Privacy Policy

01 Who We Are

influ.market is an online influencer marketing platform that connects brands with content creators. For the purposes of data protection law, influ.market is the data controller responsible for your personal data.

Contact: hello@influ.market

02 What Data We Collect

We collect personal data in the following categories:

Account & Registration Data

• Full name and display name
• Email address
• Password (stored in hashed form — never in plain text)
• Account type (Brand or Creator)
• Profile photo (if uploaded)
• Country / location
• Registration date and IP address

Brand-Specific Data

• Company name and website
• Industry / niche
• Campaign details (title, description, budget, deadlines, deliverables)
• Billing information (processed via third-party payment provider)

Creator-Specific Data

• Bio and niche categories
• Connected social media accounts and associated metrics (see Section 3)
• Bank account or PayPal details for payouts (stored encrypted)
• Identity verification documents (if requested for payout compliance)
• Wallet balance and transaction history

Usage & Technical Data

• IP address and approximate geolocation
• Browser type and version
• Device type and operating system
• Pages visited, session duration, and click patterns
• Referral source (how you arrived at influ.market)

Communication Data

• Messages exchanged between Brands and Creators through the platform messaging system
• Support tickets and correspondence with influ.market
• Dispute records and submitted evidence

03 Social Media Account Data (OAuth)

When a Creator voluntarily connects a social media account (Instagram, TikTok, YouTube, or X/Twitter), we access data through the official OAuth authorization process of each platform. You explicitly grant this access and may revoke it at any time.

The data we access and store includes:

OAuth access tokens are stored securely and used solely to periodically refresh your public metrics. Tokens are encrypted at rest. You may disconnect any social account at any time from your profile settings, which will immediately revoke our access and remove your metrics from your public profile.

For YouTube connections, your use is also subject to the Google Privacy Policy and the YouTube Terms of Service. You may revoke influ.market's access to your Google data at any time via Google Security Settings.

04 Payment & Transaction Data

influ.market processes payments through a third-party payment provider. We do not store full credit card numbers or sensitive card data on our servers. Payment data handled by influ.market includes:

• Transaction amounts and dates
• Escrow funding and release records
• Platform fee calculations
• Creator wallet balance and payout history
• Payout destination details (bank account or PayPal — stored encrypted)

All payment processing complies with applicable financial regulations. Creators may be required to provide identity verification documents (e.g., government-issued ID) to comply with anti-money-laundering (AML) regulations before payouts are processed.

05 How We Use Your Data

We use your personal data for the following purposes:

• Account management: Creating and maintaining your account, authenticating your identity, and providing access to platform features.
• Platform functionality: Enabling campaign creation, creator discovery, messaging, content submission, and collaboration management.
• Creator verification: Verifying social media follower counts and calculating engagement rates to ensure platform quality standards.
• Payments & escrow: Processing campaign funding, holding funds in escrow, releasing payments upon approval, and processing Creator payouts.
• Dispute resolution: Reviewing communication history, campaign briefs, and submitted content to mediate disputes between Brands and Creators.
• Platform improvement: Analyzing usage patterns to improve features, fix bugs, and optimize user experience.
• Security: Detecting and preventing fraud, abuse, unauthorized access, and violations of our Terms of Service.
• Legal compliance: Fulfilling obligations under applicable laws, including tax reporting and financial regulations.
• Communications: Sending transactional emails (account confirmation, payment notifications, dispute updates) and, with your consent, platform updates and announcements.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

06 Legal Basis for Processing

Where applicable under GDPR and similar regulations, we process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you registered for (account management, payments, campaigns).
• Legitimate interests: Platform security, fraud prevention, improving our services, and analytics — provided these interests are not overridden by your rights.
• Legal obligation: Compliance with financial regulations, tax laws, and law enforcement requests.
• Consent: Marketing communications and optional features (e.g., connecting social accounts). You may withdraw consent at any time.

07 Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

Within the Platform

Creator profile information (name, bio, niche, social metrics, engagement rate, top media) is visible to registered Brands on the platform. This is the core function of the service and is necessary for collaboration discovery.

Third-Party Service Providers

We work with trusted third-party providers to operate the platform:

• Payment processors (e.g., Stripe, PayPal) — for processing campaign payments and Creator payouts
• Cloud hosting providers — for secure data storage and platform infrastructure
• Email delivery services — for transactional and notification emails
• Analytics tools — for understanding platform usage (anonymized or aggregated data only)

All third-party providers are contractually bound to process data only as instructed by influ.market and in compliance with applicable data protection laws.

Social Media Platforms

When you connect a social media account via OAuth, data is retrieved from that platform's API. Your use of those platforms is governed by their own privacy policies.

Legal Requirements

We may disclose your data if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of influ.market, our users, or the public.

08 Data Storage & Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Passwords stored using strong one-way hashing (bcrypt)
• OAuth tokens and payout details stored encrypted at rest
• HTTPS encryption for all data transmitted between your browser and our servers
• Access controls limiting data access to authorized personnel only
• Regular security reviews and vulnerability assessments

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to notifying affected users promptly in the event of a data breach that poses a risk to their rights and freedoms.

09 Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specific retention periods:

• Account data: Retained for the duration of your account. Deleted within 30 days of a verified account deletion request, subject to legal obligations.
• Transaction & payment records: Retained for a minimum of 5–7 years to comply with financial and tax regulations.
• Messages & campaign records: Retained for 2 years after the collaboration is completed, or longer if a dispute is pending.
• Social media OAuth tokens: Deleted immediately upon disconnection of the linked account.
• Security logs: Retained for up to 12 months for fraud detection and security purposes.

After the applicable retention period, data is securely deleted or anonymized.

10 Cookies & Tracking

influ.market uses cookies and similar technologies to operate the platform and improve your experience. We use the following types of cookies:

• Essential cookies: Required for the platform to function (session management, authentication, security). These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, cookie consent status).
• Analytics cookies: Help us understand how users interact with the platform (pages visited, session duration). Used in anonymized or aggregated form. Only set with your consent.

When you first visit influ.market, you will be presented with a cookie consent banner. You may accept all cookies or reject non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the site.

We do not use cookies for advertising or cross-site tracking.

11 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal retention obligations.
• Right to restriction: Request that we limit the processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@influ.market. We will respond within 30 days. We may need to verify your identity before processing your request.

12 International Data Transfers

influ.market may store and process your data on servers located outside your country of residence. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we transfer data only to countries with an adequacy decision.

13 Children's Privacy

influ.market is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user under 18 has registered, we will delete their account and associated data promptly. If you believe a minor has registered, please contact us at hello@influ.market.

14 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify registered users via email or an in-platform notification, and update the "Last updated" date at the top of this page.

Continued use of influ.market after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

15 Contact & Data Requests

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Email: hello@influ.market
• Platform: influ.market

We aim to respond to all data-related requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.