Privacy Policy

InfluencerGate ("we", "us", or "our") operates an influencer campaign management platform that connects brands with influencers and content creators. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our platform, website, and related services (collectively, the "Service").

By registering for or using InfluencerGate, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.

1. Who We Are

InfluencerGate is a B2B SaaS platform designed for brands, marketing agencies, content creators, and influencer talent. Our platform facilitates the full campaign lifecycle — from influencer discovery and booking through contract management, deliverable tracking, and payment processing.

2. Information We Collect

2.1 Account & Identity Information

When you register, we collect:

• Full name and email address
• Password (stored as a cryptographic hash — never in plain text)
• Company name (optional)
• Assigned role (e.g., Brand Manager, Influencer, Campaign Controller)
• Account approval status and any rejection reasons
• Last login timestamp

2.2 Influencer Profile Data

If you register as an influencer or content creator, we collect additional profile information:

• Bio, profile image URL, niche/category, and pricing range
• Location (country, region)
• Audience demographics: age range, gender split percentages, spoken languages
• Aggregated performance metrics: total followers, average engagement rate
• Verified badge status

2.3 Social Media Account Data

When you connect a social media account, we collect and store data retrieved via that platform's API, including:

• Platform name (Instagram, Facebook, YouTube, TikTok, Twitter/X, LinkedIn)
• Username and profile URL on that platform
• Followers count, engagement rate, average likes, comments, and views
• Audience demographics (country distribution, age range)
• 30-day reach and impression estimates
• Story view averages (where available)
• Platform-assigned user ID and OAuth access tokens (encrypted at rest)
• Last sync timestamp

2.4 Campaign & Deliverable Data

• Campaign titles, descriptions, budgets, goals, and timelines
• Deliverable specifications (platform, content type, quantity, notes)
• Submission URLs linking to publicly posted content
• Performance metrics submitted after content goes live (views, likes, comments, shares, reach)
• Reviewer feedback and revision notes
• Campaign materials and branded assets uploaded by brands

2.5 Contract & Payment Data

• Digital contract terms, signature timestamps, and signer identity
• Payment milestone amounts and statuses
• Payment request records and proof-of-payment documents (receipts, bank statements)
• Bank account details provided for payment (stored encrypted)
• Payment dispute records and resolutions

2.6 Usage & Technical Data

• IP address and approximate location derived from it
• Browser type, operating system, and device type
• Pages visited, features used, and actions taken within the platform
• API request logs including endpoint, duration, and response status
• WebSocket connection events for real-time notifications

2.7 PR Campaign Data

For users who manage PR campaigns, we also store data about media portal directories, news outlet assignments, press release submissions, and associated coverage tracking.

2.8 Publicly Available Creator & Content Data

To build and maintain our influencer discovery directory, we collect a limited set of publicly available information about creators who have not yet registered with InfluencerGate. This information is gathered from public social media profiles and public posts (via official platform APIs where available, and otherwise from publicly accessible pages), and may include:

• Public username, display name, profile URL, and public biography
• Profile image and content thumbnails from public posts (see Section 6 and your rights)
• Public engagement signals such as follower counts, view counts, likes, and comments
• Links to publicly posted content and its title or description
• Self-identified niche, category, or location where publicly stated

We do not collect private messages, contact details, or any content restricted from public view. A creator may claim, correct, or request removal of their discovered profile at any time — see Sections 6 and 10.

3. How We Use Your Information

We use collected data for the following purposes:

• Account management: To create, maintain, and secure your account; verify identity; and manage role-based access control.
• Platform operation: To enable campaign creation, influencer discovery, deliverable tracking, contract management, and payment workflows.
• Social metrics: To synchronise and display performance data from connected social accounts within the platform.
• Notifications: To send in-app and real-time WebSocket notifications about campaign updates, approvals, payment requests, and other relevant events.
• Analytics & reporting: To generate campaign performance reports and ROI calculations for brands and influencers.
• Security & fraud prevention: To detect and prevent unauthorised access, abuse, or fraudulent activity.
• Legal compliance: To meet obligations under applicable laws, including data protection regulations.
• Platform improvement: To analyse usage patterns and improve platform features and user experience.

We do not use your personal data for targeted advertising to third parties, and we do not sell your data.

4. Legal Bases for Processing

Where applicable data protection laws require a legal basis (e.g., GDPR), we rely on:

• Contract performance: Processing necessary to deliver the Service you signed up for.
• Legitimate interests: Platform security, fraud prevention, product improvement, and maintaining a discovery directory of publicly available creator information, balanced against your rights and freedoms.
• Legal obligation: Compliance with applicable laws and regulations.
• Consent: Where you have explicitly given consent (e.g., connecting social media accounts via OAuth, or claiming a discovered profile).

5. Social Platform Integrations

InfluencerGate supports OAuth connections to Instagram, Facebook, YouTube, TikTok, Twitter/X, and LinkedIn. When you authorise a connection:

• You will be redirected to the social platform's own login and authorisation screen.
• We request only the specific read-only scopes required for metrics retrieval (e.g., follower counts, engagement data). We never post, comment, or message on your behalf.
• OAuth access tokens returned by the platform are stored in our database, which is encrypted at rest, and are used only by our servers to retrieve your metrics.
• You may revoke access at any time from within your account settings or directly on the social platform.
• Revoking access will stop future metric syncs but will not automatically delete historical data already collected. You can ask us to delete it at any time (see below).

Data retrieved from social platforms is governed by those platforms' own privacy policies in addition to ours. We recommend reviewing the privacy policy of each platform you connect.

5.1 YouTube (YouTube API Services)

InfluencerGate uses YouTube API Services. By connecting your YouTube channel, you agree to be bound by the YouTube Terms of Service, and your data is also handled under the Google Privacy Policy.

• What we access: read-only access (the youtube.readonly scope) to your channel's ID, name, handle, profile image, and its subscriber, view, and video counts; and the view, like, and comment counts of the videos you submit as campaign deliverables.
• How we use it: to show your channel statistics to you, to brands you work with or that are considering you, and to platform administrators; and to verify that campaign videos were published from your channel and measure their performance.
• How we share it: only within InfluencerGate, with the brands and administrators described above. We do not sell YouTube data, use it for advertising, or transfer it to third parties except the infrastructure providers that host our service.
• Storage: your access and refresh tokens and the statistics above are stored in our database and refreshed daily while your channel is connected.
• Revoking access: disconnect YouTube in your InfluencerGate account, or remove InfluencerGate from your Google Account at Google security settings.
• Deletion: email privacy@influencergate.com to have the YouTube data we hold about you deleted. We complete deletion within 7 days of your request.

InfluencerGate's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5.2 TikTok

Connecting TikTok uses TikTok Login Kit. Your use of TikTok remains subject to the TikTok Terms of Service and the TikTok Privacy Policy.

• What we access: your TikTok user ID, display name, @username, profile image and profile link (user.info.basic, user.info.profile); your follower, following, like, and video counts (user.info.stats); and the view, like, comment, and share counts of your public videos (video.list).
• How we use it: to show your TikTok statistics to you, to brands you work with or that are considering you, and to platform administrators; and to confirm that campaign videos were posted from your account and measure their performance.
• How we share it: only within InfluencerGate, as above. We do not sell TikTok data or use it for advertising.
• Revoking access: disconnect TikTok in your InfluencerGate account, or in the TikTok app go to Profile → Menu → Settings and privacy → Security → Manage app permissions, and remove InfluencerGate.
• Deletion: email privacy@influencergate.com to have the TikTok data we hold about you deleted. We complete deletion within 7 days of your request.

6. Discovered Profiles, Images & Content Rights

6.1 Profile Images and Content Thumbnails

We collect and display profile images and content thumbnails associated with creators' public profiles and posts so that brands can browse and evaluate creators within the platform. We store these thumbnail-resolution images so they display reliably across the Service. We do not collect or store full-length videos or original high-resolution media; the underlying content remains on the relevant social platform and is accessed by users through outbound links to that platform.

6.2 Intellectual Property of Creators

Profile images, thumbnails, and content remain the property of the creator or their respective rights holders. We display these images solely to operate the discovery directory and campaign-management features of the Service, and we do not claim any ownership of that material. When a creator claims their profile, our Terms govern the permissions granted to us to continue displaying their images and thumbnails on the platform.

6.3 Claiming, Correcting, or Removing a Discovered Profile

If you are a creator and your profile, profile image, or content thumbnails appear on InfluencerGate without your registration, you may:

• Claim the profile to take control of the information we display and how it is used;
• Request correction of inaccurate information; or
• Request removal of the discovered profile together with any cached images and thumbnails.

Upon a verified removal request, we will delete the discovered profile and the associated cached images and thumbnails from our active systems within a reasonable period, subject to any legal retention obligations. To make such a request, use the claim flow within the platform or contact us using the details in Section 15.

7. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

7.1 Within the Platform

• Brand managers can view influencer profiles, metrics, and deliverable statuses for campaigns they manage.
• Influencers can view campaign briefs and materials assigned to them by brands.
• Campaign Controllers and Admins can view all campaign and payment data for oversight purposes.
• All data access within the platform is governed by role-based and row-level security policies.

7.2 Service Providers

We use trusted third-party providers to operate the platform, including Supabase (database and authentication infrastructure). These providers act as data processors and are contractually bound to protect your data and use it only as instructed.

7.3 Legal Requirements

We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of InfluencerGate, our users, or others.

8. Data Retention

We retain personal data for as long as necessary to provide the Service and fulfil the purposes described in this policy:

• Account data: Retained for the duration of your account and for a reasonable period after deletion to comply with legal obligations.
• Campaign and contract data: Retained for the duration of the campaign and at minimum 3 years thereafter for financial and legal record-keeping.
• Payment records: Retained for a minimum of 7 years to meet standard financial record-keeping requirements.
• OAuth tokens: Retained until you disconnect the social account or your account is deleted.
• Discovered profiles & images: Publicly sourced creator data, profile images, and content thumbnails are retained while the profile remains relevant to our directory, and are deleted upon a verified removal request or once a set retention period elapses without the profile being claimed.
• Usage logs: Retained for up to 90 days for security and debugging purposes.

9. Security

We implement industry-standard security measures, including:

• Passwords hashed using bcrypt via Supabase Auth.
• OAuth tokens and sensitive payment data encrypted at rest.
• Row-Level Security (RLS) policies on all database tables enforcing per-user data isolation.
• JWT-based session tokens with automatic expiry and refresh.
• HTTPS/TLS encryption for all data in transit.
• Rate limiting (200 requests/minute per IP) to prevent brute-force and abuse.
• Role-based access control enforced at both frontend and API layers.

No system is completely secure. If you believe your account has been compromised, please contact us immediately.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing activities based on legitimate interests.
• Withdrawal of consent: Withdraw consent at any time (e.g., disconnecting a social account).
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Removal of a discovered profile: If you have not registered, request that we remove your discovered profile along with any stored profile image and content thumbnails (see Section 6).

To exercise any of these rights, please contact us at the details below. We will respond within 30 days.

11. Cookies and Local Storage

InfluencerGate uses browser local storage and session cookies to maintain your authenticated session via JWT tokens issued by Supabase Auth. These are strictly necessary for the platform to function. We do not use third-party advertising cookies or tracking pixels. If you clear your browser storage, you will be logged out.

12. Children's Privacy

InfluencerGate is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

13. International Data Transfers

Your data may be processed and stored on servers located outside your home country, including in jurisdictions with different data protection laws. Where such transfers occur, we rely on appropriate safeguards (such as standard contractual clauses) to protect your data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification and update the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: