CO—LLAB
Starts Jan 13, 2027Apply by Dec 118 weeks, mostly virtual2 optional NYC studiosFree to participate

[ Royall Co-llab ]

Privacy
Policy

Effective Date: September 18, 2026 · Royall Labs, Inc.

This Privacy Policy explains how Royall Labs, Inc., a Delaware corporation ("Royall," "we," "us," or "our"), collects, uses, discloses and protects personal information in connection with the Royall Co-llab website ("Site") and Co-llab program ("Program").

This Policy should be read together with the Co-llab Terms of Service and, where applicable, the separate privacy notices and consent agreements presented through the Royall Vault.

1. Information We Collect

Information you provide when applying: we may collect information including your name, email address, phone number, location, professional background, skills, creative disciplines, portfolio or work links, experience with AI and creative tools, interests, availability, responses to application questions and other information you choose to provide.

We may also collect information about the types of creative or identity assets you might be interested in using or licensing as part of Co-llab.

Information collected during Co-llab: if you participate, we may collect information relating to your team, Project, contributions, Program participation, tool choices, Co-llab Credit usage, permissions, licensing decisions, Project Agreements, survey responses, Program communications and interactions with mentors, specialists and Royall.

Where you participate in recordings, production sessions, virtual events, studio sessions or the Showcase, we may also collect photographs, audio, video and recordings of your participation.

Royall Vault and identity assets: if you use the Royall Vault, you may provide photographs, video, voice recordings, performances, creative works and other identity or creative assets. We may also maintain records concerning ownership, permissions, consent, authorized uses, duration, licensing terms and other rights associated with those assets.

Biometric and sensitive information: certain Royall services may process information derived from face, voice or other identity assets that may qualify as biometric, sensitive or specially protected information under applicable law. Where applicable, collection and processing of this information is subject to a separate biometric notice and consent agreement presented through the Royall Vault. That agreement may contain additional information about the particular biometric information processed, purpose of processing, disclosure and retention.

Website and device information: when you use the Site, we and our service providers may automatically collect information such as IP address, browser type, device information, referring pages, pages viewed, interactions with the Site and approximate location derived from IP address. We may collect this information through cookies, pixels, SDKs and similar technologies.

2. How We Use Information

We use personal information to review applications and select participants; conduct interviews; assemble teams; operate Co-llab; communicate with participants; administer Co-llab Credits and tools; facilitate Program sessions, production and the Showcase; operate Royall Vault functionality; establish and maintain consent, ownership and licensing records; protect participants and enforce Program rules; respond to support requests; operate, secure and improve our Site, products and services; understand how Co-llab is working; prevent fraud, misuse and unauthorized identity use; comply with legal obligations; and, where permitted, communicate with you about future Royall programs and opportunities.

We may also use aggregated or de-identified information to understand trends in AI, creative work, licensing, consent and identity rights.

3. Your Identity Assets

Your identity belongs to you.

Uploading, registering or storing an identity asset with Royall does not transfer ownership of that asset to Royall.

Royall processes identity assets to provide the services and permissions you request and according to the applicable agreements governing those assets.

Royall does not use your face, voice or other identity assets to train AI models or create synthetic versions of you unless you have separately and expressly consented in writing to that specific use.

Participation in Co-llab does not constitute consent to AI training.

4. Consent and Rights Records

Co-llab is designed to document permissions rather than assume them.

We may maintain records concerning what assets were authorized, who authorized them, permitted users, purposes, duration, commercial terms, restrictions, withdrawals and other relevant rights information.

We may retain these records after an underlying asset is deleted where reasonably necessary to document historical permissions, protect the rights of participants, administer an existing agreement, resolve disputes or comply with legal obligations.

Deleting an asset from a Royall Vault does not by itself retroactively revoke a license or permission that was validly granted before deletion.

5. The Creator's AI Code and Program Learning

Participation in The Creator's AI Code is voluntary.

Royall may learn from the operation of Co-llab, including how teams use tools, navigate consent, structure permissions and approach creative collaboration.

We may use aggregated or de-identified information from Co-llab to understand these patterns, improve our products and programs and contribute to broader education and discussion around AI, identity and creative rights.

We will not publicly attribute an individual opinion, survey response, quotation or Creator's AI Code contribution to you without permission.

Where your participation in The Creator's AI Code involves additional publication or use of your contributions, we will ask for your consent.

You can participate in Co-llab without participating in The Creator's AI Code.

6. How We Share Information

We may disclose personal information to your Co-llab team where necessary for collaboration, permissions and Project administration; mentors and specialists where needed to provide Program support; service providers that help us operate our infrastructure, communications, databases, forms, video services, analytics, file storage, security and other functionality; participating AI and creative tool providers when you or your team choose to use those services; Program partners where necessary to operate or promote Co-llab and consistent with applicable permissions; Showcase attendees and the public where a Project or participant information has been approved for public presentation; professional advisors such as attorneys, accountants and insurers; government authorities or other parties when required by law or reasonably necessary to protect rights, safety or security; and a successor or transaction counterparty in connection with a merger, acquisition, financing, restructuring or sale of Royall or relevant assets.

Third-party services process information under their own terms and privacy policies when you interact directly with them.

We do not give Program partners identifiable application responses or individual Creator's AI Code contributions for their independent use without permission unless otherwise disclosed when the information is collected.

7. Service Providers and Technology

Co-llab uses third-party infrastructure and service providers to operate the Site and Program.

This currently includes Supabase for application and related data infrastructure and may include providers supporting hosting, website functionality, analytics, communications, email, video conferencing, collaboration, file storage and Program operations.

Our Site may use analytics and advertising measurement technologies, including services such as Google Analytics, Meta technologies, LinkedIn technologies, PostHog and analytics or functionality provided through our website platform.

These technologies may collect device, browser and usage information through cookies, pixels and similar technologies.

Where required by applicable law, we will request consent before activating non-essential cookies or similar tracking technologies.

8. Selling and Advertising Use of Personal Information

Royall does not sell identity assets or Program application information merely because you participate in Co-llab.

We do not authorize third parties to commercially exploit your face, voice or likeness without the applicable permission.

Some analytics or advertising technologies can constitute "sharing," "targeted advertising," or similar regulated activity under certain U.S. state privacy laws depending on how they are configured.

Where applicable, we provide legally required choices concerning those technologies.

9. Promotional Uses

Subject to the Co-llab Terms and applicable permissions, Royall may use approved Projects, participant names, biographies, photographs, event footage and other approved materials to operate, document and promote Co-llab and Royall.

You may contact us to ask that we stop new promotional uses of your individual name, image or likeness.

This generally does not require deletion or recall of materials lawfully published or distributed before your request.

10. How Long We Keep Information

We retain personal information for as long as reasonably necessary for the purpose for which it was collected and as required to protect participants, maintain rights records, administer agreements and comply with law.

Applications from people who are not selected for Co-llab will generally be retained for up to 12 months, unless the applicant asks us to delete them earlier or chooses to remain connected with Royall for future programs.

Identity assets stored in your Royall Vault remain subject to your Vault controls and applicable Royall policies and agreements. Where available, you may delete assets through your Vault.

Deletion of an asset does not necessarily require deletion of separate consent, licensing, transaction or rights records, or copies lawfully incorporated into a Project under an existing permission.

Project, consent and licensing records may be retained for the duration of applicable rights or agreements and for a reasonable period afterward for legal, audit, dispute-resolution and rights-management purposes.

De-identified or aggregated information that cannot reasonably identify you may be retained for longer periods.

Biometric information is subject to any additional retention and deletion provisions contained in the applicable biometric notice and consent agreement.

11. Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal information.

These measures may include access controls, encryption in transit and, where supported by our infrastructure, encryption at rest.

No online service or storage system can guarantee absolute security.

If a security incident occurs that requires notification under applicable law, we will provide the required notice.

12. Your Choices and Privacy Rights

Depending on where you live and applicable law, you may have the right to request access to personal information we hold about you; obtain a copy; correct inaccurate information; request deletion; withdraw consent where processing is based on consent; object to or restrict certain processing; request portability; opt out of certain targeted advertising, sale or sharing; limit certain uses of sensitive personal information; and appeal certain decisions concerning a privacy request.

You may also unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the communication.

To exercise a privacy right, contact privacy@royall.ai.

We may need to verify your identity before fulfilling a request. Certain information may be retained where necessary to comply with law, maintain rights and licensing records, protect other participants' rights, establish or defend legal claims, or fulfill an agreement that remains in effect.

We will not discriminate against you for exercising a privacy right.

13. Withdrawing Consent

Where we rely on your consent, you may withdraw that consent for future processing, subject to applicable law and any specific agreement governing the relevant asset or Project.

Withdrawal does not make processing that occurred before withdrawal unlawful.

Withdrawing consent for future use of an identity asset also does not necessarily revoke a previously granted license or require removal of an authorized use from a completed or released Project.

The applicable Identity Permission, Project Agreement or other specific agreement determines those rights.

14. U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law.

Depending on the law and whether it applies to Royall, these may include rights to access, correct or delete personal information; obtain a portable copy; opt out of certain sales, sharing, targeted advertising or profiling; limit certain uses of sensitive information; or appeal a privacy decision.

Where applicable, you may exercise these rights by contacting privacy@royall.ai.

15. Biometric Privacy

Some identity features may involve information that qualifies as biometric information or a biometric identifier under applicable law.

Where Royall collects or processes such information, additional disclosures, consent requirements, retention periods and deletion rights may apply.

Royall provides applicable biometric notices and obtains required consent separately through the Royall Vault.

The Co-llab Terms or this Privacy Policy do not replace a more specific biometric consent agreement.

16. International Participants

Co-llab may accept participants outside the United States.

If you are located in the European Economic Area, United Kingdom or another jurisdiction with applicable data protection requirements, our legal bases for processing may include steps necessary to enter into or perform our agreement with you, your consent, our legitimate interests, and compliance with legal obligations.

Our legitimate interests may include operating and securing Co-llab, protecting participants and identity rights, maintaining accurate rights records, understanding and improving the Program, and preventing misuse.

Where we rely on consent, you may withdraw it as described above.

Subject to applicable law, you may also have rights to access, correction, erasure, restriction, objection, portability and to lodge a complaint with your applicable supervisory authority.

17. International Data Transfers

Royall is based in the United States.

If you participate from another country, your personal information may be transferred to and processed in the United States and other countries where our service providers operate.

Where required by applicable law, Royall uses appropriate mechanisms or safeguards for international transfers.

18. Cookies and Similar Technologies

We and our service providers use cookies, pixels and similar technologies to operate the Site, remember preferences, understand usage, measure performance and, where enabled, measure or support marketing.

These technologies may include Google Analytics, Meta, LinkedIn, PostHog and technologies supplied by our website and infrastructure providers.

Where legally required, non-essential technologies will be subject to consent choices.

You may also control certain cookies through your browser or device settings. Blocking some technologies may affect Site functionality.

19. Third-Party Services

Co-llab may use third-party AI tools, collaboration platforms, communication services and other technologies.

When you choose to provide information directly to one of those services, its privacy policy and terms may govern that service's processing.

Before providing another participant's identity or creative asset to a third-party service, you must have the permissions required for that use.

20. Children

Co-llab is intended only for people who are at least 18 years old.

We do not knowingly accept Program applications from children under 18. If we learn that we collected personal information from a child through an application contrary to this requirement, we will take reasonable steps to delete it.

21. Changes to This Privacy Policy

We may update this Privacy Policy as Co-llab, Royall or applicable laws change.

We will post the updated Policy with a revised effective date. If a change materially affects current participants or how we use previously collected personal information, we will provide additional notice where required.

We will not use an update to this Policy to retroactively expand an identity permission that requires your consent.

22. Contact Us

Royall Labs, Inc.Mailbox #6431178 Broadway, 3rd FloorNew York, NY 10001United States

For general legal inquiries: legal@royall.ai

For copyright and DMCA notices: dmca@royall.ai

U.S. Copyright Office Designated Agent Registration No. DMCA-1072820

Apply now