Privacy Notice

ꓘꓗ Collective is an independent creative community based in Stockholm, Sweden. For privacy questions or requests, contact contact@kkcltv.com.

Depending on how you use our services, we may process contact details and messages; Discord account identifiers, usernames, avatars, server roles, and niche preferences; connected TikTok usernames and verification details; submitted post URLs and publicly available post metrics; PayPal payout email addresses; campaign, payout, and referral records; and technical information needed to keep the website, dashboard, and Discord bot secure. If you choose TikTok login to verify ownership, we also store the account identifier TikTok provides for our app. We use temporary authorization to read your username and account identifier, do not store TikTok access or refresh tokens, and request revocation of that temporary access after verification. This connection does not allow us to publish posts on your behalf.

If email sign-in is available and you choose it, we store your verified email address and an account identifier to provide access to your account. We use Resend to deliver requested sign-in codes, which expire after ten minutes and can be used once. Our authentication storage keeps hashed codes and temporary abuse-prevention records, including hashed rate-limit identifiers derived from the requesting IP address and email. Your sign-in email is not included in public campaign information or client reports. Adding email access to an existing Discord account requires verification while signed in; we do not automatically link accounts using payout email addresses.

We use this information to respond to enquiries, run and review campaigns, verify connected accounts, calculate and arrange payouts, provide the dashboard and Discord bot, prevent abuse or fraudulent activity, improve service reliability, and meet legal obligations. We rely on contract or steps taken at your request where campaign participation or payouts are involved; legitimate interests for security and fraud prevention; consent for optional cookies; and legal obligations where applicable. We do not sell user data.

If you choose Google sign-in, Google shares basic profile information and a verified email address with us. We store the stable account identifier Google provides and your email address to identify your dashboard profile. We do not request access to your Gmail inbox or retain Google access or refresh tokens. Sign-in requests use temporary, browser-bound security records. Your Google sign-in email is not included in public campaign information or client reports. You can connect Google while signed in to an existing profile; a matching verified email may also identify that profile when Google is authoritative for the address. We do not merge accounts based on payout emails.

We use service providers that help operate the services, including Framer for the website; Railway and database hosting for the dashboard and bot; Discord for community interactions and account authentication; Google for optional account authentication; TikTok for public account and post information; PayPal for payout handling; and YouTube where embedded media is used. Campaign clients may receive campaign reporting and submission information relevant to their campaign. Some providers may process information outside the EEA; where required, we use the safeguards made available by the relevant provider.

We keep connected-account information until it is disconnected or no longer needed. Campaign and submission information is kept for the campaign lifecycle and reasonable post-campaign reporting. Payout and accounting-related information may be retained for as long as required by applicable law. We otherwise keep information only for as long as necessary for the purposes described here.

You may ask for access to, correction of, deletion of, or restriction of your personal data, and you may object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent at any time. Contact us using the email above. You may also lodge a complaint with your local data-protection authority; in Sweden, this is the Swedish Authority for Privacy Protection (IMY).

Our services are not intended for children under 13. If you are under the age required to consent to online data processing where you live, use the service only with the permission required by local law.

We may update this notice as our services change. The latest version will always be published on this page with its revision date.