Privacy Policy

Influencermatch Inc. ("we", "our", or "us") respects and protects your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use Influencermatch (the "Service"), and the rights you have under applicable law.

Please read this Policy carefully before using the Service. By using the Service, you confirm that you have read and agree to this Policy. We may update this Policy from time to time, and we will notify you in advance of material changes as described in Section 13.

1. Data Controller

The data controller for the Service is:

• Company name: Influencermatch Inc.
• Registered address: San Francisco, CA, USA
• Privacy contact email: support@influencermatch.tech (legal & privacy)
• Data Protection Officer (DPO): Not applicable

2. Information We Collect

2.1 Information you provide directly to us:

• Account Information: Name, email address, password (stored encrypted/hashed), and profile information when you register for an account.
• Brand Information: Brand details, products, target markets, marketing goals, and budget information you provide when creating brand profiles.
• Campaign Data: Campaign details, influencer selections, performance metrics, and spending information.
• Payment Information: Transaction amounts and payment status. We do not store complete credit card numbers — card data is handled by our payment processor (see Section 5).
• Communication Data: Information you provide when contacting support, including support emails, tickets, and feedback.
• AI-Generated Content: Inputs and outputs processed through our AI systems, retained for content moderation and service improvement.

2.2 Information we collect automatically:

• Device & network: IP address, device model, operating system, browser type, and time zone.
• Usage behavior: Pages visited, features used, operation logs, and session duration.
• Log data: Request timestamps, error logs, and performance data.

3. How We Use Your Information

Each purpose below is paired with the legal basis on which we rely:

Purpose	Legal Basis
Providing and maintaining the Service	Performance of a contract
Billing and payment processing	Performance of a contract
Customer support	Performance of a contract / Legitimate interests
Service notifications (billing, security, policy updates)	Legitimate interests
Security and fraud prevention	Legitimate interests
Product optimization and analytics	Legitimate interests
Legal compliance	Legal obligation
Marketing communications (optional)	Consent

We may aggregate or de-identify data for statistical analysis. Such data cannot be used to identify any individual.

4. Cookies & Tracking Technologies

We use a minimal set of cookies and similar technologies:

Type	Purpose	Can be disabled
Strictly necessary	Maintaining your login session and authentication	No

We currently use only session and authentication cookies, which are strictly necessary for the Service to function and cannot be disabled. We do not currently use third-party analytics, advertising, or marketing tracking tools. If we introduce them in the future, we will update this Policy and provide an opt-out mechanism.

5. Sharing & Disclosure of Information

We do not sell your personal information, including as "sale" is defined under applicable laws such as the CCPA. We share your information only in the following circumstances:

• Service Providers: Cloud hosting, payment, support, and similar vendors, bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor, Waffo Pancake, and is not stored on our servers.
• Legal & regulatory requirements: Where required by law, court order, or a lawful request from a competent authority.
• Business transactions: In the event of a merger or acquisition, with advance notice and continued protection obligations.
• With your consent: For other purposes only with your explicit prior consent.

6. Data Security

• Encryption in transit: TLS / HTTPS.
• Storage security: Sensitive data such as passwords is encrypted or hashed.
• Access control: Principle of least privilege; staff are bound by confidentiality agreements.
• Regular security audits and vulnerability scanning.

If a security incident occurs that affects your rights, we will notify you and the relevant supervisory authorities as required by law within 72 hours of discovery. Please keep your account credentials safe and do not share them with others.

7. Data Retention

Data Type	Retention Period	Disposal
Account information	While your account is active; up to 3 years after closure	Deletion or anonymization
Transaction records	As required by tax/accounting law	Deletion or archival
Support records	3 years	Secure deletion
Security audit logs	12 months	Secure deletion

8. Your Data Rights

To exercise any of the rights below, please contact us. We will respond within 30 calendar days.

Right	Description
Right to be informed	Know what data we collect and how we use it
Right of access	Obtain a copy of your personal information
Right to rectification	Correct inaccurate or incomplete information
Right to erasure	Request deletion of your data under certain conditions
Right to restriction of processing	Suspend processing in certain circumstances
Right to data portability	Receive your data in a machine-readable format
Right to object	Object to processing based on legitimate interests or marketing
Right to withdraw consent	Withdraw consent for consent-based processing

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications & Opt-Out

With your consent, we may send marketing communications (such as product updates, offers, and tips) by email, SMS, or in-app notifications. You can opt out at any time by clicking the "unsubscribe" link in our emails, turning off marketing notifications in your account settings, or contacting us. Opting out of marketing does not affect essential service notifications (such as billing and security alerts).

10. International Data Transfers

Our servers and partners may be located in countries other than your country of residence. Where we transfer data across borders, we safeguard it by:

• Entering into data processing agreements that incorporate the EU Standard Contractual Clauses (SCCs).
• Transferring only to recipients that provide an equivalent level of protection.

11. Children's Privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from individuals below that age. If you believe your child has provided us with information, please contact us immediately and we will delete it as soon as possible.

12. Third-Party Links & Services

The Service may contain links to third-party sites or integrate with third-party services. This Policy applies only to information we collect directly. We are not responsible for the data practices of third parties, and we encourage you to review their policies before using them.

13. Changes to This Policy

If we make material changes, we will notify you at least 15 days in advance via a platform notice or your registered email address, and we will update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance.

14. Contact Us

• Privacy contact email: support@influencermatch.tech (legal & privacy)
• Customer support email: support@influencermatch.tech (general support)
• Company name: Influencermatch Inc.
• Mailing address: San Francisco, CA, USA