Privacy Policy

1. Information We Collect

Account Information

When you register, we collect your name, email address, profile photo (if signing in with Google), and any profile information you provide such as your social media handles, bio, and contact details.

Usage Data

We automatically collect information about how you interact with our Service, including:

• Pages visited and features used
• Deal and invoice data you enter
• AI analysis requests and results
• Session duration and frequency of use
• Device type, browser, and operating system
• IP address and approximate location

Payment Information

Paid plans are sold through Polar, which acts as the merchant of record: Polar processes your card or wallet payment, issues the receipt and handles sales tax. We never see or store your full card details. From Polar we receive your plan, its status and renewal date, the amount paid and the email you paid with.

Getting paid by brands (Deal Link, when available)

If you use Deal Link to get paid by a brand, we collect what we need to pay you: your full name as on your ID, your Qatar ID number and your bank IBAN. The brand's payment is processed by Tap Payments; from the brand we collect a contact name, work email and phone number for the receipt and the deal. We use these details only to run that payment, pay you and keep the records the law requires. Bank details are never shown to brands.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and manage your account
• Power the AI features, including Autopilot, your AI manager: the messages and screenshots you send it, and the data in your account it needs to answer (deals, invoices, rates, media kit, connected-account statistics)
• Send transactional emails (receipts, account alerts, password resets)
• Respond to your support requests
• Monitor usage patterns to prevent abuse and improve performance
• Comply with legal obligations

Anonymous rate benchmarks

When you analyze a brand offer or tell us how a deal ended, we keep the deal details (deliverables, amounts, brand category, your follower range, niche and platform) to make price suggestions more accurate for you and for other creators. These details are only ever used in combination: a benchmark is shown only when it combines deals from at least three different creators, and it never includes your name, handle, contact details or the text of your messages. We may publish aggregate statistics from these benchmarks, such as average rates by platform and audience size in the Gulf. If you delete your account, your deals are removed from future benchmarks.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data Storage & Security

Your data is stored using the following infrastructure:

• Supabase – Database storage for your account, deals, invoices, and profile data. Data is hosted on AWS infrastructure in the EU region, which means your data is stored outside Qatar.
• Vercel – Application hosting and serverless functions. Infrastructure is distributed globally with data processed in Vercel's edge network.

We implement industry-standard security measures including encryption in transit (TLS) and at rest. Access to production databases is restricted to authorized personnel only. Connected-account access tokens are additionally encrypted by us before they are stored.

Data stored outside Qatar. Because our providers host data in the European Union and other regions, your personal data is transferred outside Qatar. We only use providers bound by written data-protection terms, we send them only what each service needs, and these transfers are part of providing the Service you ask for. Section 8 has more detail.

4. Third-Party Services

We use the following third-party services to operate InfluenceKit:

Each of these services has its own privacy policy governing their data handling. We encourage you to review their policies.

Connecting your Instagram account

Connecting Instagram is optional. InfluenceKit works fully without it — you can enter your own figures by hand, as most creators do. Connecting simply lets us keep those figures current and lets brands see that they came from Instagram rather than a text box.

What we receive. If you connect an Instagram professional account, we receive your username, profile picture, follower and following counts, your number of posts, and — for your recent posts — the thumbnail, caption, link, likes and comments, plus each post's reach, views, saves and shares. We also receive account-level insights for the last 28 days (reach, views, profile views, accounts engaged and total interactions) and Instagram's audience breakdown: the share of your followers by age range, gender, country and city. That breakdown is totals only, as Instagram reports it; it never identifies a follower.

What we do not receive. We never receive your password, your direct messages, the identities of your followers, or anything about accounts other than your own. We only ask Instagram for two permissions: read access to your basic profile, and read access to your own insights. We cannot post, comment, or message on your behalf.

How it is used. Strictly to show and price your own work: your media kit, your rate calculator, your growth charts, and the deal tools you use. We do not use Instagram data for advertising, we do not sell it, we do not share it with other creators, and we do not build profiles of individual people from it: the audience breakdown stays the aggregate totals Instagram gives us, shown to you and, only if you choose, on your media kit. Brands see only what appears on a media kit or public profile you have chosen to publish.

How long we keep it. Your access token is encrypted and stored only while the connection is active. Synced posts are limited to your most recent ones and are refreshed rather than accumulated. Daily follower history is kept so your growth chart has something to draw.

How to disconnect. Three ways, all of which work:

• In InfluenceKit: Settings → Connected accounts → Disconnect.
• In Instagram: Settings → Apps and websites → Remove. Instagram tells us, and we revoke it on our side automatically.
• Ask Meta to delete the data we hold. We delete your connection, your synced posts and your Instagram-collected history, then give you a link showing exactly what was removed.

When you disconnect, your figures stay on your profile so a media kit you are sharing does not suddenly go blank — but they stop being marked as verified, and become yours to edit like any number you typed yourself.

Connecting your TikTok account

Connecting TikTok is optional. You sign in on TikTok's own page; we never see your password.

What we receive. With the permissions you approve (user.info.basic, user.info.profile, user.info.stats and video.list), we receive your display name, username, profile picture, bio, verified status and profile link; your follower, following, likes and video counts; and, for your recent videos, the cover image, link, caption, length and their views, likes, comments and shares.

What we do not receive or do. We cannot post, comment, message or change anything on your TikTok account, and we receive nothing about other people's accounts.

How it is used. The same way as Instagram data: your growth charts, your best videos and best day to post, your media kit and your rate calculator. We never sell it or use it for advertising.

How to disconnect. In InfluenceKit, open Connect accounts (or Settings) and choose Disconnect on TikTok. That deletes the access token we hold and the videos and daily history our sync saved; the figures on your profile stay as your own, self-reported numbers. You can also remove InfluenceKit in TikTok under Settings and privacy → Security → Manage app permissions: TikTok tells us and we delete the same data automatically.

Connecting your YouTube channel

InfluenceKit uses YouTube API Services. Connecting YouTube is optional, and by connecting it you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

What we receive. With read-only access (youtube.readonly), we receive your channel's name, picture and subscriber, view and video counts, and for your recent videos the title, thumbnail, link, publish date and their views, likes and comments. We cannot upload, edit, delete, comment or change anything on your channel.

How it is used and stored. Only to show and price your own work: growth charts, best videos, media kit and rate calculator. It is stored in our database (Supabase) with the access token encrypted, refreshed automatically, and never sold, shared with other users, or used for advertising.

Limited Use. InfluenceKit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How to disconnect. Disconnect YouTube in InfluenceKit (Connect accounts or Settings), or revoke InfluenceKit's access at any time on Google's security settings page. Disconnecting in InfluenceKit deletes the access token and the YouTube data we hold (your synced videos and daily history) straight away; the figures on your profile stay as your own, self-reported numbers. If you revoke access on Google's side instead, Google does not tell us, so we delete the same data within 30 days of our access stopping working. You can also ask us to delete it at any time (section 11).

Pictures of your posts

Instagram's and TikTok's picture links expire, so when your account syncs we keep a copy of each recent post's picture in our storage. That way your analytics and media kit keep showing your real posts. These copies are only shown to you, and to brands on a media kit you choose to publish, and they are deleted when you ask us to delete your data.

5. Cookies

We use the following types of cookies:

• Essential cookies – Required for authentication and to keep you logged in. These cannot be disabled.
• Preference cookies – Store your language and theme preferences.

We do not use advertising or tracking cookies. You can control cookies through your browser settings, though disabling essential cookies will prevent you from using the Service.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained while your account exists
• After account deletion, we retain anonymized usage data for analytics for up to 90 days
• Payment, invoice and receipt records are kept for as long as Qatar's commercial and tax laws require, even after account deletion
• Backup copies may persist for up to 30 days after deletion

You may request deletion of your account and associated data at any time by contacting us at support.influencekit@gmail.com.

Deleting connected Instagram data

To delete the Instagram data we hold about you, without closing your InfluenceKit account, use any of these:

• In InfluenceKit: Settings → Connected accounts → Disconnect. This deletes the connection and the stored access token immediately.
• In Instagram: Settings → Apps and websites → find InfluenceKit → Remove. Instagram notifies us and we revoke our side automatically.
• Through Meta's data deletion request: Meta sends us the request, we delete your connection, every synced post and all Instagram-collected history, and we return a link showing exactly what was removed and when. Keep that link — it is a receipt you can check at any time.
• By email: write to support.influencekit@gmail.com and we will do it by hand and confirm.

Deleting your whole InfluenceKit account also removes everything above.

7. Your Rights

You have the following rights regarding your personal data:

• Access – Request a copy of the personal data we hold about you
• Correction – Request correction of inaccurate or incomplete data
• Deletion – Request deletion of your personal data
• Portability – Request your data in a portable, machine-readable format
• Objection – Object to certain types of processing of your data
• Withdraw consent – Where we rely on your consent (for example a connected Instagram, TikTok or YouTube account), withdraw it at any time by disconnecting; this does not affect processing that already took place
• Be told about a breach – Be informed if a breach of your personal data may cause you serious harm

To exercise any of these rights, contact us at support.influencekit@gmail.com. We will respond within 30 days. These rights come from Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016) and, for users in the EEA or United Kingdom, the GDPR. If you are not satisfied with our answer, you can complain to the competent data protection department of Qatar's National Cyber Security Agency, or to your local data protection authority.

8. Legal Bases, Transfers & Breaches

We process personal data only for the clear, legitimate purposes in section 2, on these bases (under Qatar's Law No. 13 of 2016 and, for users in the EEA or United Kingdom, the GDPR):

• Contract – To provide the Service and the plan you signed up for, and to run Deal Link payments you take part in
• Consent – For connected Instagram, TikTok and YouTube accounts, and for marketing emails. You can withdraw it at any time
• Legitimate interests – Keeping the Service secure, preventing fraud and abuse, and improving it, in ways you would reasonably expect
• Legal obligation – Keeping accounting and tax records and answering lawful requests from Qatari authorities

Transfers outside Qatar. Our providers (section 4) store and process data in the European Union, the United States and other regions. We use only providers that commit in writing to protect the data and to use it only on our instructions, and we do not transfer data where doing so would breach Qatar's law.

Security breaches. If a breach of personal data could cause you serious harm, we will tell you and the competent authority in Qatar without undue delay, explain what happened and what we are doing about it.

Marketing. We only send marketing emails with your consent, and every one has a way to stop them. Emails about your account, payments and security are not marketing.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we will also send an email notification to registered users. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries or to exercise your data rights, please contact us: