Privacy Policy

1. Information you provide to us

We collect information you give us directly when you create an account and use the Platform, including:

• Account details: name, email address, password (stored hashed), and account role (Buyer, Earner, or both).
• Profile information: such as age range, biography, areas of interest, and links to your public social media profiles.
• Campaign content: campaigns you create, task instructions, submissions, proof notes, and uploaded proof files such as screenshots.
• Payment and payout information: processed through our payment provider (Stripe). We do not store full card numbers or bank credentials on our servers; Stripe handles that data under its own terms.
• Communications: messages you send to support, and content you submit to our in-app assistant.

2. Connected social accounts (OAuth)

To verify creator identity and the authenticity of campaign performance, you may choose to connect one or more social media accounts, including TikTok, YouTube/Google, Instagram, Facebook, and X, using each platform's official OAuth authorization.

When you connect an account, we request only the permissions needed for verification and ask for read-only access where possible. With your authorization, we may access and store:

• Your platform account identifier and public handle/username.
• Public profile metrics such as follower or subscriber counts.
• Performance metrics for content you submit to a campaign, such as views, likes, comments, shares, impressions, reach, and similar engagement statistics where the platform makes them available.
• OAuth access and refresh tokens, which are encrypted at rest and used only to retrieve the data described above.

3. How we use connected-account data

We use data obtained through connected social accounts solely to operate verification and campaign features, specifically to:

• Confirm that you own the social account you claim.
• Verify follower/subscriber thresholds for campaign eligibility.
• Verify that submitted content meets campaign performance requirements (for example, a minimum number of organic views).
• Show the Buyer running the campaign the content you selected as proof and the related performance metrics needed to review the submission.
• Detect fraud, fake engagement, and policy violations.

4. Google API Services / YouTube data

PeopleInfluence's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use YouTube API Services to retrieve channel and video statistics for verification. By connecting a YouTube account, you also agree to the YouTube Terms of Service and acknowledge Google's Privacy Policy. You can revoke PeopleInfluence's access to your Google account at any time via your Google security settings at https://myaccount.google.com/permissions, and you can disconnect any platform from within your PeopleInfluence profile.

We do not use Google user data for advertising, we do not sell it, and we do not transfer it except as needed to provide and improve the verification features you request, to comply with law, or as part of a merger or acquisition with equivalent protections.

5. TikTok data

PeopleInfluence uses the TikTok API in compliance with TikTok's Developer Terms of Service and the TikTok Developer and Platform Policies. When you connect a TikTok account, we access your TikTok user identifier, public profile information and handle, and follower and profile statistics. For videos you choose to submit as campaign proof, we also access the video's caption, thumbnail, publish date, and engagement metrics such as views, likes, comments, and shares.

We use TikTok data solely to verify account ownership, campaign eligibility, and content authenticity. We do not use TikTok data for advertising, we do not sell it, and we do not share it except with the Buyer running a campaign you chose to join or as otherwise described in this policy.

TikTok data is retained only as long as needed for verification and is deleted when you disconnect your TikTok account. You can revoke PeopleInfluence's access at any time from your PeopleInfluence profile, or in your TikTok account settings under Security & Login > Manage app permissions.

6. Meta / Instagram / Facebook data

PeopleInfluence uses Meta Platform APIs for Instagram and Facebook in accordance with Meta's Platform Terms, Developer Policies, and applicable user terms. When you connect Instagram or Facebook, we may access the Facebook account or Page information needed to identify the Pages you manage, the Instagram professional account connected to a Page, and the content you choose to submit as campaign proof.

The Meta data we may access includes Facebook Page IDs and names, Instagram professional account IDs and usernames, public profile information, follower or audience counts where available, post/reel/Page post captions, thumbnails or media URLs, permalinks, timestamps, and engagement or insight metrics such as likes, reactions, comments, shares, video views, reach, and impressions where Meta makes those metrics available.

We use Meta data only to verify account ownership, confirm campaign eligibility, let you select Instagram or Facebook content as proof of campaign completion, and show the selected proof and related stats to the Buyer running that campaign. We do not use Meta data for advertising, we do not sell it, and we do not share it except with the Buyer for the campaign you chose to join, with service providers who help us operate the Platform, or as otherwise described in this policy.

When you disconnect Instagram or Facebook, we delete the associated OAuth tokens. Submitted proof records and metric snapshots may be retained as campaign records for dispute resolution, fraud prevention, legal compliance, and payment history. You can also revoke PeopleInfluence's access from your Facebook or Instagram account settings, including Facebook Business Integrations or Apps and Websites settings.

7. X data

PeopleInfluence uses the X API in accordance with the X Developer Agreement, Developer Policy, and applicable user terms. When you connect X, we may access your X account identifier, handle, public profile information, audience metrics, and the posts you choose to submit as campaign proof.

For X posts you choose to submit, we may access the post text, media or thumbnail information, permalink, publish time, and public engagement metrics such as views, likes, replies, reposts, quotes, and bookmarks where X makes those metrics available.

We use X data only for account verification, campaign eligibility, proof review, fraud prevention, and displaying selected proof and related stats to the Buyer running the campaign. We do not use X data for advertising, we do not sell it, and we do not share it except as needed to provide the verification features you request or as otherwise described in this policy. When you disconnect X, we delete the associated OAuth tokens, and you may also revoke access from your X account settings.

8. How we use your information

• To create and manage your account and provide the Platform.
• To match Buyers with eligible Creators and operate campaigns.
• To review submissions for quality, authenticity, disclosure, and compliance (including automated first-pass review).
• To process rewards and payouts and maintain transaction records.
• To detect, prevent, and respond to fraud, abuse, and safety issues.
• To send service communications such as approvals, rejections, and payout notices.
• To comply with legal obligations, including tax reporting where required.

9. How we share information

We do not sell your personal information. We share information only as needed:

• With Buyers: limited Creator profile and submission information necessary to run a campaign the Creator chose to join.
• With service providers: such as our hosting, database/authentication (Supabase), email (Zoho), and payments (Stripe) providers, who process data on our behalf.
• For legal reasons: to comply with law, enforce our terms, or protect the rights, safety, and property of users and the public.
• In a business transfer: as part of a merger, acquisition, or sale of assets, with continued protection of your information.

10. Data retention

We retain information for as long as your account is active and as needed to provide the Platform, comply with legal and tax obligations, resolve disputes, prevent fraud, and enforce agreements. When you disconnect a social account, we delete the associated OAuth tokens. Submitted proof, review decisions, payout records, and metric snapshots may be retained as campaign and compliance records where needed to operate the marketplace. You may request deletion of your account and associated personal data as described below.

11. Security

We use technical and organizational measures to protect your information, including encryption in transit, encryption at rest for sensitive credentials such as OAuth tokens, access controls, and least-privilege service access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Your rights and choices

• Access and update: you can view and edit profile information in your dashboard.
• Disconnect accounts: you can disconnect any linked social account at any time from your profile.
• Deletion: you can request deletion of your account and personal data by contacting privacy@peopleinfluence.com. We may ask you to verify your identity before completing a deletion request.
• Platform revocation: you can revoke PeopleInfluence's access through the connected platform's own app-permissions settings, such as Google account permissions, TikTok app permissions, Facebook/Instagram Apps and Websites or Business Integrations settings, and X connected apps settings.
• Marketing: service messages are part of using the Platform; any future marketing emails will include an unsubscribe option.
• Depending on your location, you may have additional rights under laws such as the GDPR or CCPA/CPRA, including the right to access, correct, delete, or port your data, and to object to or restrict certain processing.

13. Children

The Platform is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information. Creators must meet the minimum age and eligibility requirements stated in our Terms.

14. International users

PeopleInfluence is operated from the United States. If you access the Platform from outside the U.S., you understand your information may be processed in the U.S. and other countries with different data protection laws.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Platform after changes means you accept the updated policy.

16. Contact us

Questions about this Privacy Policy, connected-account data, or deletion requests can be sent to privacy@peopleinfluence.com.