Privacy Policy

1. Information We Collect

Account Information

When you register, we collect your name, email address, profile photo (if signing in with Google), and any profile information you provide such as your social media handles, bio, and contact details.

Usage Data

We automatically collect information about how you interact with our Service, including:

• Pages visited and features used
• Deal and invoice data you enter
• AI analysis requests and results
• Session duration and frequency of use
• Device type, browser, and operating system
• IP address and approximate location

Payment Information

Payment processing is handled entirely by Paddle. We do not store your credit card or bank account details. We receive only transaction confirmation data (plan purchased, amount, date) from Paddle.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and manage your account
• Power AI features (contract analysis, media kit generation) using your input data
• Send transactional emails (receipts, account alerts, password resets)
• Respond to your support requests
• Monitor usage patterns to prevent abuse and improve performance
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data Storage & Security

Your data is stored using the following infrastructure:

• Supabase – Database storage for your account, deals, invoices, and profile data. Data is hosted on AWS infrastructure in the EU region.
• Vercel – Application hosting and serverless functions. Infrastructure is distributed globally with data processed in Vercel's edge network.

We implement industry-standard security measures including encryption in transit (TLS) and at rest. Access to production databases is restricted to authorized personnel only.

4. Third-Party Services

We use the following third-party services to operate InfluenceKit:

Each of these services has its own privacy policy governing their data handling. We encourage you to review their policies.

Connecting your Instagram account

Connecting Instagram is optional. InfluenceKit works fully without it — you can enter your own figures by hand, as most creators do. Connecting simply lets us keep those figures current and lets brands see that they came from Instagram rather than a text box.

What we receive. If you connect an Instagram professional account, we receive your username, profile picture, follower and following counts, your number of posts, and — for your recent posts — the thumbnail, link, likes and comments. We also receive account-level insights for the last 28 days: reach, views, profile views and total interactions.

What we do not receive. We never receive your password, your direct messages, the identities of your followers, or anything about accounts other than your own. We only ask Instagram for two permissions: read access to your basic profile, and read access to your own insights. We cannot post, comment, or message on your behalf.

How it is used. Strictly to show and price your own work: your media kit, your rate calculator, your growth charts, and the deal tools you use. We do not use Instagram data for advertising, we do not sell it, we do not share it with other creators, and we do not build audience profiles from it. Brands see only what appears on a media kit or public profile you have chosen to publish.

How long we keep it. Your access token is encrypted and stored only while the connection is active. Synced posts are limited to your most recent ones and are refreshed rather than accumulated. Daily follower history is kept so your growth chart has something to draw.

How to disconnect. Three ways, all of which work:

• In InfluenceKit: Settings → Connected accounts → Disconnect.
• In Instagram: Settings → Apps and websites → Remove. Instagram tells us, and we revoke it on our side automatically.
• Ask Meta to delete the data we hold. We delete your connection, your synced posts and your Instagram-collected history, then give you a link showing exactly what was removed.

When you disconnect, your figures stay on your profile so a media kit you are sharing does not suddenly go blank — but they stop being marked as verified, and become yours to edit like any number you typed yourself.

5. Cookies

We use the following types of cookies:

• Essential cookies – Required for authentication and to keep you logged in. These cannot be disabled.
• Preference cookies – Store your language and theme preferences.

We do not use advertising or tracking cookies. You can control cookies through your browser settings, though disabling essential cookies will prevent you from using the Service.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained while your account exists
• After account deletion, we retain anonymized usage data for analytics for up to 90 days
• Payment records are retained for 7 years as required by applicable law
• Backup copies may persist for up to 30 days after deletion

You may request deletion of your account and associated data at any time by contacting us at support.influencekit@gmail.com.

Deleting connected Instagram data

To delete the Instagram data we hold about you, without closing your InfluenceKit account, use any of these:

• In InfluenceKit: Settings → Connected accounts → Disconnect. This deletes the connection and the stored access token immediately.
• In Instagram: Settings → Apps and websites → find InfluenceKit → Remove. Instagram notifies us and we revoke our side automatically.
• Through Meta's data deletion request: Meta sends us the request, we delete your connection, every synced post and all Instagram-collected history, and we return a link showing exactly what was removed and when. Keep that link — it is a receipt you can check at any time.
• By email: write to support.influencekit@gmail.com and we will do it by hand and confirm.

Deleting your whole InfluenceKit account also removes everything above.

7. Your Rights

You have the following rights regarding your personal data:

• Access – Request a copy of the personal data we hold about you
• Correction – Request correction of inaccurate or incomplete data
• Deletion – Request deletion of your personal data
• Portability – Request your data in a portable, machine-readable format
• Objection – Object to certain types of processing of your data

To exercise any of these rights, contact us at support.influencekit@gmail.com. We will respond within 30 days.

8. GDPR Compliance

For users in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance – Processing necessary to provide the Service you have subscribed to
• Legitimate interests – Improving our Service and preventing fraud
• Legal obligation – Compliance with applicable laws
• Consent – Where we have obtained your explicit consent

You have the right to lodge a complaint with your local data protection authority if you believe we have processed your data unlawfully.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we will also send an email notification to registered users. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries or to exercise your data rights, please contact us: