PRIVACY POLICY
Protecting and respecting data privacy is important to InfluencerMarketing.ai (“IMAI,” “we,” “us,” or “our”). In this privacy policy (“Privacy Policy”), we describe how we collect, use, and disclose information that we obtain about visitors and registered users who use or otherwise interact with the InfluencerMarketing.ai platform (the “Platform” or the “Service”).
Your use of our Platform or Service, and any dispute over privacy, is subject to this Privacy Policy, our Terms of Service, and any other agreement you may have with IMAI. As used in this Privacy Policy, “Personal Information” is any information that we can reasonably use to identify you.
In short, we collect data about a wide range of influencers around the world – including but not limited to TikTok, YouTube, and Instagram users who have become popular with a sizeable number of followers (“Influencer(s)”). We process this information to provide our Platform users, who are representatives of companies and brands (“User(s)”), with information about Influencers and their online performance. This helps our Users analyze and determine which Influencers they may want to engage based on their marketing needs and business activities.
California Residents: Additional information for California residents may be found below under “Additional Information For California Residents”.
EU/EEA Residents: Additional information for individuals in the EU/EEA may be found below under “Additional Information for Individuals in the EU/EEA”.
1. Additional Definitions
For the purposes of this Privacy Policy:
“Creator Account” means a social media or content account operated by an Influencer on a third-party platform such as Instagram, TikTok, YouTube or similar platforms.
“Connected Account” means a Creator Account that an Influencer has actively connected to the Platform, for example by logging in through the Platform, authorizing access via an interface provided by the social media platform, or otherwise granting us permission – through a third-party provider – to access data from that Creator Account for the purposes described in this Privacy Policy.
“MagicSocial” means the connection and authentication layer powered by Phyllo that we use to securely link certain Creator Accounts to our Platform. MagicSocial / Phyllo is an independent third party.
2. Information We Collect And How It Is Collected
We collect Personal Information solely for business purposes. We collect Personal Information about you directly from you, from third-party sources, and automatically through your use of our Platform. We may also combine the Personal Information that we collect from the various sources described below.
2.1 Information we collect directly from you through our Platform
The information we collect directly from you includes, for example:
Your name, email address and contact details
Login credentials that you create to access our Platform (such as username and password)
Company or brand details, job title and role
Any other information that you choose to provide to us through the Platform (for example, when you book a demo, contact support, or upload content or campaign details).
This information is generally referred to as “Registration Information” when it relates to your Platform account.
2.2 Public information generated by the Influencer’s online activities
We collect publicly available information that is generated by Influencers’ online activities on social media platforms, including Instagram, TikTok and YouTube. This public information about Influencers includes, for example:
Name and social media nickname or handle
General location (such as country or state) where available
Social media profile image
Gender and personal characteristics where publicly disclosed
Social media content posted by the Influencer (including captions, hashtags and brands advertised by the Influencer)
Public social media performance data (e.g., number of followers, engagement rate, likes over time, assessed follower credibility, and follower demographics where publicly available).
We refer to this information as “Influencer Information”. We process this information to help Users search for desired Influencers across various search parameters and to help them assess which Influencers may fit their marketing needs.
2.3 Information we collect from Creator Account connections (MagicSocial / Phyllo)
In addition to public Influencer Information, Influencers may choose to connect one or more Creator Accounts to our Platform in order to provide more detailed campaign and performance data to Users. This connection is optional and is facilitated through MagicSocial, a Phyllo-powered service that securely links Creator Accounts to our Platform.
When you connect a Creator Account, you will see a MagicSocial / Phyllo interface or pop-up that explains the connection and links to Phyllo’s End User Privacy Policy. By proceeding, you authorize MagicSocial / Phyllo to access certain data from your Creator Account and to share that data with IMAI as described in this Privacy Policy and Phyllo’s own policies. MagicSocial / Phyllo does not post, modify or delete your account data on our behalf.
Depending on the platform you connect (for example, YouTube, TikTok, Instagram), on the permissions you grant, and on the features that you or our Users choose to use, we may receive from MagicSocial / Phyllo some or all of the following categories of information from your Connected Account:
Profile and identity information associated with your Creator Account, such as full name, display name or handle, profile photo, profile description, links you publish on your profile, verified or business status, and general geo information made available by the platform.
Content and engagement information, such as posts, stories, reels, videos and similar content, along with associated captions, hashtags, timestamps, content identifiers or URLs, and engagement metrics such as views, impressions, likes, dislikes, comments, saves and shares.
Audience and analytics information made available by the relevant platform, such as aggregated demographic information about your followers and audience (for example age ranges, gender breakdowns, top locations and interests) and follower growth or activity patterns, to the extent this data is provided by the platform and covered by your authorization.
Campaign and performance information related to campaigns run or tracked via the Platform, such as which content was associated with a campaign, campaign identifiers, tracking links and coupon codes, link-click performance, conversions, attributed revenue, and other performance indicators used by Users to measure results.
Technical and diagnostic data such as device type, IP region and platform-provided logs that help verify integration status and maintain the security and performance of our Services.
We do not receive or store your social media platform passwords. Authentication and access control are handled securely by MagicSocial / Phyllo and/or the underlying platform using their standard mechanisms (for example OAuth), and we receive tokens or data as permitted by those mechanisms and your choices.
2.4 Information we collect automatically through tracking technologies
We and our service providers automatically collect certain information through your use of our Service using cookies and other tracking technologies. This information may include, without limitation:
Information about your operating system, browser and device
Device IDs and other identifiers
Push notification tokens
IP address and approximate location
Device model and hardware characteristics
The webpages you access within our Service
The website that led you to our Service
The website to which you go after leaving our Service
The number of times you access our Service, including the dates and times you do so
Other Service usage data, including clicks, views, navigation patterns and feature usage.
3. How We Use Your Information (Business Purpose)
We use the Personal Information we collect for the following business purposes and in reliance on the legal bases described below (for individuals in the EU/EEA and UK).
3.1 Providing Our Services
We collect and process Users’ basic contact information to allow them to access and use the Platform. We collect and process a User’s name, email address and chosen password to authenticate User access to the Platform and to manage their account. We refer to this data as “Registration Information”.
The legal basis under EU law for collecting and processing your Registration Information is our legitimate interest in operating and managing User access to the Platform and performing our contract with you.
3.2 Customized Experience
We use your information to tailor the content and information that we may send or display to you, to offer personalized help and instructions, and to personalize your experience while using the Service.
3.3 Connecting Influencers and Users
As noted above, we process Influencer Information, including information received from Connected Accounts via MagicSocial / Phyllo, to help Users search for and evaluate suitable Influencers across various search parameters and to measure campaign performance.
The legal basis under EU law for collecting and processing Influencer Information is our legitimate interest in providing sophisticated influencer search, management and measurement capabilities that facilitate the needs of Users to find and collaborate with Influencers.
3.4 Campaign and performance analytics
Where Influencers connect Creator Accounts and allow us to receive campaign performance data, we use that data to:
Attribute content to specific campaigns
Measure reach, engagement, conversions and sales
Provide campaign and ROI reports to relevant Users
Improve attribution models and detection of invalid or fraudulent activity
Generate aggregate statistics and benchmarking information.
Our legal basis is our legitimate interest in providing accurate reporting and analytics to Users and, where applicable, your consent as provided through the platform or through MagicSocial / Phyllo.
3.5 Data consumption and usage metrics
We collect and process metrics about the data that each User consumes on our Platform to gauge data consumption, manage entitlements, and determine business costs and profitability of the User.
The legal basis under EU law for collecting and processing these metrics is our legitimate interest in operating our business and managing our commercial relationships.
3.6 Marketing and Communications
We use your contact information to provide you with news and newsletters, research, and other items of interest, including marketing communications about our products and services. You may opt out of marketing emails at any time using the unsubscribe link in those emails. Even if you opt out of receiving promotional messages, you will continue to receive administrative and transactional messages from us.
3.7 Surveys
We may use your information to administer surveys and questionnaires, such as for market research or customer satisfaction purposes.
3.8 Research and Analytics
We use information (including aggregated or de-identified information) to analyze how users interact with our Platform, and for other research, analytical, and statistical purposes, including to improve and develop our products and services.
3.9 Protecting Rights and Interests
We may use your information to protect our rights and interests as well as the rights and interests of our users and any other person, as well as to enforce this Privacy Policy and our Terms of Service.
3.10 Legal Compliance
We may use your information to comply with applicable legal or regulatory obligations, including informal requests from law enforcement or other governmental authorities, and to respond to legal process.
4. With Whom We Share Your Data (Third Parties)
We will not share your information with third parties, except in the events listed below or when you provide us your explicit and informed consent.
4.1 Affiliates
We may disclose information to any current or future affiliates, parent companies, or subsidiaries of IMAI. The legal basis under EU law for sharing personal information in the event of a change in our corporate structure is our legitimate interests in our business continuity and corporate organization.
4.2 Service Providers (including MagicSocial / Phyllo)
We may disclose your information to our vendors, service providers, agents, or others who perform functions on our behalf. For example, we process Personal Information with the assistance of service providers who help us with:
Cloud hosting and storage
Authentication and connection of Creator Accounts
Data processing and analytics
Customer support and communications
Security, fraud detection and error monitoring.
In particular, for Creator Account connections, we use MagicSocial, a service powered by Phyllo, to securely link your social media accounts and to obtain Creator Account data that you authorize to be shared. MagicSocial / Phyllo acts as an independent processor or sub-processor, and your use of MagicSocial is also subject to Phyllo’s own terms and privacy policy as presented to you at the time of connection.
These companies are authorized to use Personal Information only as necessary to provide these services to us and not for their own unrelated purposes.
4.3 Users
We will share Influencer Information – including certain data from Connected Accounts where applicable – with our Users via our Platform. We will share Influencer Information with our Users to allow them to consider collaborating with different Influencers, to manage campaigns, and to measure campaign results.
4.4 Business Transfers
We may disclose information to another entity if we are or may be acquired by or merged with another company, if we sell or transfer a business unit or assets to another company, as part of a bankruptcy proceeding, or as part of any other similar business transfer. If the surviving entity involved in such a transfer is not IMAI, in accordance with applicable law, the surviving company may use the information we collect about you pursuant to its own privacy policies, which may be different from this Privacy Policy.
4.5 Protecting Rights and Interests
We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service or this Privacy Policy, or as evidence in litigation in which we are involved.
4.6 Legal Compliance
We may disclose your information to comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; in response to a subpoena, warrant, court order, or other legal process; or as part of an investigation or request, whether formal or informal, from law enforcement or a government official. Further, we will share Registration Information with competent authorities and other third parties (such as legal counselors and advisors) if a User has abused its right to use the Service, or violated any applicable law.
The legal basis under EU law for processing Personal Information for the purpose of handling instances of abusive use of the Service is our legitimate interests in defending and enforcing against violations and breaches that are harmful to our business. The legal basis under EU law for processing personal information where we are legally required to share it is our legitimate interests in complying with mandatory legal requirements imposed on us.
4.7 Aggregate and De-Identified Information
We may disclose aggregate, anonymous, or de-identified information about you for marketing, advertising, research, compliance, security or other purposes.
5. Security and Data Retention
We implement measures to secure Personal Information and to reduce the risks of damage, loss of information and unauthorized access or use of information, such as secured HTTP and other industry-standard safeguards. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure Personal Information, it is not guaranteed, and one cannot expect that the Service will be immune from all information security risks.
We will retain Registration Information while the User is engaged with us. We will retain Registration Information for as long as the User is engaged under a service agreement with us and thereafter as necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims and enforce our agreements.
We may retain Influencer Information and campaign performance data, including data obtained from Connected Accounts, for as long as necessary to provide our Services to Users, support historical reporting and benchmarking, and comply with legal obligations. Where required by law or upon valid request, we will delete or anonymize such data, subject to our need to retain certain information for legal, security or contractual reasons.
If you disconnect a Creator Account at the platform level or via MagicSocial / Phyllo, we will no longer receive new data from that account. We may continue to retain previously received data to the extent permitted by law and required to support our Services and legal obligations.
6. Use of Google Workspace APIs
We explicitly affirm that Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.
In our use of Google Workspace APIs, we strictly adhere to the intended purposes of these APIs, which is to enhance our Service functionality and user experience. We do not use any data obtained through Google Workspace APIs for the development, improvement, or training of generalized artificial intelligence (AI) or machine learning (ML) models.
Our commitment to data privacy and ethical use of technology extends to ensuring that information accessed via Google Workspace APIs is used solely for the specific, limited purposes outlined in our service agreement and this Privacy Policy.
7. Additional Information for Individuals in the EU/EEA
InfluencerMarketing.ai is the data controller of the personal information processed by the Service.
The following is the data controller for the purposes of the personal data we collect via the Platform:
InfluencerMarketing.ai Ltd
38 Habarzel St. 6971054 Tel Aviv, Israel
Email: [email protected]
Cross-border transfers
Information we collect will generally be processed within the EU/EEA and in Israel, which is recognized by the European Commission as having adequate protection for personal data.
If we transfer personal information from the EU/EEA to other jurisdictions outside the EU/EEA, we will do so using adequate safeguards determined by the EU Commission, such as EU Standard Contractual Clauses. However, this does not apply to Influencer Information that we make available to Users that are located in jurisdictions outside the EU/EEA where such Influencer Information is based on content that the Influencer has already manifestly made public to a global audience.
Your rights under the GDPR
If you are in the EU/EEA, you have the following rights under the GDPR, subject to limitations in applicable law:
Right of access to your personal data that we process and to receive a copy of it.
Right to rectify inaccurate personal data we have concerning you and to have incomplete personal data completed.
Right to data portability, that is, to receive the personal data that you provided to us, in a structured, commonly used and machine-readable format and to transmit it to another service provider, where technically feasible.
Right to object, based on your particular situation, to our processing of your personal data on the basis of our legitimate interests. We may override the objection if we demonstrate compelling legitimate grounds, or for the establishment, exercise or defense of legal claims.
Right to restrict the processing of your personal data (except for storing it) in certain circumstances, for example if you contest the accuracy of your personal data, while we verify its accuracy.
Right to be forgotten. Under certain circumstances, such as when you object to us processing your data and we have no compelling legitimate grounds to override your objection, you have the right to ask us to erase your personal data. However, we may still process your personal data if it is necessary to comply with a legal obligation or for the establishment, exercise or defense of legal claims.
Exercising your rights: If you wish to exercise any of these rights, contact us at [email protected]. We reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide information that you have asked for, we will explain the reason for this.
You also have a right to submit a complaint to the relevant supervisory data protection authority. Subject to applicable law, you may lodge a complaint in the Member State of your residence, place of work or place of alleged infringement of the GDPR.
8. Our Platform is Not Designed for Children
As noted in our Terms of Service, our Platform is designed for individuals who are at least eighteen (18) years of age. We do not knowingly collect Personal Information from children under this age threshold. If we become aware that we have collected Personal Information from a child in violation of this requirement, we will take steps to delete such information.
9. Contact Us
If you have questions about this Privacy Policy or any privacy aspects of our Platform, please contact us at:
InfluencerMarketing.ai Ltd
38 Habarzel St. 6971054 Tel Aviv, Israel
Email: [email protected]
10. Additional Information For California Residents
This notice is provided to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”) and any terms defined in the CCPA have the same meaning when used in this notice. As used in this section, “personal information” means information that meets the definition of “personal information” as set forth in the CCPA and is not otherwise excluded from the scope of the CCPA (e.g., publicly available information).
A California Resident’s Rights Under the CCPA
California residents have the below rights under the CCPA:
Right to know
You have a right to submit a verifiable request for copies of your personal information that IMAI has held over the past 12 months, free of charge, including:
The categories of personal information that we have collected
The categories of sources from which we collected personal information
The business or commercial purpose for collecting, selling, or sharing personal information
The categories of third parties to whom we disclose personal information
The specific pieces of personal information we have collected.
Right to deletion
At your request, we will delete your personal information unless we need to keep such information for legal or business purposes and/or to provide services or further the relationship with us that you have requested (including, but not limited to, your role as an employee or other employment or business relationship).
Right to opt out of sale or sharing
Subject to certain business and legal exceptions, including those noted above, you may request that we stop selling or sharing your personal information for cross-context behavioral advertising. We do not sell Creator Account data.
Right to correct
We will use commercially reasonable efforts to comply with your request to correct any inaccurate personal information.
Right to limit the use and disclosure of Sensitive Personal Information
Subject to certain business and legal exceptions, you may request that we limit the use and disclosure of Sensitive Personal Information, as that term is defined under the CCPA (e.g., social security number, driver’s license number, passport number, account log-in information, and precise geolocation).
Right to data portability
At your request, and subject to certain exceptions, we will provide you free of charge with any of your personal information that we hold, in a structured, commonly used and machine-readable format.
Right to nondiscrimination
You are entitled to exercise the rights described above free from discriminatory treatment prohibited by the CCPA.
Categories of personal information we may collect
The categories of personal information that we may collect about you include, without limitation:
Name
Phone number(s)
Email address(es)
Mailing address(es)
User ID(s), online identifiers, and log-in credentials
Internet Protocol addresses
IMAI’s products or services purchased, obtained, or considered; and other purchasing or consuming histories or tendencies
Date of birth where provided
Internet activity information, such as browsing and search history, and interactions with websites and applications, our systems, and networks
Geolocation data
Social media account information, including handles and profile identifiers, and analytics relating to content and campaigns
Inferences, including inferences drawn from any of the information identified above, to create a profile about you, such as a profile that reflects your preferences, characteristics, behavior, attitudes, abilities, and aptitudes.
Sources from which personal information may be collected
In addition to the sources described above under “Information We Collect And How It Is Collected”, we may also obtain personal information about you from the following sources:
Public sources
Third parties that perform services for us or on our behalf
You or your representative(s), including your employer, if your employer is a client of ours
Government agencies
Automated technologies
Third-party providers such as MagicSocial / Phyllo and social platforms, where you have authorized such sharing.
Purposes for collecting personal information
In addition to the purposes described above under “How We Use Your Information (Business Purpose)”, we may collect your personal information for the following additional business and/or commercial purposes:
Marketing and communications
Training and quality control
Customer education
To provide a customized and personalized list of our products and services that may interest you
To conduct business analysis, planning and reporting
To verify your identity
To protect you (for example, to protect you against fraudulent or illegal activity)
To maintain the accuracy of our records.
Disclosures to third parties
As noted above in the section “With Whom We Share Your Data (Third Parties)”, we may disclose your personal information with the following third parties:
Affiliates, parent companies, or subsidiaries of IMAI
Service providers (including MagicSocial / Phyllo and hosting, analytics, support and security providers)
Users, to whom we provide Influencer Information and campaign performance data as part of our Services.
Exercising your California privacy rights
IMAI will respond to permitted CCPA requests in accordance with applicable laws if it can verify the identity of the individual submitting the request.
You may submit a CCPA request by emailing [email protected] or by using any request form or mechanism that we make available for this purpose.
11. Changes and Updates to this Privacy Policy
This Privacy Policy is reviewed periodically and updated to reflect changes in our practices, legal requirements or services. The “Last Update” date at the bottom of this page indicates when this Privacy Policy was last revised.
Your provision of Personal Information to us and/or your continued use of the Service after any change in this Privacy Policy will constitute your acceptance of such changes. If you do not agree to the updated Privacy Policy, you should discontinue use of the Platform.
The Privacy Policy will always be accessible at: https://influencermarketing.ai/privacy-policy
Last Update: [update date when published]
InfluencerMarketing.ai helps you discover and manage influencers, measure campaign success, and deliver results to clients via a branded interface
InfluencerMarketing.ai
