Privacy Policy

1.1This Policy covers personal information collected through the Platform, including the MEDCollab website and application, the Creator application and directory, Brand account and billing pages, and related communications.

1.2This Policy does not cover third-party websites or services that the Platform may link to, including a Creator's own social media profiles, which are governed by those third parties' own privacy practices.

2.1 Information Creators Provide

When a Creator applies to or maintains an account on the Platform, we collect:

• Identity and contact information: full name, email address, date of birth, and account password.
• Professional credentials: professional type, medical specialty, license number, license issuing country and state/province, university or medical school attended, years in practice, board certification status, and a self-certification regarding license standing.
• Profile content: headshot/photo, short professional bio, and social media handles or profile URLs (e.g., Instagram, TikTok, LinkedIn, Snapchat, YouTube).
• Work preferences and business terms: languages spoken, content categories of interest, opportunity types, comfort with on-camera work, approximate audience size, monthly partnership capacity, hourly rate expectations, category exclusions, and existing exclusivity arrangements with other agencies or brands.
• Application metadata: how the Creator heard about the Platform, and whether the Creator is a MEDpreneur Academy graduate.
• Payment and tax information: bank account or payment details and tax identification information necessary to pay Creator compensation and meet applicable tax reporting obligations. This information is collected and stored primarily by our payment processor (Section 5.3), and Company retains only the minimum billing information necessary to administer payments.
• Content and communications: campaign scripts, video and image assets, and messages exchanged with Company or, where routed through the Platform, with Brands.

2.2 Information Brands Provide

When a Brand creates an account or engages the Platform, we collect:

• Business information: company name, business address, and industry/category.
• Personnel information: name, title, business email, and phone number of the individual(s) using the account on the Brand's behalf.
• Billing and payment information, collected primarily by our payment processor (Section 5.3).
• Campaign information: product and marketing details, creative briefs, and content submitted for an Engagement.
• Advertising performance data: where a package requires it, read-only access to advertising platform accounts (e.g., Meta Ads Manager, Google Ads, TikTok Ads) limited to performance data for campaigns using Platform-sourced creative, as described in the Brand Terms of Service.

2.3 Information Collected Automatically

When anyone uses the Platform, we automatically collect technical information such as IP address, device and browser type, pages viewed, referring pages, and timestamps, including through cookies and similar technologies (Section 11), and, for registered users, a timestamped record of acceptance of our Terms of Service and any Engagement or Order Confirmations.

2.4 Information From Third Parties

We may receive information about Creators or Brands from third parties, including our payment processor, our customer relationship management provider, publicly available professional licensing databases used to verify credentials, and, where applicable, referral sources such as the MEDpreneur Academy.

We use personal information to:

• Operate the Platform, including creating and managing accounts, matching Creators with Brands, and displaying Creator profiles in the Directory.
• Verify Creator licensure and professional credentials, including through independent verification described in the Medical Creator Terms of Service.
• Process payments, including collecting amounts due from Brands and disbursing compensation to Creators, and meet related tax and accounting obligations.
• Facilitate content production and the approval workflow described in our Terms of Service, including compliance review of campaign assets.
• Communicate with Creators and Brands about their accounts, Engagements, and Platform updates, and, where permitted, send marketing communications.
• Monitor and improve Platform performance, troubleshoot issues, and develop new features.
• Detect, investigate, and prevent fraud, abuse, prohibited conduct (as described in our Terms of Service), and security incidents.
• Comply with legal obligations, enforce our agreements, and establish, exercise, or defend legal claims.
• Support a merger, acquisition, financing, or sale of all or part of Company's business, as described in Section 5.5.

4.1Where the laws of the European Economic Area, the United Kingdom, or a similar jurisdiction apply, we process personal information on the following legal bases: performance of a contract (to provide the Platform and administer an Engagement); legitimate interests (to secure the Platform, prevent fraud, and improve our services, balanced against individual privacy interests); legal obligation (for example, tax and recordkeeping requirements); and consent, where we specifically request it (for example, certain marketing communications).

5.1With Brands. A Creator's Directory profile information (Section 2.1) is visible to Brands using the Platform, consistent with the Directory & Profile Display License described in the Medical Creator Terms of Service. Creator compensation information is never shared with Brands; see Section 6 of the Medical Creator Terms of Service and Section 6 of the Brand Terms of Service regarding fee confidentiality.

5.2With Creators. A Brand's identity and campaign brief are shared with a matched Creator as necessary to perform an Engagement. The amount a Brand pays Company for an Engagement is never shared with the Creator.

5.3Service Providers. We share personal information with vendors who perform services on our behalf, including payment processing (Stripe), customer relationship management and email communications (GoHighLevel), cloud hosting, and identity/license verification services. These providers are authorized to use personal information only as necessary to provide their services to us.

5.4Legal and Safety Reasons. We may disclose personal information where required by law, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Company, our users, or the public.

5.5Business Transfers. We may disclose or transfer personal information, including in an anonymized or aggregated form, in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of Company's business or assets, including in due diligence conducted prior to such a transaction, subject to appropriate confidentiality safeguards. Any acquiring party will remain bound by the commitments in this Policy with respect to previously collected personal information, except as required by law.

5.6Aggregated and De-identified Data. We may create and share aggregated or de-identified data that does not identify a specific individual (for example, category-level performance benchmarks) for any business purpose, including in our own marketing and in connection with Section 5.5.

5.7We do not sell personal information for money, and do not share personal information with third parties for their own cross-context behavioral advertising purposes.

6.1We retain personal information for as long as an account remains active, and for a reasonable period after an account is closed or an Engagement ends, to (a) resolve disputes and enforce our agreements, including the non-circumvention provisions of our Terms of Service, which by their terms may extend for twenty-four (24) months or more after a relationship ends; (b) meet tax, accounting, and other legal recordkeeping obligations; and (c) support the business purposes described in Section 5.5 and Section 5.6.

6.2Where retention is not otherwise required, we will delete or de-identify personal information within a commercially reasonable period following a valid deletion request under Section 8, subject to the exceptions described in that section.

7.1We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit for account credentials, and vendor due diligence for processors such as our payment processor. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7.2We will notify affected individuals and, where required, regulators, of a data breach involving personal information in accordance with applicable law.

8.1General. Subject to applicable law and the exceptions in Section 8.4, you may request access to, correction of, or deletion of your personal information, and may opt out of marketing communications at any time using the unsubscribe link or by contacting us using Section 14.

8.2California and Other U.S. State Privacy Rights. If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have the right to know what personal information we have collected about you, to request deletion or correction of that information, and to opt out of the sale or sharing of personal information (which, as stated in Section 5.7, we do not do) or its use for certain profiling. You may exercise these rights using the contact information in Section 14; we will verify your request before acting on it.

8.3EEA/UK Rights. If the laws of the European Economic Area, the United Kingdom, or a similar jurisdiction apply to you, you may have the right to access, rectify, erase, or port your personal information, to restrict or object to certain processing, to withdraw consent where processing is based on consent, and to lodge a complaint with your local data protection authority.

8.4Exceptions. We may decline or limit a request where necessary to comply with a legal obligation, to establish, exercise, or defend legal claims (including under the non-circumvention provisions of our Terms of Service), to complete a transaction you requested, or as otherwise permitted by law. For example, we may retain licensure verification records and Engagement financial records even after an account is closed.

9.1Company is based in the United States, and personal information we collect is processed and stored primarily in the United States. If you are located outside the United States, your information will be transferred to, and processed in, the United States and other countries where our service providers operate, which may have different data protection laws than your home jurisdiction. Where required, we use appropriate safeguards for such transfers.

10.1The Platform is intended for licensed medical professionals and business users and is not directed to, and is not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn we have done so, we will delete that information.

11.1We and our service providers use cookies and similar technologies to operate the Platform, remember preferences, understand usage patterns, and support our marketing (including through GoHighLevel). You can control cookies through your browser settings; disabling cookies may affect Platform functionality.

12.1The Platform may display or link to third-party sites, including a Creator's own social media profiles submitted as part of their profile. We are not responsible for the privacy practices of those third parties, and this Policy does not apply to them.

13.1We may update this Policy from time to time. We will post the updated Policy with a new effective date and, for material changes, provide additional notice (such as email or in-platform notice) as described in our Terms of Service. Continued use of the Platform after an update constitutes acceptance of the revised Policy.

14.1Questions, requests, or complaints regarding this Policy or our data practices can be directed to Company by email to support@medcollab.io