Privacy Policy

1. Introduction

InfluTo s.r.o. ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password
• Organization Details: Company name, business email (developers only)
• Profile Information: Social media handles, follower counts (influencers only)
• Payment Information: Processed and stored by Stripe (we do not store card details)

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, device type, operating system
• Attribution Data: IP addresses, fingerprints for click tracking (anonymized)
• Analytics: Google Analytics data (anonymized)

3. How We Use Your Information

• Provide and improve the Platform
• Process payments and commissions
• Track conversions and attribute them to influencers
• Send transactional emails (invitations, notifications, password resets)
• Detect and prevent fraud
• Comply with legal obligations
• Analyze platform usage to improve features

4. Information Sharing

We share your information with:

• Stripe: Payment processing and payout distribution
• RevenueCat: Subscription tracking and revenue attribution
• Google Analytics: Website analytics (anonymized)
• Email Service: Transactional email delivery (NameCheap SMTP)

We do not: Sell your personal information. Share your information for marketing purposes. Provide your email to third parties without consent.

5. Cookies & Tracking

We use cookies for:

• Essential Cookies: Authentication, session management
• Analytics Cookies: Google Analytics (can be disabled in browser)
• Attribution Cookies: Track referral clicks for commission attribution

You can control cookies through your browser settings.

6. Data Security

• Passwords are hashed using bcrypt
• Sensitive data is encrypted at rest
• HTTPS/TLS encryption for all data in transit
• API keys and secrets encrypted in database
• Regular security audits and updates

7. Data Retention

We retain your data for as long as your account is active and for 7 years after closure for financial record-keeping and legal compliance. You may request data deletion by contacting us at info@influ.to.

8. Your Rights

Under GDPR and applicable privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Export: Receive your data in a portable format
• Withdraw Consent: Opt out of non-essential data processing
• Object: Object to processing of your data

To exercise these rights, contact us at info@influ.to

9. International Data Transfers

Your data may be processed in the European Union and the United States. We use standard contractual clauses and ensure adequate protection for international data transfers in compliance with GDPR.

10. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced via email or platform notification. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your rights: