Privacy Policy

1. Who we are

Influking is an influencer marketing platform that connects brands with creators, and provides the tools to run, track and pay for campaigns. The platform is operated by Sphinx Solutions, registered at 6th Floor, Olympia, Mumbai-Bangalore Highway, near Supreme HQ, Baner, Pune, Maharashtra 411045.

In this policy, "Influking", "we", "us" and "our" mean Sphinx Solutions. "You" means anyone whose personal information we handle, whether you are a brand representative, a creator, or simply visiting our website.

For the purposes of data protection law, we are the controller of the personal information described here, except where we act as a processor on a brand's behalf; see the section on campaign data below.

2. Who this policy covers

Different people use Influking in different ways, and we handle their information differently:

Brands: companies and their staff who create accounts to find creators and run campaigns.
Creators: influencers who create a profile, connect social accounts, and accept campaign work.
Visitors: anyone browsing our public website without an account.

This policy does not cover the practices of third parties. When you connect a social media account, or click through to a brand's own website, that platform's or company's privacy policy governs what they do with your information.

3. Information we collect

Information you give us

Account details: name, email address, phone number, password, and your role (brand or creator).
Brand profile: company name, website, industry, team members, billing contact.
Creator profile: display name, bio, photograph, location, languages, content categories, rate card, portfolio samples, and any audience statistics you choose to share.
Verification details: identity or address documents where we need them to verify a creator or process a payout.
Payment details: bank account or UPI details, tax identifiers, and invoices. Card details are handled by our payment provider and are not stored on our systems.
Communications: messages exchanged through the platform, campaign briefs, feedback, and anything you send to our support team.

Information from your connected social accounts

Creators can connect accounts such as Instagram, YouTube or TikTok. When you do, we receive information those platforms make available through their official APIs, subject to the permissions you grant: typically your handle and profile details, follower count, post and reel performance, engagement rates, and aggregate audience demographics such as age bands, gender split and top locations.

We ask only for the permissions the platform needs to function. You can disconnect an account at any time from your dashboard, or revoke our access in the social platform's own settings. See the section on connected accounts for what happens to that data afterwards.

Information we collect automatically

Device and technical data: IP address, browser type, operating system, device identifiers, and language settings.
Usage data: pages viewed, searches and filters used, features accessed, and timestamps.
Cookies and similar technologies: described in the cookies section.

Information from other sources

We may receive information about you from publicly available sources, analytics and measurement partners, fraud prevention services, and from a brand or creator you are working with on a campaign.

4. How we use your information

We use personal information to:

Create and manage your account, and authenticate you when you sign in.
Match brands with creators whose audience, category and performance fit a campaign brief.
Display creator profiles and performance metrics to brands searching the platform.
Run campaigns: briefs, deliverables, approvals, scheduling and content delivery.
Measure campaign performance and produce reporting for the brand involved.
Process payments to creators and collect fees from brands.
Provide customer support and respond to your questions.
Send service messages about your account, campaigns, security and policy changes.
Send marketing communications, where you have opted in or where we are otherwise permitted to. You can unsubscribe at any time.
Detect and prevent fraud, fake engagement, spam and abuse of the platform.
Improve the platform: analysing which features are used, diagnosing faults, and developing new functionality.
Comply with legal, tax and regulatory obligations, and enforce our Terms of Service.

We do not sell your personal information.

5. Our legal bases for using it

Where data protection law requires us to identify a legal basis, we rely on the following:

Performance of a contract: to provide the platform, run campaigns and process payments under our Terms of Service.
Legitimate interests: to secure the platform, prevent fraud, understand how the service is used, and grow our business, where those interests are not overridden by your rights.
Consent: for marketing communications, non-essential cookies, and connecting your social accounts. You can withdraw consent at any time, without affecting processing already carried out.
Legal obligation: for tax, accounting, and responses to lawful requests from authorities.

6. Connected social accounts

Connecting a social account is optional, but most of the platform's value for creators depends on it. Brands look for verified audience and performance data when choosing who to work with.

We use that data to build your public creator profile, to make you discoverable in brand searches, and to report on campaign performance. We use it only for those purposes. We do not post on your behalf without your explicit action, and we do not read your private messages except where you have specifically enabled a messaging feature that requires it.

If you disconnect an account, we stop collecting new data from it immediately. Historical metrics already attached to a completed campaign are retained as part of that campaign's record (a brand's reporting would otherwise be incomplete), but they are no longer updated, and your profile stops displaying live figures.

Our use of information received from these platforms' APIs also complies with each platform's own developer policies and terms.

7. What brands and creators see about each other

Influking is a two-sided marketplace, so some information is shared between users by design:

Brands can see a creator's public profile: display name, photograph, bio, categories, location, rate indications, portfolio, follower counts, engagement rates and aggregate audience demographics. Contact and payment details are shared only once a campaign is agreed.
Creators can see the brand's name, campaign brief, deliverables, timelines and agreed fees.
Both can see messages, files and approvals exchanged within a campaign.

You control what appears on your profile. If you would rather not be discoverable, you can set your profile to private in your dashboard. You will still be able to apply to campaigns directly.

When we handle campaign data on a brand's instructions, that brand is the controller of it and we act as processor under a data processing agreement.

We share personal information only in these circumstances:

With other platform users: as described in the section above.
With service providers: companies that host our infrastructure, process payments, send email, provide analytics, or help us support you. They act on our instructions and may not use your information for their own purposes.
With social platforms: where you connect an account, to authenticate and retrieve data you have authorised.
For legal reasons: where we must comply with a law, court order or lawful request, or where disclosure is necessary to protect our rights, your safety, or the safety of others.
In a business transfer: if we are involved in a merger, acquisition, financing or sale of assets, information may transfer as part of that transaction. We will tell you before your information becomes subject to a different privacy policy.
With your consent: for anything else.

9. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, keep the platform secure, and understand how the site is used.

Strictly necessary: authentication, security and load balancing. The site does not work without these.
Preferences: remembering settings such as language or saved filters.
Analytics: aggregate statistics about how visitors use the site, so we can improve it.
Marketing: measuring the performance of our own advertising, where you have consented.

You can control cookies through your browser settings, and refuse non-essential cookies where we ask for consent. Blocking strictly necessary cookies will prevent you from signing in.

10. International transfers

We and our service providers may process personal information in countries other than your own, including countries whose data protection laws differ from those where you live.

Where we transfer personal information out of a jurisdiction that restricts such transfers, we put appropriate safeguards in place: typically standard contractual clauses approved by the relevant regulator, together with technical and organisational measures. You can request a copy of the relevant safeguards using the contact details below.

11. How long we keep it

We keep personal information for as long as your account is active, and afterwards only as long as we need it:

Account and profile data: deleted or anonymised within 90 days of you closing your account.
Campaign records, invoices and payment data: retained for the period required by tax and accounting law, even after an account closes.
Support correspondence: retained while it remains useful for handling related queries.
Data needed to prevent fraud or resolve a dispute: retained until the matter is resolved and any limitation period has expired.

12. Your rights and choices

Depending on where you live, you may have some or all of the following rights over your personal information:

Access: ask for a copy of the information we hold about you.
Correction: ask us to fix information that is inaccurate or incomplete.
Deletion: ask us to erase your information, where we have no continuing need or legal obligation to keep it.
Restriction and objection: ask us to limit how we use your information, or object to processing based on legitimate interests.
Portability: receive your information in a structured, machine-readable format.
Withdraw consent: at any time, where we relied on consent.
Complain: to your local data protection authority.

Users in India have rights under the Digital Personal Data Protection Act, 2023, including the right to access, correct and erase personal data, to nominate another person to exercise your rights, and to raise a grievance with our Grievance Officer. Users in the European Economic Area and the United Kingdom have the rights set out in the GDPR. Residents of California and other US states with comparable laws have rights to know, delete, correct and opt out of the sale or sharing of personal information. We do not sell or share personal information as those laws define it.

To exercise any right, contact us using the details below. We will respond within the period the applicable law requires, and may need to verify your identity first.

13. How we protect information

We use technical and organisational measures appropriate to the risk: encryption of data in transit, access controls limiting who on our team can see what, logging, and regular review of our security practices. Payment card details are handled by a PCI-DSS compliant payment provider and never touch our servers.

No system is completely secure, and we cannot guarantee absolute security. Choose a strong, unique password, keep it confidential, and tell us immediately if you believe your account has been compromised.

14. Children

Influking is not intended for children. You must be at least 18 years old to create an account, whether as a brand representative or a creator.

We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it. If you believe a child has provided us with personal information, contact us at sales@influking.com.

15. Changes to this policy

We may update this policy as the platform develops or the law changes. The "last updated" date at the top of the page always reflects the current version.

If we make a material change, for example using your information for a genuinely new purpose, we will tell you by email or through a notice on the platform before the change takes effect, so you have a chance to review it.

16. How to contact us

For any question about this policy, or to exercise your rights:

Email: sales@influking.com
Post: Sphinx Solutions, 6th Floor, Olympia, Mumbai-Bangalore Highway, near Supreme HQ, Baner, Pune, Maharashtra 411045

Under India's Digital Personal Data Protection Act, 2023, our Grievance Officer is Ajay Wadne, reachable at sales@influking.com. If you are not satisfied with how we handle your grievance, you may escalate it to the Data Protection Board of India.