPA, or other applicable privacy laws, please email [email protected] with the subject line "Privacy Rights Request".

CSAM and Safety Concerns:
For urgent safety matters including reports of child exploitation, please use the "Report Profile" feature on any user profile or email [email protected] with subject line "URGENT: Safety Report". You may also report directly to the National Center for Missing & Exploited Children (NCMEC) CyberTipline at https://report.cybertip.org/ or call 1-800-THE-LOST (1-800-843-5678).

Response Time:
We strive to respond to all privacy inquiries within 30 days. Urgent safety matters are prioritized and reviewed immediately upon receipt.