Your data at Collabaura

Updated 2 November 2026

Collabaura, operated through the Artistwala business portfolio, helps creators discover campaigns, manage applications and earnings, and configure Instagram comment-to-DM automations.

Information we use

Collabaura sign-in provides a site-specific account identifier and your email address. We store the creator details you submit, campaign applications, credited earnings and withdrawal requests, including the payment details you provide.

When you connect Instagram, Meta provides your selected professional account’s ID, username, business ID and authorization token. We encrypt the token on our server. We request profile and media access so you can choose a post, comment access to detect matching comments, and message access to send your configured private reply. The current integration does not import your direct-message inbox.

We cache the posts you load and store your automation rules and message text. Incoming comment text is processed to check your trigger; it is not stored in the activity log. Delivery records contain the comment ID, message text, delivery status, provider receipt or error code, and timestamps.

How information is shared

We send the configured message and comment identifier to Meta to deliver a private reply. OpenAI Sites and its hosting infrastructure process information to provide sign-in, storage and hosting. Instagram authorization and delivery are governed by Meta’s policies. We do not sell your creator or Instagram data.

Access and retention

Your saved creator records and Instagram configuration are limited to your signed-in account. The site’s public pages and sample dashboard contain example content. Tokens are stored as encrypted server-side data and are not included in the browser interface.

Disconnecting Instagram removes the locally stored token, cached posts and pending authorization state, pauses automations and skips queued messages. Saved automation drafts and activity remain until you delete Instagram data. Completed delivery records older than 30 days are removed during delivery processing. Account, campaign and financial records remain separate from Instagram data.

Your choices

Connection is optional. You can pause automations, disconnect Instagram, or use the Instagram data deletion page to remove its stored connection, cached media, rules and delivery history. You can also revoke access in your Meta business or Instagram account settings. We never ask for your Instagram password in the Collabaura interface.

Browser storage and changes

We use an essential short-lived cookie to protect Instagram authorization and browser storage for saved campaign preferences. Hosting providers may process operational request metadata. This page will be updated when the service’s data practices change.