KollabiuM Privacy Policy

1. General

1.1.The data controller is KOLLABIUM FZCO, a company incorporated under the laws of the UAE in the IFZA free zone (licence No. 40859), address: 40859-001, IFZA Business Park, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE (the "Company", "we").

1.2.The Company processes personal data under UAE personal data protection law. Where the law of other countries applies to processing, including EU Regulation 2016/679 (GDPR), the Company complies with its requirements.

1.3.This Policy applies to the KollabiuM website at kollabium.com and its web app, and to conference guests who join using an email address without a Platform account.

1.4.By registering, you confirm that you have read this Policy. The Company records the date and version you agreed to. If you do not agree with the Policy, you must not use the Platform.

2. What data we collect

2.1.Your account data: email address, username, first and last name, date of birth (needed to check age and to send birthday greetings; not shown to other Users), avatar, interface language, the inviting User's code (if the User registered by invitation), date and version of accepted documents.

2.2.Optional profile information you choose to provide: interests, phone number, gender, country and city, website, bio, relationship status and other profile fields.

2.4.Content and communication: posts, stories, comments, reactions, follows, direct and group messages, voice messages, files, conference recordings (if the organiser turned recording on).

2.5.AI Studio and Kolli data: your requests, uploaded photos, videos and other files, including face photos for selfies and trends, generation results and credit spending history.

2.6.Payment data: what you bought, the amount, currency, date, payment method and status, and certificates and promo codes used. Payment providers process the data needed for your selected payment method under their own rules.

2.7.Partner programme data: who invited you, whom you invited, reward accrual and use, and information needed to settle amounts with you and meet mandatory legal requirements. Participation terms are available in Team after signing in.

2.8.Technical data: IP address, device type, operating system, browser, visit times, last activity time, push notification data, error logs, cookies and similar data in the browser (section 9).

2.9.Platform activity: post impressions and time spent on posts, story views, watch duration and completion, “More like this”, hidden content, favourite and muted authors, pinned people in the story tray, feed and notification settings, and Laboratory votes.

2.10.Requests: correspondence with support, reports, refund requests.

2.11.Emails: news email subscription status, subscription and unsubscription dates, delivery status, email opens and link clicks.

2.12.Conference guest data: email address, display name, time of joining and leaving the conference, messages in the conference chat, participation in the recording.

2.13.The Company does not ask for special categories of data, such as health, racial or ethnic origin, political or religious views or biometrics, and does not use photos, including face photos for selfies and trends, to identify people. If you post such information in your public profile or posts, you do so by your own choice.

3. Why we process data

3.1.To register the account, verify the email and provide sign-in.

3.2.To run the Platform's features: feed, stories, chats, calls, conferences, AI Studio, Kolli, notifications. Including banners selected by account age and current plan.

3.3.To accept payments, activate plans, credit credits, activate certificates and process refunds.

3.4.To run the partner programme and gift promotions, including detecting manipulation and abuse.

3.5.To select and order posts, stories, people suggestions, discussions and notification roundups. Section 10 and the KollabiuM Recommendation Technology Rules explain what information each screen uses and where it comes from.

3.6.To keep the Platform safe: protect accounts, review reports, moderate Content, fight spam and fraud.

3.7.To fix errors and improve the Platform based on usage statistics.

3.8.To answer requests and send service notifications (sign-in codes, payments, changes to documents).

3.9.To send Platform news emails and tailor them to your activity, plan, language, interests and actions on the Platform. You can unsubscribe from news emails via the link in every email or in profile settings. Where selected campaign conditions require it, we also use email opens and clicks, completed AI Studio work, conference activity, published posts and credit purchases. See the KollabiuM Recommendation Technology Rules.

3.10.To meet legal requirements: accounting and tax records, responses to lawful requests from authorities.

4. Legal bases

4.1.Performance of the contract: data is processed to fulfil the Terms of Service, including your account, Platform features, payments, the partner programme and service notifications.

4.2.Your consent: optional profile fields, analytics cookies where applicable law requires consent, and access to your device's camera, microphone and notifications. You can withdraw consent at any time without affecting the lawfulness of earlier processing.

4.3.The Company's legitimate interest: security, moderation, preventing abuse, fixing errors, selecting feed posts, Platform news emails to its users, web analytics where applicable law permits it without consent, improving the Platform and protecting rights in disputes. We rely on this basis only where it does not override your rights and freedoms.

4.4.Legal obligations: payment records, taxes, requests from competent authorities.

5. Who sees data and who it is shared with

5.1.Other users see the public part of your profile, posts, stories and comments according to your settings. Your posts and stories may appear to members of your available team circle without a follow. Privacy and access restrictions remain. See the Recommendation Technology Rules. When you view someone's profile or story, the author may receive a "Someone viewed you" notification and see you in the story viewers list within their plan's limits. Direct and group messages are visible to chat participants. The person who invited you can see their team in the partner programme. In personal calls, devices may connect directly, making your IP address technically visible to the other person.

5.2.Company staff and contractors get access to data only to the extent needed for their work and are bound by confidentiality. The content of direct messages is viewed only when a report about those messages is reviewed or when required by law.

5.3.Categories of service providers that may receive data:

• hosting and data storage, including files and recordings;
• content delivery;
• call and conference services;
• email and push notification delivery;
• AI model providers: they receive your requests and files needed for the specific operation (a face photo for selfies and trends), without your email address or profile information;
• web analytics services;
• payment providers shown at checkout: they process payment data as independent controllers under their own rules.

The other listed categories process data on the Company's behalf.

5.4.Public authorities: on lawful request and to the extent required by law.

5.5.A successor: in case of reorganisation or sale of the Company's business, provided the successor complies with this Policy.

5.6.The Company does not sell your personal data.

6. International transfers

6.1.Your data may be processed outside your country of residence. The Company applies the safeguards required by applicable law to such processing.

6.2.For such transfers the Company takes contractual, organisational and technical measures to protect data at the level required by applicable law.

7. Retention

7.1.Account and profile data, Content and messages are kept while your account exists. Posts and messages you delete stop being shown immediately.

7.2.Stories are shown for the period set by the author's plan.

7.3.Conference recordings are kept for the period set by the organiser's plan and are then deleted automatically.

7.4.An account with an unconfirmed email is deleted 14 days after registration: the email address and username are anonymised, and a snapshot of the account data is kept in a closed archive for 90 days and then deleted.

7.5.After you delete your account, data is deleted or anonymised, except data the Company must keep by law or to resolve disputes. Messages you sent to other users may remain in their chats.

7.6.Payment data is kept for the period required by UAE law for accounting and tax purposes.

7.7.Support requests and reports are kept for 6 months after the request is closed, or until a related dispute is resolved.

7.8.Face photos for selfies and trends are kept until you delete them in the AI Studio or delete your account.

7.9.Technical usage logs are kept for no longer than 12 months.

7.10.After unsubscribing from news emails, the email address is kept with an "unsubscribed" flag so that emails are no longer sent.

7.11.When retention periods end, data is deleted or anonymised so that you can no longer be identified. Backups are refreshed on their own schedule and are not used for other purposes.

8. Your rights

8.1.You have the right to:

• know what data about you is processed and get a copy;
• correct inaccurate data: in the profile or via support;
• delete the account in profile settings or ask for specific data to be deleted;
• restrict processing while you dispute its accuracy or lawfulness;
• receive your data in a machine-readable format to move it to another service;
• object to processing based on legitimate interest, including opting out of news emails;
• withdraw consent;
• complain to the data protection authority of your country of residence.

8.2.Send your request to support@kollabium.com or through kollabium.com/care from your account's email address. The Company replies within 30 days and may ask you to confirm that you own the account.

8.3.Deletion may be refused in full or in part if the data must be kept by law or to protect rights in a dispute.

9. Cookies and analytics

9.1.The Platform uses cookies and other browser storage:

• necessary: for signing in, security and core features;
• functional: to remember language, theme, drafts and other settings;
• analytics: web analytics services that help us understand Platform use and improve it. Where applicable law requires consent, the Platform asks for it and enables analytics only after you agree.

9.2.Where applicable law permits analytics without consent, web analytics services may record actions on site pages, such as movements, clicks and scrolling, to identify usability problems. Password, code and payment input fields are not recorded.

9.3.If you are shown an analytics consent request, you can change your choice at any time using the link in the site footer. You can also delete or block cookies in your browser settings. Without necessary cookies, sign-in and some features will not work. You can also opt out using tools offered by the relevant web analytics services.

9.4.The first time the Platform needs the device's camera, microphone or notifications, it asks for permission. Permissions can be revoked in browser or device settings.

10. Automated processing and AI

10.1.Selection uses your follows, friendships, team connections, activity and settings, as well as information about available content and its engagement. Selected interests help suggest people; language, format, freshness and engagement contribute to the smart feed. Each screen uses a different set of information. The Recommendation Technology Rules explain the details and your controls.

10.2.Automated tools also help detect spam, manipulation and prohibited Content. You can challenge account blocks or cancelled credits through support. A person will then review the decision.

10.3.AI models process your requests to the AI Studio and Kolli (section 5.3). Face photos are used only to create images at your request. Do not send passwords, payment details or other people's personal data to the AI Studio or Kolli.

10.4.Chronological mode turns off smart ranking for For you. “Do not count views” stops recording new post impressions and dwell signals for the feed. It does not remove earlier signals or stop separate story-view tracking. Reset feed deletes its signals and restores default weights; follows, likes, comments, interests, story views and access restrictions remain.

11. Security

11.1.The Company protects data with organisational and technical measures: encryption in transit (HTTPS), one-time code sign-in, restricted staff access, server protection, masking secrets in error logs, backups.

11.2.Internet risks cannot be eliminated entirely. If a breach affects your rights, the Company notifies you and the competent authorities within the time required by law.

11.3.You are responsible for the security of your email and devices. Do not share sign-in codes with anyone. KollabiuM staff never ask for sign-in codes.

12. Children

12.1.The Platform is intended for people aged 16 and over. Users under 18 use it with the consent of their parents or legal guardians.

12.2.If the Company learns that an account was created by a child under 16, the account and its data are deleted. Parents can report this to support@kollabium.com.

12.3.The Child Safety Standards explain how we protect minors, what is prohibited and how you can report a safety concern.

13. Changes to the Policy

13.1.The Company may update this Policy. Revised versions are published on the Platform.

13.2.The Company notifies Users of material changes on the Platform or by email at least 3 days before they take effect. If the new version requires consent, the Platform asks for it at the next sign-in.

14. Contacts

KOLLABIUM FZCO

Address: 40859-001, IFZA Business Park, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE

Email: support@kollabium.com

Support: kollabium.com/care