Privacy Policy

Infludeal is operated by [Your company name], [Registered address, Cyprus] (“we”). We are the data controller under the EU General Data Protection Regulation (GDPR). Questions or requests: privacy@infludeal.com.

What we collect and why

• Account data (email, encrypted password, account type): to create and secure your account. Legal basis: contract.
• Creator profile data (industries, platforms, follower counts, audience age, gender split and locations, languages, rates, description): shown to registered businesses so they can assess a match. Legal basis: contract.
• Creator contact data (name, contact email, phone, social handles, website): kept separately and disclosed only to a business that pays to unlock your profile. Legal basis: contract; you choose to publish or hide your profile at any time.
• Business data (company name, website, industry, country, search preferences): used to rank matches. Company name, industry, country and website are shown to creators whose contact you unlocked.
• Purchase and subscription records (date, amount, credits, PRO subscription status and renewal date, campaign application fees, Stripe references): to deliver purchases and meet accounting law. Legal basis: contract and legal obligation.
• Verification data (Instagram username, follower count you state, and a screenshot of your follower statistics): to check you control the account and that your numbers are real. Only our team sees it. The screenshot is deleted as soon as we decide; we keep the username and outcome. Your username is never shown to businesses before they reveal your contact. Legal basis: your request (contract) and our legitimate interest in accurate listings.
• Campaigns and applications: a business's campaign brief and company name are shown to creators. When a creator applies, their anonymous profile is shown to that business; contact details only after a reveal. Public text is automatically checked for contact details, which are not allowed there. Legal basis: contract.
• Notifications: in-app messages about campaigns, applications and verification. Legal basis: contract.

We do not collect card details; payments are handled by Stripe. We do not sell personal data, run advertising trackers or use analytics cookies.

Who receives your data

• Supabase: database and login, hosted in the EU.
• Vercel: website hosting.
• Stripe Payments Europe: payment processing.
• Businesses that unlock a creator (including by revealing a campaign applicant): receive that creator's contact data and become independent controllers of it. Creators can see which businesses these are in their dashboard.

Where a provider processes data outside the EEA, this happens under the EU Standard Contractual Clauses or an adequacy decision.

Cookies

We only use strictly necessary cookies that keep you signed in. They do not require consent and are not used for tracking.

How long we keep data

Profile and contact data: until you delete your account. Purchase records: as long as tax law requires (currently six years in Cyprus), then deleted.

Your rights

• Access and portability: download your data any time under Account.
• Rectification: edit your profile any time.
• Erasure: delete your account under Account; data is removed immediately.
• Restriction and objection: hide your profile, or write to us.
• Complaint: you may complain to your data protection authority. In Cyprus, that is the Office of the Commissioner for Personal Data Protection.

Age

Infludeal is for people aged 18 or over.

Security

Data is encrypted in transit and at rest. Access is restricted per account at database level, and contact details are released only after a verified unlock.