Privacy Policy

Effective date: June 1, 2025  ·  Last updated: June 1, 2025

This Privacy Policy explains how MediaKit Lab (“we”, “us”, “our”) collects, uses, and protects your information when you use ColabRate and other tools on mediakitlab.com (“the Platform”).

By using the Platform, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Information you provide directly

• Account information: Name, email address, and password when you register with credentials
• Google account information: Name, email address, and profile picture when you sign in with Google
• Rate card data: Platform, niche, follower count, engagement rate, city tier, and deliverable type that you enter into the calculator
• Labels: Optional names you give to saved rate cards

Information collected automatically

• Usage data: Pages visited, features used, time spent on the Platform
• Device information: Browser type, operating system, device type
• IP address: Used for security and fraud prevention
• Cookies and session data: We use encrypted session cookies to keep you logged in

Information we do not collect

• We do not collect payment information — the free tier requires no payment
• We do not collect your actual brand deal contracts or negotiation details
• We do not sell your data to advertisers or third parties

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Platform and its tools
• Save your rate cards so you can access them later
• Send rate card emails to brands on your behalf when you request it
• Improve the accuracy of our India market benchmark data
• Communicate with you about product updates and new tools (you can opt out)
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

3. How We Share Your Information

We do not sell, rent, or trade your personal information.

We share information only in these limited circumstances:

• Service providers: We use third-party services to operate the Platform including MongoDB Atlas (database), Upstash (caching), Resend (email delivery), and Vercel (hosting). These providers process data only as necessary to provide their services and are bound by confidentiality obligations.
• At your direction: When you use the “Email to brand” feature, your name and rate card data are shared with the brand email address you specify.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users.
• Business transfers: If MediaKit Lab is acquired or merges with another company, your information may be transferred as part of that transaction.

4. Data Storage and Security

• Your data is stored on MongoDB Atlas servers located in Mumbai, India (ap-south-1 region)
• Passwords are hashed using bcrypt with 12 salt rounds — we never store plain text passwords
• Sessions are encrypted using iron-session with AES-256 encryption
• All data transmission uses HTTPS/TLS encryption
• We retain your account data for as long as your account is active
• Rate cards are retained until you delete them or close your account

5. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate information
• Deletion: Request deletion of your account and all associated data
• Export: Request an export of your rate card data
• Opt out: Unsubscribe from marketing emails at any time

To exercise any of these rights, email us at privacy@mediakitlab.com.

We will respond to all requests within 30 days.

6. Cookies and Tracking

We use:

• Session cookies: Required for authentication — cannot be disabled
• Analytics: We use Vercel Analytics and PostHog to understand how the Platform is used. This data is anonymized and aggregated.

We do not use advertising cookies or sell data to ad networks.

7. Third-Party Services

Our Platform integrates with:

• Google OAuth: If you sign in with Google, Google's privacy policy applies to that authentication. We only receive your name, email, and profile picture.
• Resend: Used to deliver emails you send via the Platform. Resend processes email content but does not use it for advertising.
• Vercel: Our hosting provider. Vercel may log request metadata for security purposes.

8. Children's Privacy

The Platform is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at privacy@mediakitlab.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify you via email or a prominent notice on the Platform.

Your continued use of the Platform after changes constitutes acceptance of the updated policy.

10. Contact Us

MediaKit Lab
Email: privacy@mediakitlab.com
Website: mediakitlab.com