This Privacy Policy explains how InfluencerMetric (“we”, “us”) collects, uses, stores, and protects your personal data when you use influencermetric.com. We comply with applicable data-protection laws, including the EU General Data Protection Regulation (GDPR) where it applies. We process your data on the basis of your consent and for the lawful purposes described below.
1. Information We Collect
We collect information you provide directly: name, email address, phone/WhatsApp number, profile information, payment and KYC details (e.g. government-ID details and payout account details), and content you create. We also collect usage data automatically, including IP address, browser type, pages visited, and actions taken on the platform.
2. Instagram and Social Account Data
When you connect your Instagram account to InfluencerMetric, we access and store the following data from the Instagram API (via Meta's platform):
- Instagram username and profile information
- Follower count and following count
- Post/media count
- Profile picture URL
- Engagement metrics (likes and comments on recent posts)
- Access tokens required to retrieve the above data
This data is used exclusively to display verified creator statistics to brands on the InfluencerMetric platform and to authenticate your identity as a creator. We do not post, publish, or modify any content on your Instagram account. We do not sell or share your Instagram data with third parties except as described in Section 4.
You can disconnect your Instagram account at any time from your account settings. Upon disconnection, your Instagram access token is deleted from our systems within 24 hours. To request full deletion of all Instagram data we hold, contact us at privacy@influencermetric.com or visit our data deletion page.
3. How We Use Your Information (Purposes)
- To provide, maintain, and improve the platform
- To display verified creator statistics to brands seeking collaborations
- To process orders, escrow, payouts, taxes, and related transactions
- To send transactional and (with your consent) promotional communications
- To monitor and analyse usage patterns to improve the experience
- To detect, prevent, and address fraud and security issues, and to comply with law
We process your data only for these specified purposes. We will seek fresh consent before using your data for any new purpose.
4. Information Sharing
We do not sell your personal data. We share information only with:
- Service providers (data processors) who help us operate the platform — e.g. hosting, payments (Stripe), email, KYC — under contractual data-protection obligations
- Other users as necessary for a transaction (e.g. a brand sees a creator's stats; parties to an order see each other's contact details)
- Law enforcement or regulators when required by applicable law
Our use of Instagram data obtained via Meta's APIs complies with the Meta Platform Policy.
5. Data Security
We use industry-standard encryption (TLS/HTTPS) for all data in transit. Passwords are hashed using Argon2id. Sensitive columns — social access tokens, KYC references, bank details, and two-factor secrets — are encrypted at rest using AES-256-GCM. We implement role-based access controls, an append-only audit log, rate limiting, and follow OWASP security guidelines. Despite reasonable safeguards, no system is perfectly secure; in the event of a personal data breach, we will notify affected users and the relevant supervisory authorities as required by applicable law.
6. Cookies
We use essential cookies for authentication and session management. We use analytics cookies to understand platform usage only with your consent — a consent banner lets you accept or decline them, and you can change your choice at any time via the "Cookie preferences" link in the site footer or your browser settings.
7. Your Privacy Rights
Under applicable data-protection laws (including the GDPR where it applies), you have the right to:
- Access a copy of the personal data we process about you
- Correct or update inaccurate or incomplete data (most of this you can do directly in your profile/settings)
- Erase your personal data (you can delete your account from Settings, or request erasure)
- Withdraw consent at any time — as easily as you gave it; this does not affect processing already carried out
- Data portability — receive your data in a structured, commonly used format, where applicable
- Complain — raise a complaint with us (Section 11) or with your local data-protection authority
To exercise any of these rights, contact privacy@influencermetric.com. We will respond within the timelines required by law.
8. Data Retention
We retain your data only for as long as your account is active or as needed to provide the service. When you delete your account, your personal data is removed within 30 days, except where we are legally required to retain certain records (for example, financial, tax, and transaction records, which we keep for the statutory period). Instagram access tokens are deleted immediately upon account disconnection.
9. Children
InfluencerMetric is intended for users aged 18 and above. By creating an account you confirm that you are at least 18 years old. We do not knowingly process the personal data of anyone under 18, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If we learn that we have collected a child's data, we will delete it.
10. Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.
11. Complaints & Contact
You may contact us for any privacy concern, rights request, or complaint:
- Complaints contact: Nahid Saleem
- Email: grievance@influencermetric.com
- General privacy queries: privacy@influencermetric.com
Complaints are acknowledged within 24 hours and resolved within 15 days of receipt.