Effective September 20, 2026. What we collect, what we do with it, and what you can ask us to do about it. Read alongside our Terms & Conditions.
Collective Loft is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.
Before anything else, the commitment that shapes this whole policy: we will never sell your personal data. Not to advertisers, not to data brokers, not to partners. We will never use your data to serve you third-party advertising. If Collective Loft ever shuts down, your data gets deleted, not auctioned. If Collective Loft is ever acquired, your data transfers only to an owner who agrees in writing to these exact commitments, and you get 30 days notice and the chance to delete your account first.
This is not a preference. It is a binding term of our contract with every member, written into Section 15 of our Terms & Conditions. Collective Loft exists because creative people keep getting used by platforms that hold all the leverage. We fund this platform with membership fees precisely so that you are the customer and never the product.
We do not use advertising cookies, third-party tracking pixels, or behavioral targeting technologies beyond those described above.
The full list of who receives your data is below, and it is the whole list. Sharing with the service providers that run the Platform, under contracts that bar them from using member data for their own purposes, is the only sharing we do. See the Data Covenant in Section 1.
We may disclose your information when required by law, subpoena, court order, or government request.
Collective Loft never stores your payment card information, which only our processors see. Membership billing is handled by Paddle as merchant of record; collaboration payments are handled by Stripe. We keep our own record of each membership transaction (amount, tax, date, status) so your billing history is visible to you and to no other member, and so a charge or a refund is never invisible to us.
If Collective Loft permanently ceases operation, all member personal data is deleted within 90 days of shutdown. You get at least 30 days notice and the ability to export your own content first. Only legally required records survive, such as billing records kept 7 years, and only for their mandated retention period.
Update your profile information directly through your account settings at any time.
You can close your account yourself at any time. Open the menu and choose Close your account, confirm your email and password, and the closure happens immediately. Your profile, photos, portfolio, and links are deleted, and any subscription is cancelled so you are not charged again.
Collaborations you completed remain on record for the people you worked with, credited to a former member rather than to you. Ratings, agreed terms, and the shared contents of a Loft Studio are part of another person's history as much as your own, so they are not removed when you leave. Your name, contact details, and profile content are.
If you would rather we handle it, or you want data removed that closing your account does not cover, contact us through the Help page at collectiveloft.com/help or write to hello@collectiveloft.com. We process those requests within 30 days.
California residents have rights under the CCPA. We do not sell personal information. Contact hello@collectiveloft.com.
Users in the EEA, UK, or Switzerland have rights under GDPR. Contact hello@collectiveloft.com.
Member data is stored in the United States. Our database, authentication, and file storage run on Supabase in its us-west-1 region in Northern California, and the Platform itself is hosted on Vercel in the United States. If you use Collective Loft from the EEA, the UK, or Switzerland, your personal data is transferred to and processed in the United States.
Each processor named in Section 4 handles member data under a data processing agreement that commits it to act only on our instructions, to secure the data, to notify us of any breach, to disclose its subprocessors, and to delete member data when our relationship ends. Transfers of EEA, UK, and Swiss personal data to the United States rely on the Standard Contractual Clauses incorporated in those agreements. We keep copies of these agreements on file, and you may request confirmation of them at hello@collectiveloft.com.
The Platform is exclusively for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18.
We will notify you by email at least 14 days before material changes take effect. Changes that weaken the Data Covenant require at least 30 days notice and never apply retroactively to data collected before they take effect.